fix: release

[petar-omni]

No description provided.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 472b7c3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Copilot]

Pull request overview

This PR updates the release workflow to remove the NPM_TOKEN secret and switch to OIDC-based authentication for npm publishing.

• Removes NPM_TOKEN by setting it to an empty string
• Adds a comment explaining the change references a changesets GitHub issue

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Setting NPM_TOKEN to an empty string may not be sufficient to enable OIDC authentication for npm publishing. The workflow has id-token: write permission (line 17), but there's no explicit configuration to set up npm to use OIDC provenance.

According to the changesets issue referenced, you typically need to configure npm authentication by creating an .npmrc file or setting NPM_CONFIG_PROVENANCE=true environment variable to enable OIDC-based publishing with provenance. Consider adding:

env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  NPM_CONFIG_PROVENANCE: true

Or ensure an .npmrc file is configured appropriately for OIDC authentication.

Suggested change

	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_CONFIG_PROVENANCE: true