release: v3.0.3 (ci oidc claim alignment)

Author: flyingrobots

.github/workflows/publish.yml

@@ -32,6 +32,7 @@ jobs:
     needs: test
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
+    environment: npm-publish
     permissions:
       contents: write # Required for creating releases
       id-token: write # Required for provenance

CHANGELOG.md

@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.3] - 2026-05-06
+
+### Fixed
+- **CI/CD Reliability**: Restored environment-based OIDC claim to match npm Trusted Publisher configuration.
+
 ## [3.0.2] - 2026-05-06
 
 ### Fixed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@git-stunts/plumbing",
-  "version": "3.0.2",
+  "version": "3.0.3",
   "description": "Robust async, stream-first Git plumbing for Node, Bun, and Deno.",
   "type": "module",
   "main": "index.js",