ci: test OIDC trusted publishing after initial token-based publish

gvonnessi · gvonnessi · commit af999f0e6aab · 2026-02-02T23:26:44.000Z
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -34,9 +34,7 @@ jobs:
         run: npm run build
 
       - name: Publish to npm
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --provenance
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v1
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@entrolution/speed-read",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Lightweight, embeddable document reader for EPUB, PDF, and CBZ. Add a reader to any webpage in one line of code.",
   "type": "module",
   "main": "./dist/speed-reader.umd.cjs",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@entrolution/speed-read",`
`3`		`- "version": "0.2.0",`
	`3`	`+ "version": "0.2.1",`
`4`	`4`	`"description": "Lightweight, embeddable document reader for EPUB, PDF, and CBZ. Add a reader to any webpage in one line of code.",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "./dist/speed-reader.umd.cjs",`