fix(release): give permission to create id for publishing

[ryoppippi]

Summary by cubic

Fix release CI by scoping permissions to jobs and enabling OIDC for publishing. This unblocks the publish step by granting id-token: write with least-privilege settings.

• Bug Fixes
  • Add id-token: write and contents: read to the publish job.
  • Move permissions to job level: release-please job gets contents/pull-requests/issues write; publish job uses minimal permissions.

^{Written for commit 5bd9234. Summary will update automatically on new commits.}

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/StackOneHQ/stackone-ai-node/@stackone/ai@234

commit: 5bd9234

[Copilot]

Pull request overview

This PR refactors the release workflow to follow the principle of least privilege by moving permissions from workflow-level to job-level scope, and adds the id-token: write permission to enable OIDC token-based publishing to npm.

• Moved permissions from workflow-level to individual job-level for better security isolation
• Added id-token: write permission to the publish-package job for OIDC authentication

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cubic-dev-ai]

No issues found across 1 file

[glebedel]

LGTM