From dc38a4f82de897b5ea23f9e54991bde001fe581e Mon Sep 17 00:00:00 2001
From: Charles Packer <packercharles@gmail.com>
Date: Wed, 26 Nov 2025 19:18:41 -0800
Subject: [PATCH] ci: set up publishing (#129)

---
 .github/workflows/release.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 97fa829..f1eaeb2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,7 @@ jobs:
     environment: npm-publish
     permissions:
       contents: write
+      id-token: write  # Required for npm OIDC trusted publishing
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -108,6 +109,4 @@ jobs:
           fail_on_unmatched_files: true
 
       - name: Publish to npm
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: bun publish --access public --no-git-checks