From 8c2d2155c104128cdc19cad05603ab237efa4a49 Mon Sep 17 00:00:00 2001
From: Max Graey <maxgraey@gmail.com>
Date: Tue, 31 Mar 2026 15:44:37 +0300
Subject: [PATCH] Use NPM_TOKEN instead OIDC for publishing

---
 .github/workflows/build.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d9ba3e23..6494ac2b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,9 +17,6 @@ jobs:
     name: "Build with Emsdk:${{ matrix.emsdk }}"
     runs-on: ubuntu-latest
     if: github.event_name == 'schedule' || !contains(github.event.head_commit.message, '[ci skip]')
-    permissions:
-      id-token: write
-      contents: write
     env:
       CMAKE_EXE_LINKER_FLAGS: "-sMAXIMUM_MEMORY=4294967296 -sSINGLE_FILE"
     strategy:
@@ -30,6 +27,7 @@ jobs:
     - uses: actions/setup-node@v6
       with:
         node-version: '22'
+        registry-url: 'https://registry.npmjs.org'
     - name: "Set up Emsdk"
       run: |
         mkdir $HOME/emsdk
@@ -139,7 +137,11 @@ jobs:
         git push -u origin "v$VERSION"
     - name: "Publish to npm"
       if: github.event_name == 'schedule' && matrix.emsdk == 'tot'
+      env:
+        NPM_REGISTRY: "registry.npmjs.org"
+        NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       run: |
+        npm config set "//${NPM_REGISTRY}/:_authToken=${NPM_AUTH_TOKEN}"
         if [ $RELEASE ]; then
           echo "Publishing release ..."
           npm publish