From 3b9392b8e280ff5d189270c1395aedb231050b91 Mon Sep 17 00:00:00 2001
From: not-matthias <matthias@codspeed.io>
Date: Tue, 20 Jan 2026 17:08:24 +0100
Subject: [PATCH 1/2] chore: bump instrument-hooks

---
 core/CMakeLists.txt   | 2 +-
 core/instrument-hooks | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/CMakeLists.txt b/core/CMakeLists.txt
index a359dc1..879026d 100644
--- a/core/CMakeLists.txt
+++ b/core/CMakeLists.txt
@@ -15,7 +15,7 @@ include(FetchContent)
 FetchContent_Declare(
     instrument_hooks_repo
     GIT_REPOSITORY https://github.com/CodSpeedHQ/instrument-hooks
-    GIT_TAG b1e401a4d031ad308edb22ed59a52253a1ebe924
+    GIT_TAG 89fb72a076ec71c9eca6eee9bca98bada4b4dfb4
 )
 FetchContent_MakeAvailable(instrument_hooks_repo)
 FetchContent_GetProperties(instrument_hooks_repo)
diff --git a/core/instrument-hooks b/core/instrument-hooks
index 1460da1..89fb72a 160000
--- a/core/instrument-hooks
+++ b/core/instrument-hooks
@@ -1 +1 @@
-Subproject commit 1460da12ab87b17ec021706c7f084210269ed024
+Subproject commit 89fb72a076ec71c9eca6eee9bca98bada4b4dfb4

From cebedf11457fea53108064451993cce6159f8ee4 Mon Sep 17 00:00:00 2001
From: not-matthias <matthias@codspeed.io>
Date: Wed, 21 Jan 2026 12:21:03 +0100
Subject: [PATCH 2/2] chore(ci): use OIDC token

---
 .github/workflows/ci.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9cc1381..b20dfdd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,10 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   lint:
     runs-on: ubuntu-latest
@@ -90,7 +94,6 @@ jobs:
         with:
           mode: ${{ matrix.codspeed-mode }}
           run: examples/google_benchmark_cmake/build/benchmark_example
-          token: ${{ secrets.CODSPEED_TOKEN }}
 
   bazel-integration-tests:
     strategy:
@@ -130,7 +133,6 @@ jobs:
         with:
           mode: ${{ matrix.codspeed-mode }}
           run: bazel run //examples/google_benchmark_bazel:my_benchmark --@codspeed_core//:codspeed_mode=${{ matrix.codspeed-mode }} --@codspeed_core//:strict_warnings=on
-          token: ${{ secrets.CODSPEED_TOKEN }}
 
   cmake-build:
     strategy: