From 047f3de50e3d09d00cbd89c0c00ade67bb493570 Mon Sep 17 00:00:00 2001
From: Jumpei Ogawa <git@phanective.org>
Date: Tue, 2 Dec 2025 11:51:54 +0900
Subject: [PATCH 1/2] chore: npmignore pnpm-workspace.yaml

---
 .npmignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.npmignore b/.npmignore
index b60af40..e32225a 100644
--- a/.npmignore
+++ b/.npmignore
@@ -14,3 +14,4 @@ tests/
 .gitattributes
 .gitignore
 tsconfig.json
+pnpm-workspace.yaml

From c723b5d052c531460f564a14709870c3bfd87fd0 Mon Sep 17 00:00:00 2001
From: Jumpei Ogawa <git@phanective.org>
Date: Tue, 2 Dec 2025 11:59:11 +0900
Subject: [PATCH 2/2] chore: migrate to npm's Trusted Publishing

---
 .github/workflows/actions.yml | 7 ++++---
 mise.toml                     | 3 ---
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
index a36a52c..0cb8b00 100644
--- a/.github/workflows/actions.yml
+++ b/.github/workflows/actions.yml
@@ -66,6 +66,9 @@ jobs:
     if: github.event_name == 'release'
     runs-on: ubuntu-latest
     timeout-minutes: 5
+    permissions:
+      contents: read
+      id-token: write # required to publish npm package
     steps:
       - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
@@ -78,6 +81,4 @@ jobs:
           name: dist
           path: dist
 
-      - name: Set npm auth token
-        run: echo "//registry.npmjs.org/:_authToken=${{secrets.NPM_AUTH_TOKEN}}" > ~/.npmrc
-      - run: mise release
+      - run: npm publish
diff --git a/mise.toml b/mise.toml
index 89a056c..1c9d3f6 100644
--- a/mise.toml
+++ b/mise.toml
@@ -30,9 +30,6 @@ node = { version = "24" }
     "mise install"
   ]
 
-  [tasks.release]
-  run = "npm publish --access public --non-interactive"
-
 [hooks]
 postinstall = [
   "corepack enable",