From 875a9627e190ddc1257f9b451817e000cc55eae1 Mon Sep 17 00:00:00 2001
From: Maximilian Franzke <787658+mfranzke@users.noreply.github.com>
Date: Sat, 8 Nov 2025 21:43:12 +0100
Subject: [PATCH 1/6] refactor: Remove NPM token setting from publish script

Removed the line setting the NPM authentication token.
---
 .github/scripts/publish-npm.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/scripts/publish-npm.sh b/.github/scripts/publish-npm.sh
index 1be1320839a..8d628f19e30 100644
--- a/.github/scripts/publish-npm.sh
+++ b/.github/scripts/publish-npm.sh
@@ -35,7 +35,6 @@ do
     echo "🔑 Authenticated with GITHUB"
   elif [[ $REGISTRY == 'NPM' ]]; then
     npm config set @db-ui:registry https://registry.npmjs.org/
-    npm set //registry.npmjs.org/:_authToken "$NPM_TOKEN"
     echo "🔑 Authenticated with NPM"
   else
     echo "Could not authenticate with $REGISTRY"

From 6689a28b45f8edbdd485031293bc90868202f2ce Mon Sep 17 00:00:00 2001
From: Maximilian Franzke <787658+mfranzke@users.noreply.github.com>
Date: Sat, 8 Nov 2025 21:45:18 +0100
Subject: [PATCH 2/6] Update 03-publish-packages.yml

---
 .github/workflows/03-publish-packages.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/03-publish-packages.yml b/.github/workflows/03-publish-packages.yml
index a34e00160d3..69714ba3953 100644
--- a/.github/workflows/03-publish-packages.yml
+++ b/.github/workflows/03-publish-packages.yml
@@ -50,7 +50,6 @@ jobs:
           PRE_RELEASE: ${{ inputs.preRelease }}
           VALID_SEMVER_VERSION: ${{ inputs.version }}
           GITHUB_COMMITISH: ${{ github.event.release.target_commitish }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GPR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: ⬆ Upload Package Artifact db-ui-core

From 04d6d78b37d18ab762bd69578dc175ca7d10e44b Mon Sep 17 00:00:00 2001
From: Maximilian Franzke <787658+mfranzke@users.noreply.github.com>
Date: Sat, 8 Nov 2025 21:52:40 +0100
Subject: [PATCH 3/6] Update Node.js version in .nvmrc to 24

---
 .nvmrc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.nvmrc b/.nvmrc
index 2bd5a0a98a3..a45fd52cc58 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-22
+24

From 77dc6ae6175b75d09f6dd24d7180b7ed19af2423 Mon Sep 17 00:00:00 2001
From: Maximilian Franzke <787658+mfranzke@users.noreply.github.com>
Date: Sat, 8 Nov 2025 22:17:47 +0100
Subject: [PATCH 4/6] Update release.yml

---
 .github/workflows/release.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 783e03283ee..70a27d7e932 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,6 +35,8 @@ jobs:
     uses: ./.github/workflows/03-publish-packages.yml
     needs: [lint, test, build, get-publish-version]
     secrets: inherit
+    permissions:
+      id-token: write  # Required for OIDC
     with:
       release: ${{ needs.get-publish-version.outputs.release }}
       preRelease: ${{ needs.get-publish-version.outputs.preRelease }}

From 5dfd52ef2296f792f7b33506bfefe0ee691f7f53 Mon Sep 17 00:00:00 2001
From: Maximilian <Maximilian.Franzke@deutschebahn.com>
Date: Sat, 8 Nov 2025 22:22:42 +0100
Subject: [PATCH 5/6] refactor: running prettier

---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 70a27d7e932..dc323b3f6ea 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
     needs: [lint, test, build, get-publish-version]
     secrets: inherit
     permissions:
-      id-token: write  # Required for OIDC
+      id-token: write # Required for OIDC
     with:
       release: ${{ needs.get-publish-version.outputs.release }}
       preRelease: ${{ needs.get-publish-version.outputs.preRelease }}

From c0c2dd1161a01d0a0c53391c01654a28d9b33703 Mon Sep 17 00:00:00 2001
From: Maximilian Franzke <787658+mfranzke@users.noreply.github.com>
Date: Sat, 8 Nov 2025 22:23:42 +0100
Subject: [PATCH 6/6] Remove provenance flag from npm publish command

Removed the '--provenance' flag from the npm publish command.
---
 .github/scripts/publish-npm.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/scripts/publish-npm.sh b/.github/scripts/publish-npm.sh
index 8d628f19e30..9fa9f84385e 100644
--- a/.github/scripts/publish-npm.sh
+++ b/.github/scripts/publish-npm.sh
@@ -41,5 +41,5 @@ do
     exit 1
   fi
   # https://docs.npmjs.com/generating-provenance-statements#example-github-actions-workflow
-  npm publish --tag "$TAG" db-ui-core-"$VALID_SEMVER_VERSION".tgz --provenance
+  npm publish --tag "$TAG" db-ui-core-"$VALID_SEMVER_VERSION".tgz
 done