From 4b23c049ab5aa0c72fd7a24c2e6cc379b12903e9 Mon Sep 17 00:00:00 2001
From: dominikg <dominik.goepel@gmx.de>
Date: Tue, 9 Sep 2025 21:09:03 +0200
Subject: [PATCH] refactor(release): use node24, remove NPM_TOKEN and align
 permissions setup with other svelte org release.yml to enable oidc publishing

---
 .github/workflows/Release.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/Release.yml b/.github/workflows/Release.yml
index 6d3f18a2a..3ba2d3e57 100644
--- a/.github/workflows/Release.yml
+++ b/.github/workflows/Release.yml
@@ -5,13 +5,14 @@ on:
     branches:
       - main
 
-permissions:
-  contents: write
-  issues: write
-  pull-requests: write
+permissions: {}
 
 jobs:
   release:
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     name: Release
     runs-on: ubuntu-latest
     steps:
@@ -26,6 +27,8 @@ jobs:
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
+        with:
+          node-version: 24
       - name: Install Dependencies
         run: pnpm install
 
@@ -41,4 +44,4 @@ jobs:
           title: 'chore: release eslint-plugin-svelte'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true