From 44bc5e687adde02f02a051c5eb5f5182df891fbb Mon Sep 17 00:00:00 2001
From: Jacek Pudysz <jacekpudysz@gmail.com>
Date: Wed, 10 Dec 2025 08:43:43 +0100
Subject: [PATCH 1/2] feat: remove token auth and use OIDC

---
 .github/workflows/release.yaml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index beeb3c34..f542b10d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -249,11 +249,6 @@ jobs:
           echo "  Already published: ${{ steps.check_published.outputs.published }}"
           npm pack --dry-run
 
-      - name: Setup NPM authentication
-        if: ${{ !inputs.dry_run && steps.check_published.outputs.published == 'false' }}
-        run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-
       - name: Publish to NPM
         if: ${{ !inputs.dry_run && steps.check_published.outputs.published == 'false' }}
         working-directory: packages/uniwind

From 9e55a5acc1905f746612deb7906a3559a860ec83 Mon Sep 17 00:00:00 2001
From: Jacek Pudysz <jacekpudysz@gmail.com>
Date: Wed, 10 Dec 2025 08:50:54 +0100
Subject: [PATCH 2/2] feat: use npm 9+ in CI for OIDC

---
 .github/workflows/release.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f542b10d..b5ffe3df 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -39,6 +39,12 @@ jobs:
         with:
           bun-version-file: .bun-version
 
+      - name: Setup Node.js (for npm with OIDC support)
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Configure git
         run: |
           git config user.name "github-actions[bot]"