From 21ce5e4c4eccfba84e5a22d08cdfe9f519fd8a74 Mon Sep 17 00:00:00 2001
From: Anurag Verma <78868769+anurag629@users.noreply.github.com>
Date: Sat, 7 Mar 2026 23:37:16 +0530
Subject: [PATCH] fix: switch to npm trusted publishing (OIDC) (#10)

* chore: add changeset for widget inline mode

* fix: switch to npm trusted publishing (OIDC) instead of NPM_TOKEN
---
 .github/workflows/release.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e6e1a5..da57705 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,6 +35,9 @@ jobs:
       - name: Test
         run: pnpm test
 
+      - name: Ensure npm supports OIDC
+        run: npm install -g npm@latest
+
       - name: Create Release PR or Publish
         id: changesets
         uses: changesets/action@v1
@@ -43,7 +46,6 @@ jobs:
           title: 'chore: version packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Deploy website to Vercel
         if: steps.changesets.outputs.published == 'true'