From 5e832c71597a86cb35e9ed7fb0233d4aa5b0d4f2 Mon Sep 17 00:00:00 2001 From: Caio Pizzol Date: Thu, 13 Aug 2026 07:29:13 -0300 Subject: [PATCH 1/2] fix(release): use npm trusted publishing --- .github/workflows/release.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d374ec8..ce1d510 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,6 +11,7 @@ jobs: runs-on: ubuntu-latest permissions: contents: read + id-token: write steps: - name: Create release token @@ -42,5 +43,3 @@ jobs: publish-script: bun run release:publish commit-message: "chore(release): version packages" pr-title: "chore(release): version packages" - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} From 301781a45f3aee190edef197af8fa39e1fe19ae4 Mon Sep 17 00:00:00 2001 From: Caio Pizzol Date: Thu, 13 Aug 2026 07:38:16 -0300 Subject: [PATCH 2/2] chore(release): pin OIDC workflow actions --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ce1d510..0a682ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,13 +23,13 @@ jobs: permission-contents: write permission-pull-requests: write - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 0 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6 with: node-version: 24 registry-url: https://registry.npmjs.org