From 048c837ba2560b7d6a341cef0eb5e4b2c377233a Mon Sep 17 00:00:00 2001
From: seveibar <seveibar@gmail.com>
Date: Wed, 19 Aug 2026 16:22:09 -0700
Subject: [PATCH] ci: migrate npm publishing to OIDC

---
 .github/workflows/bun-pver-release.yml | 12 ++++++++----
 package.json                           |  4 ++++
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/bun-pver-release.yml b/.github/workflows/bun-pver-release.yml
index a3fabc6..a8c60c9 100644
--- a/.github/workflows/bun-pver-release.yml
+++ b/.github/workflows/bun-pver-release.yml
@@ -4,6 +4,11 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -13,13 +18,12 @@ jobs:
         uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
+          package-manager-cache: false
           registry-url: https://registry.npmjs.org/
       - run: npm install -g pver
       - run: bun install --frozen-lockfile
       - run: bun run build
       - run: pver release
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/package.json b/package.json
index c715e8f..feb136e 100644
--- a/package.json
+++ b/package.json
@@ -3,6 +3,10 @@
   "main": "./dist/bundle.js",
   "type": "module",
   "version": "0.0.34",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tscircuit/file-server"
+  },
   "bin": {
     "file-server": "./dist/cli.js"
   },