From 76bf5f7152b097a2e875529912d05069a36a9562 Mon Sep 17 00:00:00 2001
From: schplitt <schplitt.contact@gmail.com>
Date: Sun, 16 Nov 2025 20:36:07 +0100
Subject: [PATCH] ci: migrate to trusted publishing with OIDC

---
 .github/workflows/release.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ecb7ae0..a94cfca 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -2,6 +2,7 @@ name: Release
 
 permissions:
   contents: write
+  id-token: write
 
 on:
   push:
@@ -44,5 +45,3 @@ jobs:
 
       - name: Publish narro to NPM
         run: pnpm --filter ./packages/narro publish --access public --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}