From 4fb0eb92ac7be4d8c23e1ec92ad9baa2929b85ff Mon Sep 17 00:00:00 2001
From: Sebastian Sebbie Silbermann <sebastian.silbermann@vercel.com>
Date: Wed, 12 Nov 2025 11:22:18 +0100
Subject: [PATCH] Switch to trusted publishing

---
 .github/workflows/validate.yml | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index e0098c08..3fe8d7c5 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -6,8 +6,6 @@ on:
       # e.g. "12.x" or "8.x"
       - '[0-9]+.x'
       - 'main'
-      - 'next'
-      - 'next-major'
       - 'beta'
       - 'alpha'
       - '!all-contributors/**'
@@ -29,7 +27,7 @@ jobs:
       # Otherwise we would not know if the problem is tied to the Node.js version
       fail-fast: false
       matrix:
-        node: [18, 20]
+        node: [18, 24]
     runs-on: ubuntu-latest
     steps:
       - name: ⬇️ Checkout repo
@@ -63,7 +61,9 @@ jobs:
           token: ${{ secrets.CODECOV_TOKEN }} # required
 
   release:
+    environment: production
     permissions:
+      id-token: write # Required for OIDC
       contents: write #  to create release tags (cycjimmy/semantic-release-action)
       issues: write # to post release that resolves an issue
 
@@ -79,7 +79,7 @@ jobs:
       - name: ⎔ Setup node
         uses: actions/setup-node@v3
         with:
-          node-version: 18
+          node-version: 24
 
       - name: 📥 Download deps
         uses: bahmutov/npm-install@v1
@@ -90,18 +90,15 @@ jobs:
         run: npm run build
 
       - name: 🚀 Release
-        uses: cycjimmy/semantic-release-action@v2
+        uses: cycjimmy/semantic-release-action@v5
         with:
-          semantic_version: 17
+          semantic_version: 25
           branches: |
             [
               '+([0-9])?(.{+([0-9]),x}).x',
               'main',
-              'next',
-              'next-major',
               {name: 'beta', prerelease: true},
               {name: 'alpha', prerelease: true}
             ]
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}