From 9860a2dc3e450cc99cf81c875389dda15c5c6c34 Mon Sep 17 00:00:00 2001
From: Nicolas Dupont <npg.dupont@gmail.com>
Date: Thu, 4 Dec 2025 10:23:55 +0100
Subject: [PATCH 1/2] Enable trusted publishing for npm release

---
 .github/workflows/release.yml | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 591005ca0..b78ed5f3c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,6 +6,9 @@ on:
       - main
     types: [ closed ]
 
+permissions:
+  id-token: write  # Required for OIDC. See https://docs.npmjs.com/trusted-publishers#step-2-configure-your-cicd-workflow
+  contents: read
 
 jobs:
   changelog:
@@ -22,6 +25,11 @@ jobs:
         with:
           token: ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Configure Git author
         run: |
           git config --global user.name "Open Terms Archive Release Bot"
@@ -59,10 +67,11 @@ jobs:
           body: ${{ steps.release-changelog.outputs.content }}
           token: ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
 
+      - name: Update npm
+        run: npm install -g npm@latest
+      
       - name: Publish to NPM public repository
-        uses: JS-DevTools/npm-publish@v1
-        with:
-          token: ${{ secrets.NPMJS_ACCESS_TOKEN }}
+        run: npm publish
 
       - name: Trigger documentation deploy
         uses: peter-evans/repository-dispatch@v2

From dcf796dc94723bd5bcde627ce6c191a6e78f2452 Mon Sep 17 00:00:00 2001
From: Nicolas Dupont <npg.dupont@gmail.com>
Date: Thu, 4 Dec 2025 10:24:41 +0100
Subject: [PATCH 2/2] Add changelog entry

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 321b3047b..f7e738a94 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 All changes that impact users of this module are documented in this file, in the [Common Changelog](https://common-changelog.org) format with some additional specifications defined in the CONTRIBUTING file. This codebase adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Unreleased [no-release]
+
+_Modifications made in this changeset do not add, remove or alter any behavior, dependency, API or functionality of the software. They only change non-functional parts of the repository, such as the README file or CI workflows._
+
 ## 10.1.1 - 2025-11-25
 
 _Full changeset and discussions: [#1209](https://github.com/OpenTermsArchive/engine/pull/1209)._