I have enabled 2FA for my npm account, and thus CI is not allowed to publish releases on my behalf without my manual intervention.