From 6a201c8f4d91369fc827ac258c690f87428c8a25 Mon Sep 17 00:00:00 2001
From: Brad Peters <brdlyptrs@gmail.com>
Date: Mon, 26 Jan 2026 14:28:18 -0800
Subject: [PATCH] update(actions): Switch to using Trusted Publishers

---
 .github/workflows/cd.yaml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index a51f7f8..19cf34a 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -5,6 +5,7 @@ on:
     types: [ released ]
 
 permissions:
+  id-token: write  # Required for OIDC
   contents: read
 
 jobs:
@@ -27,6 +28,4 @@ jobs:
           BUILD: production
       - name: Publish package
         shell: bash
-        run: pnpm publish --no-git-checks --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN  }}
+        run: pnpm publish --no-git-checks --access public
\ No newline at end of file