use npm trusted publishing

.github/workflows/main.yml

@@ -67,6 +67,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write   # for pushing the tag
+      id-token: write   # for npm trusted publishing (OIDC)
     steps:
       - uses: actions/checkout@v4
         with:
@@ -95,9 +96,6 @@ jobs:
             npm run build
             npm publish
           '
-        env:
-          # npm reads this as a config key — avoids writing ~/.npmrc.
-          NPM_CONFIG_//registry.npmjs.org/:_authToken: ${{ secrets.NODE_AUTH_TOKEN }}
       - name: Tag the release
         if: steps.v.outputs.release == 'true'
         run: |

flake.nix

@@ -14,7 +14,7 @@
       devShells = forAllSystems ({ pkgs }: {
         default = pkgs.mkShell {
           packages = with pkgs; [
-            nodejs_22
+            nodejs  # nixpkgs default = current LTS (24.x as of this lock)
             postgresql_17
             act  # run GitHub Actions workflows locally (needs Docker on host)
           ];

package.json

@@ -1,6 +1,6 @@
 {
   "name": "typegres",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "main": "./dist/index.mjs",
   "types": "./dist/index.d.mts",
@@ -54,7 +54,7 @@
     }
   },
   "bin": {
-    "tg": "./dist/cli.mjs"
+    "tg": "dist/cli.mjs"
   },
   "files": [
     "dist"