From 7fca25291c7ef5aea00ad006b223d88c01b7e0b8 Mon Sep 17 00:00:00 2001
From: UneBaguette <28904802+UneBaguette@users.noreply.github.com>
Date: Mon, 4 May 2026 13:06:54 +0200
Subject: [PATCH] ci: use OIDC trusted publisher, drop npm token

---
 .github/workflows/publish.yml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d0ead55..d336872 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,10 +4,6 @@ on:
   release:
     types: [ published ]
 
-permissions:
-  id-token: write
-  contents: read
-
 env:
   CARGO_TERM_COLOR: always
 
@@ -47,8 +43,5 @@ jobs:
 
       - name: Publish to npm
         run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
           cd pkg
           npm publish --access public --provenance
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}