From af7b57cd211004ed82c3084022b606726d245d02 Mon Sep 17 00:00:00 2001
From: Erez Rokah <erezrokah@users.noreply.github.com>
Date: Mon, 2 Feb 2026 11:43:53 +0000
Subject: [PATCH] chore: Update publish.yml to modify permissions and npm
 command

Add permission for id-token and remove NODE_AUTH_TOKEN from npm publish step.
---
 .github/workflows/publish.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3230474..8561242 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -5,6 +5,7 @@ on:
       - "v*.*.*"
 
 permissions:
+  id-token: write  # Required for OIDC
   contents: read
 
 jobs:
@@ -27,5 +28,3 @@ jobs:
           npm run build
 
       - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}