From 1ebbff865eb9a6de2e9887909810ba69d6bba532 Mon Sep 17 00:00:00 2001
From: Joao Dordio <joaodordio@icloud.com>
Date: Tue, 31 Mar 2026 22:22:37 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=9A=9A=20Update=20publish=20workflow?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/publish.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 27195ad3..85fff806 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,6 +8,9 @@ jobs:
   publish:
     environment: npm
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Use Node.js 18.12.0
@@ -15,11 +18,10 @@ jobs:
         with:
           node-version: '18.12.0'
           cache: 'yarn'
+          registry-url: 'https://registry.npmjs.org'
       - run: yarn install --frozen-lockfile
       - run: yarn test
       - run: yarn build
       - run: yarn build:node
-      - uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c # v3.1.1
-        with:
-          token: ${{ secrets.NPM_TOKEN }}
-          strategy: all
+      - name: Publish to npm
+        run: npm publish --provenance