From 57d3c219cd6032fd09f79d91b4ffeb376f963128 Mon Sep 17 00:00:00 2001
From: Jan Wendling <jan.wendling@dfinity.org>
Date: Mon, 27 Oct 2025 17:08:01 +0100
Subject: [PATCH] chore: updates workflow for trusted publishing

---
 .github/workflows/release.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 336b97c..2a51406 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,9 +15,12 @@ jobs:
     environment:
       name: npm
       url: https://www.npmjs.com/package/@dfinity/cbor
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Python
         uses: dfinity/ci-tools/actions/setup-python@main
@@ -42,7 +45,6 @@ jobs:
         id: publish
         uses: dfinity/ci-tools/actions/npm-publish@main
         with:
-          token: ${{ secrets.NPM_ACCESS_TOKEN }}
           is_beta: ${{ steps.is_beta.outputs.is_beta_tag }}
 
       - name: Create Github release