WIP

Author: ryukzak

.github/workflows/canary-release.yml

@@ -2,7 +2,11 @@ name: Canary Release
 
 on:
   push:
-    branches: [main]
+    branches: [main, ci-wip2]
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
 
 jobs:
   canary-release:
@@ -49,11 +53,6 @@ jobs:
           require('fs').writeFileSync('package.json', JSON.stringify(pkg, null, 2));
           "
 
-      - name: Setup NPM authentication
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-
       - name: Publish canary release
         run: |
           npm publish --tag canary --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}