From b305245b43b8e139947e1d5976ef033c2da3d8c1 Mon Sep 17 00:00:00 2001
From: seveibar <seveibar@gmail.com>
Date: Wed, 19 Aug 2026 14:47:33 -0700
Subject: [PATCH] Migrate npm publishing to OIDC

---
 .github/workflows/bun-pver-release.yml | 10 +++++++---
 package.json                           |  4 ++++
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/bun-pver-release.yml b/.github/workflows/bun-pver-release.yml
index 06408ef..f802b4e 100644
--- a/.github/workflows/bun-pver-release.yml
+++ b/.github/workflows/bun-pver-release.yml
@@ -4,6 +4,10 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: write
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -15,14 +19,14 @@ jobs:
         uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           registry-url: https://registry.npmjs.org/
+          package-manager-cache: false
       - run: npm install -g pver
       - run: bun install --frozen-lockfile
       - run: bun run build
       - run: pver release
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.TSCIRCUIT_BOT_GITHUB_TOKEN }}
diff --git a/package.json b/package.json
index 2976e5a..c100642 100644
--- a/package.json
+++ b/package.json
@@ -1,5 +1,9 @@
 {
   "name": "@tscircuit/solver-utils",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tscircuit/solver-utils.git"
+  },
   "main": "dist/index.js",
   "version": "0.0.19",
   "files": [