From 25fb0a1a905f6a981a60d1daafc4841e1fbf3b71 Mon Sep 17 00:00:00 2001
From: Birk Skyum <birk.skyum@pm.me>
Date: Fri, 13 Mar 2026 23:04:22 +0100
Subject: [PATCH] ci: trusted publishing permissions

---
 .github/workflows/release.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bf94748..e864512 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,6 +7,11 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+
 jobs:
   release:
     name: Release
@@ -21,9 +26,10 @@ jobs:
           version: 9.15.3
 
       - name: Setup Node.js 24.x
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 24.x
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install Dependencies
         run: pnpm i --frozen-lockfile