From 4462b5002a5883b2f0585ab9769330c5de0ab2e3 Mon Sep 17 00:00:00 2001
From: Florian Hammerschmidt <florianh89@gmail.com>
Date: Mon, 2 Mar 2026 19:59:52 +0100
Subject: [PATCH] Activate npm trusted publishing

---
 .github/workflows/ci.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index aa68f13..20dfd8d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -92,6 +92,9 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
 
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - name: Checkout
@@ -109,7 +112,5 @@ jobs:
           name: ${{ needs.build.outputs.artifact_filename }}
 
       - name: Publish packages on npm with tag "next"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
         run: |
           npm publish ${{ needs.build.outputs.artifact_filename }} --tag next