From 052ebcea1fc115375b6da2313d4936b94fa4602e Mon Sep 17 00:00:00 2001
From: snehasishcodes <–snehasish.ray2025@iem.edu.in>
Date: Mon, 19 Oct 2026 10:56:16 +0530
Subject: [PATCH] chore(ci): publish to npm via trusted publishing (OIDC)

---
 .github/workflows/version.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml
index 3f30ccd..8c9c7a8 100644
--- a/.github/workflows/version.yml
+++ b/.github/workflows/version.yml
@@ -10,6 +10,7 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 permissions:
   contents: write
   pull-requests: write
+  id-token: write
 
 jobs:
   version:
@@ -18,6 +19,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: pnpm/action-setup@v4
+        with:
+          # pnpm 10+ supports npm trusted publishing (OIDC).
+          # The repo pins pnpm 9 for development; CI uses 10 for install+publish.
+          version: 10
 
       - uses: actions/setup-node@v4
         with:
@@ -35,4 +40,3 @@ jobs:
           publish: pnpm release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}