From 2bbfa107fdf73a06870ff197ea2b5a7ce2cf4892 Mon Sep 17 00:00:00 2001
From: Philippe <philippe.meyralbe@advitam.fr>
Date: Mon, 20 Jul 2026 11:42:33 +0200
Subject: [PATCH 1/3] ci: publish to RubyGems via trusted publishing

---
 .github/workflows/release.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f5ece9c..66c3ef2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,8 +9,10 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    environment: release
     permissions:
       contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
@@ -19,10 +21,10 @@ jobs:
           bundler-cache: true
       - name: Build gem
         run: gem build activemail.gemspec
+      # Credentials expire 15 minutes after this step, so build first.
+      - uses: rubygems/configure-rubygems-credentials@6861877652452567c1a007a50badad3d316fc9ba
       - name: Push to RubyGems
         run: gem push activemail-*.gem
-        env:
-          GEM_HOST_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
       - name: Publish GitHub release
         if: startsWith(github.ref, 'refs/tags/v')
         env:

From 9ecbea3b399340a03d1af336b2b1598ab0995d65 Mon Sep 17 00:00:00 2001
From: Philippe <philippe.meyralbe@advitam.fr>
Date: Thu, 23 Jul 2026 15:01:08 +0200
Subject: [PATCH 2/3] fix: satisfy Lint/SafeNavigationWithEmpty on
 blank_link_rel setter

---
 lib/activemail/configuration.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/activemail/configuration.rb b/lib/activemail/configuration.rb
index 00b8b71..ba3c406 100644
--- a/lib/activemail/configuration.rb
+++ b/lib/activemail/configuration.rb
@@ -198,7 +198,7 @@ def blank_link_rel=(value)
       raise TypeError, "blank_link_rel must be a String or nil, got #{value.inspect} (#{value.class})" unless value.nil? || value.is_a?(String)
 
       normalized = value&.strip
-      @blank_link_rel = normalized&.empty? ? nil : normalized
+      @blank_link_rel = normalized && normalized.empty? ? nil : normalized
     end
 
     sig { params(value: T.untyped).returns(ActiveMail::ComponentMap) }

From 198e77b8f726c103ab5db8c8ad83a42f421baed0 Mon Sep 17 00:00:00 2001
From: Philippe <philippe.meyralbe@advitam.fr>
Date: Thu, 23 Jul 2026 15:07:30 +0200
Subject: [PATCH 3/3] chore: release 1.2.2

---
 CHANGELOG.md              | 7 +++++++
 lib/activemail/version.rb | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6143998..fab0f1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,13 @@ All notable changes to this project are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.2.2] - 2026-07-23
+
+### Changed
+
+- Publish to RubyGems via trusted publishing (OIDC) instead of a long-lived API key.
+- Harden the `blank_link_rel=` setter (internal, no behaviour change).
+
 ## [1.2.1] - 2026-07-01
 
 ### Changed
diff --git a/lib/activemail/version.rb b/lib/activemail/version.rb
index 3d85965..7ba77ce 100644
--- a/lib/activemail/version.rb
+++ b/lib/activemail/version.rb
@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module ActiveMail
-  VERSION = '1.2.1'
+  VERSION = '1.2.2'
 end