From a99b7518008756aa0fbfade6e2b4704451d60964 Mon Sep 17 00:00:00 2001
From: Robert Kieffer <robert@broofa.com>
Date: Fri, 24 Apr 2026 11:25:32 -0700
Subject: [PATCH] chore: update for npm trusted publishing

---
 .github/workflows/release-please.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 9ee7b64..cfd60e5 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -23,11 +23,10 @@ jobs:
       - uses: googleapis/release-please-action@v4
         id: release
         with:
-          token: ${{ secrets.MIME_RELEASE_PLEASE_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           release-type: node
 
       # Steps below handle publication to NPM
-
       - uses: actions/checkout@v4
         if: ${{ steps.release.outputs.release_created }}
       - uses: actions/setup-node@v4
@@ -42,5 +41,5 @@ jobs:
       - run: npm test
         if: ${{ steps.release.outputs.release_created }}
 
-      - run: npm publish
+      - run: npm publish --provenance --access public
         if: ${{ steps.release.outputs.release_created }}