mirror of
https://github.com/DietrichGebert/ponytail.git
synced 2026-09-14 18:11:01 +08:00
7d303b7175
Authenticate the release workflow through GitHub OIDC instead of a long-lived npm token: no secret to leak or rotate, provenance attached automatically. Upgrade npm on the runner since OIDC publishing needs npm >= 11.5.1 (Node 22 ships npm 10).