From c41a169b8ba70549966a3b711d320cddc6d5d3b6 Mon Sep 17 00:00:00 2001
From: Eli Zibin <1131641+zibs@users.noreply.github.com>
Date: Fri, 5 Sep 2025 09:53:14 -0700
Subject: [PATCH 1/2] chore: oidc conversion

---
 .github/workflows/pull-request.yml | 2 +-
 .github/workflows/release.yml      | 8 ++++++--
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index f709ec67..739eedca 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -14,7 +14,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: 'yarn'
 
       - name: Install dependencies
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b0111abc..68e10995 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,9 +22,14 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: 'yarn'
 
+      - name: Upgrade npm for OIDC
+        run: npm i -g npm@^11.5.1
+
+      - run: npm config set registry https://registry.npmjs.org
+
       - name: Install dependencies
         run: yarn install --frozen-lockfile
 
@@ -39,4 +44,3 @@ jobs:
           publish: yarn changeset publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

From 0eda428369abeca4a58c5bdc7c60f60c7f6deef9 Mon Sep 17 00:00:00 2001
From: Eli Zibin <1131641+zibs@users.noreply.github.com>
Date: Fri, 5 Sep 2025 09:54:36 -0700
Subject: [PATCH 2/2] Update release.yml

---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 68e10995..acf9ca23 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,6 +7,7 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    environment: Production
     permissions:
       contents: write
       id-token: write