From ab150a9f52f433f7ea4906dc736a8362a4e07403 Mon Sep 17 00:00:00 2001
From: Kratos2k7 <umernadeem321@gmail.com>
Date: Thu, 12 Mar 2026 14:41:48 +0500
Subject: [PATCH 1/2] Revert "chore(release): 1.9.0 [skip ci]"

This reverts commit 18413c8e86f8723c26eb431182cba262c06ff6f9.
---
 CHANGELOG.md | 13 -------------
 package.json |  2 +-
 2 files changed, 1 insertion(+), 14 deletions(-)
 delete mode 100644 CHANGELOG.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
deleted file mode 100644
index 501a399..0000000
--- a/CHANGELOG.md
+++ /dev/null
@@ -1,13 +0,0 @@
-# [1.9.0](https://github.com/shotstack/oas-api-definition/compare/v1.8.7...v1.9.0) (2026-03-12)
-
-
-### Bug Fixes
-
-* Add type-based fallback release rules for conventional commits ([a4e8128](https://github.com/shotstack/oas-api-definition/commit/a4e812809f6622aa04d88a257e5a87737702fee0))
-* added shadow and textdecorations ([ee84599](https://github.com/shotstack/oas-api-definition/commit/ee84599ce0d51c51eb31b0a27c0f1d6578a6cbb3))
-* publishing package ([64780d4](https://github.com/shotstack/oas-api-definition/commit/64780d44d8b4567994dcd9d080dd2f91e0d20e27))
-
-
-### Features
-
-* Add concurrency control to the workflow  queues releases so they run one at a time ([4c7c973](https://github.com/shotstack/oas-api-definition/commit/4c7c973150b3c4a9c947dbdd9adea714a63ef9d6))
diff --git a/package.json b/package.json
index aba7f40..96510f3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@shotstack/schemas",
-  "version": "1.9.0",
+  "version": "1.8.7",
   "description": "Centralized OpenAPI schemas and TypeScript types for Shotstack API",
   "type": "module",
   "main": "dist/index.js",

From 2c149bfed4720a2ed275c40f7c616f2de2067df5 Mon Sep 17 00:00:00 2001
From: Kratos2k7 <umernadeem321@gmail.com>
Date: Thu, 12 Mar 2026 15:03:28 +0500
Subject: [PATCH 2/2] fix: enable OIDC provenance for npm publish

- Add provenance: true to publishConfig
- Add NPM_CONFIG_PROVENANCE env var to release workflow
- Upgrade CI to Node 24 (npm 11.x required for OIDC)
- Reset version to 1.8.7 to match npm registry

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/release.yml | 3 ++-
 package.json                  | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e17f191..62b03a6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,7 +33,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version-file: '.nvmrc'
+          node-version: '24'
           cache: 'pnpm'
 
       - name: Install dependencies
@@ -51,4 +51,5 @@ jobs:
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: pnpm exec semantic-release
diff --git a/package.json b/package.json
index 96510f3..8fc25cc 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,8 @@
   },
   "publishConfig": {
     "access": "public",
-    "registry": "https://registry.npmjs.org/"
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
   },
   "engines": {
     "node": ">=20"