From c08e71b42c5a8e7e3cdc75acaffe6a78b8de9a9d Mon Sep 17 00:00:00 2001
From: Antonin MOREL <antoninmorel@gmail.com>
Date: Wed, 20 May 2026 16:02:51 +0200
Subject: [PATCH] fix: configure npm OIDC authentication for publishing

---
 .github/workflows/release.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e904af9..448b51d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,6 +26,11 @@ jobs:
         uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
+      - name: Setup Node.js for npm publish
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org"
       - name: Install dependencies
         run: bun install
       - name: Create Release Pull Request or Publish
@@ -35,4 +40,4 @@ jobs:
           publish: bun run changeset:publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: "" # https://github.com/changesets/changesets/issues/1152#issuecomment-3190884868
+          NPM_CONFIG_PROVENANCE: true