From c177d2c9fe91a54603bcc62c5a2cf51c00f3972b Mon Sep 17 00:00:00 2001
From: Heihokon <neoshark22@gmail.com>
Date: Thu, 29 Jan 2026 08:45:53 -0600
Subject: [PATCH] chore: add permissions for id-token in npm CD workflow

---
 .github/workflows/npm-cd-latest.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/npm-cd-latest.yml b/.github/workflows/npm-cd-latest.yml
index 105791d..4afc2b1 100644
--- a/.github/workflows/npm-cd-latest.yml
+++ b/.github/workflows/npm-cd-latest.yml
@@ -3,6 +3,10 @@ on:
   push:
     tags: 
       - "5.[0-9]+.[0-9]+"
+
+permissions:
+  id-token: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -24,5 +28,3 @@ jobs:
       - run: yarn test --coverage
       - run: yarn build --provenance --access public
       - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}