From d2ece320e0673db2569976d08ad1d5b277bc93f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johannes=20R=C3=B8svik?= <j.rosvik@gmail.com>
Date: Wed, 28 Jan 2026 14:41:23 +0100
Subject: [PATCH] ci: replace NPM_TOKEN with OIDC

https://docs.npmjs.com/trusted-publishers
---
 .github/workflows/release.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e3c8e58..47ac3dd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,6 +5,7 @@ on:
       - main
 
 permissions:
+  id-token: write
   contents: write
   pull-requests: write
 
@@ -31,6 +32,4 @@ jobs:
       - run: yarn build
         if: ${{ steps.release.outputs.release_created }}
       - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
         if: ${{ steps.release.outputs.release_created }}