X_TRUST_PUBLISHER_FAILED
Means
attaching a trusted publisher failed
Typical cause
npm rejected the call for a reason other than auth — most often E409, a stale config from an earlier attempt that must be revoked before it can be replaced
Fix
the fix names the package; revoke the old one (npm trust list <pkg> --json, then npm trust revoke <pkg> --id <id>) and re-run bun run scripts/trust-publishers.ts