From afd7b795c598904649cfdb8e7b702c1bfd3d1eef Mon Sep 17 00:00:00 2001
From: Erik Koopmans <erik@erik-koopmans.com>
Date: Sun, 8 Feb 2026 20:43:34 -0500
Subject: [PATCH] Use OIDC for npm publishing

---
 .github/workflows/release.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dcbfff03..907e683e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - main
+permissions:
+  id-token: write
 jobs:
   release:
     timeout-minutes: 2
@@ -30,4 +32,3 @@ jobs:
         with:
           GITHUB_TOKEN: ${{ steps.gh-token.outputs.token }}
           NPM: true
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}