From 522a64960e84313c7e1507c439c982af1cdb58bb Mon Sep 17 00:00:00 2001
From: Ashish Jullia <ashishjullia19@gmail.com>
Date: Fri, 25 Sep 2026 14:32:22 -0400
Subject: [PATCH] npm - publish only to GitHub Packages

---
 .github/workflows/npm-alpha.yml | 14 ++++----------
 .github/workflows/npm.yml       | 15 +++++----------
 2 files changed, 9 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/npm-alpha.yml b/.github/workflows/npm-alpha.yml
index 5ade84d..cd11ff4 100644
--- a/.github/workflows/npm-alpha.yml
+++ b/.github/workflows/npm-alpha.yml
@@ -5,6 +5,10 @@ on:
     tags:
       - 'v*-alpha*'
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -22,13 +26,3 @@ jobs:
       - run: yarn publish --access public --tag alpha
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 14.x
-          registry-url: https://registry.npmjs.org/
-          scope: '@eqworks'
-          always-auth: true
-      - run: yarn publish --access public --tag alpha
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.CD_NPM_TOKEN_PUBLISH }}
diff --git a/.github/workflows/npm.yml b/.github/workflows/npm.yml
index b0d407d..00c12e3 100644
--- a/.github/workflows/npm.yml
+++ b/.github/workflows/npm.yml
@@ -6,6 +6,10 @@ on:
       - 'v*' # proceeds eg: v1.0
       - '!v*-*' # skips eg: v1.2.99-beta1, v3.5.0-test, etc.
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -27,19 +31,10 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 14.x
-          registry-url: https://registry.npmjs.org/
-          scope: '@eqworks'
-          always-auth: true
-      - run: yarn publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.CD_NPM_TOKEN_PUBLISH }}
-
       - name: Generate tag associated release changelog
         if: ${{ success() }}
         run: npx @eqworks/release changelog -v --head ${GITHUB_REF##*/} --github --skip alpha
         env:
+          NODE_AUTH_TOKEN: ${{ secrets.CD_GITHUB_TOKEN }}
           GITHUB_OWNER: EQWorks
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}