Gandalf the Greybeard 77e9aa9b37 ci: switch npm publish to OIDC trusted publishing ...

Replaces NPM_TOKEN secret with id-token: write + --provenance so
publishing uses GitHub's OIDC token directly. No repository secret
required; provenance attestation is generated automatically.

Also collapses the redundant second setup-node step (registry-url is
now set on the first one).

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-23 16:10:39 +00:00

..

workflows

ci: switch npm publish to OIDC trusted publishing

2026-04-23 16:10:39 +00:00