From 621d33e55a59faf931df8bdf25575575ada62373 Mon Sep 17 00:00:00 2001 From: Erez Rokah Date: Mon, 2 Feb 2026 11:40:23 +0000 Subject: [PATCH 1/2] chore: Remove NODE_AUTH_TOKEN from publish workflow Removed NODE_AUTH_TOKEN environment variable from npm publish step. --- .github/workflows/publish.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 10d9897..c9d5bae 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -26,5 +26,3 @@ jobs: npm run build - run: npm publish --access public - env: - NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} From 28a7fa60bb28859cf4664eddb797a922e62b71b6 Mon Sep 17 00:00:00 2001 From: Erez Rokah Date: Mon, 2 Feb 2026 11:41:20 +0000 Subject: [PATCH 2/2] Add id-token permission for OIDC in publish.yml --- .github/workflows/publish.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index c9d5bae..23ac403 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -5,6 +5,7 @@ on: - "v*.*.*" permissions: + id-token: write # Required for OIDC contents: read jobs: