From c90c9c5419fd7f51837e9d58b218f47b76672c70 Mon Sep 17 00:00:00 2001
From: Tim Fabian <fabian@service-soft.de>
Date: Tue, 9 Dec 2025 23:27:55 +0100
Subject: [PATCH] fixed pipeline

---
 .github/workflows/cd.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 4cc6f61..3ec519c 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -7,6 +7,9 @@ on:
 jobs:
     deploy:
         if: github.event.pull_request.merged
+        permissions:
+            id-token: write  # Required for OIDC
+            contents: read
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4
@@ -14,16 +17,14 @@ jobs:
                 ref: release
             - run: npm ci
             - run: npm run build
-            - uses: JS-DevTools/npm-publish@v3
-              with:
-                token: ${{ secrets.NPM_TOKEN }}
+            - run: npm publish
 
     updateDocs:
         if: github.event.pull_request.merged
         # Grant GITHUB_TOKEN the permissions required to make a Pages deployment
         permissions:
-            pages: write      # to deploy to Pages
             id-token: write   # to verify the deployment originates from an appropriate source
+            pages: write      # to deploy to Pages
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4