From 23f7dd6ee3d9c8f7e590b35ac9bc8d62046792ac Mon Sep 17 00:00:00 2001
From: "SPRINX0\\prochazka" <jan.prochazka@sprinx.com>
Date: Thu, 30 Oct 2025 13:18:05 +0100
Subject: [PATCH] use OIDC NPM sign

---
 workflow-templates/build-npm.yaml | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/workflow-templates/build-npm.yaml b/workflow-templates/build-npm.yaml
index a2f74f558..5c0fb3a86 100644
--- a/workflow-templates/build-npm.yaml
+++ b/workflow-templates/build-npm.yaml
@@ -8,6 +8,10 @@ on:
       - 'v[0-9]+.[0-9]+.[0-9]+'
       - 'v[0-9]+.[0-9]+.[0-9]+-alpha.[0-9]+'
 
+permissions:
+  id-token: write
+  contents: write
+
 # on:
 #   push:
 #     branches:
@@ -35,11 +39,15 @@ jobs:
         with:
           node-version: 22.x
 
-      - name: Configure NPM token
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: |
-          npm config set '//registry.npmjs.org/:_authToken' "${NPM_TOKEN}"
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
+
+      # - name: Configure NPM token
+      #   env:
+      #     NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      #   run: |
+      #     npm config set '//registry.npmjs.org/:_authToken' "${NPM_TOKEN}"
 
       - name: yarn install
         run: |