From fbb11ec88f3f4224af17228220f1aa3a5bcfdd6e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 13 Mar 2026 11:22:40 +0000
Subject: [PATCH 1/4] Initial plan


From da8278fe0ffb143299577c9af4f55748a27b6723 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 13 Mar 2026 11:32:08 +0000
Subject: [PATCH 2/4] Fix npm trusted publishing: add NODE_AUTH_TOKEN for
 registry authentication

Co-authored-by: einari <134365+einari@users.noreply.github.com>
---
 .github/workflows/publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 4370a44..c2074d8 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -91,6 +91,8 @@ jobs:
         run: |
           yarn build
           yarn publish-version ${{ needs.release.outputs.version }}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Git reset (package.json files changed)
         run: |

From dda01044006338886f1a136d0e31ef4d5fad427b Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 13 Mar 2026 11:41:57 +0000
Subject: [PATCH 3/4] Revert NODE_AUTH_TOKEN: trusted publishing uses OIDC, no
 token needed

Co-authored-by: einari <134365+einari@users.noreply.github.com>
---
 .github/workflows/publish.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c2074d8..4370a44 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -91,8 +91,6 @@ jobs:
         run: |
           yarn build
           yarn publish-version ${{ needs.release.outputs.version }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Git reset (package.json files changed)
         run: |

From a6ac27a199c59f5baef7b13eac822886ced1d825 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 13 Mar 2026 12:03:51 +0000
Subject: [PATCH 4/4] Remove registry-url from setup-node to fix npm trusted
 publisher OIDC exchange

Co-authored-by: einari <134365+einari@users.noreply.github.com>
---
 .github/workflows/publish.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 4370a44..4e5ff88 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -70,7 +70,6 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 23.x
-          registry-url: "https://registry.npmjs.org"
 
       - run: npm install -g npm@latest