From a136b4e4a8eb40d1b4351b57713db4e0c718ac94 Mon Sep 17 00:00:00 2001
From: Tiago Gimenes <tlgimenes@gmail.com>
Date: Fri, 22 May 2026 17:47:47 -0300
Subject: [PATCH 1/2] chore(release): 0.3.23

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a178d2a..d176901 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@deco-cx/warp-node",
-  "version": "0.3.22",
+  "version": "0.3.23",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@deco-cx/warp-node",
-      "version": "0.3.22",
+      "version": "0.3.23",
       "license": "MIT",
       "dependencies": {
         "undici": "^6.21.0",
diff --git a/package.json b/package.json
index a8f036f..965822b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@deco-cx/warp-node",
-  "version": "0.3.22",
+  "version": "0.3.23",
   "description": "WebSocket tunneling library for Node.js and other runtimes",
   "type": "module",
   "main": "dist/mod.js",

From c8e8f243af52c2f40a88fc41b3d304f2b6893d70 Mon Sep 17 00:00:00 2001
From: Tiago Gimenes <tlgimenes@gmail.com>
Date: Fri, 22 May 2026 17:52:42 -0300
Subject: [PATCH 2/2] ci: use npm Trusted Publishing OIDC for publish

Removes NODE_AUTH_TOKEN env var so npm CLI falls through to OIDC
token exchange (requires no _authToken in .npmrc). Upgrades npm CLI
to >=11.5.1 which adds automatic GitHub Actions OIDC for Trusted
Publishers.
---
 .github/workflows/publish.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e476836..f202807 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -32,6 +32,9 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Upgrade npm CLI for Trusted Publishing OIDC
+        run: npm install -g npm@latest
+
       - name: Run type check
         run: npm run typecheck
 
@@ -47,8 +50,6 @@ jobs:
 
       - name: Publish to NPM
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create GitHub Release
         if: startsWith(github.ref, 'refs/tags/v')