From 4364ff08f268f8d68b1712c4b3d3904ca7760608 Mon Sep 17 00:00:00 2001
From: Jeremy Klein <jklein24@gmail.com>
Date: Sun, 4 Jan 2026 12:00:49 -0800
Subject: [PATCH] Add required permission for npm trusted publishing

See https://docs.npmjs.com/trusted-publishers#supported-cicd-providers. Migrating away from direct api tokens.
---
 .github/workflows/test-release-sync.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/test-release-sync.yaml b/.github/workflows/test-release-sync.yaml
index a989c4947..b13519638 100644
--- a/.github/workflows/test-release-sync.yaml
+++ b/.github/workflows/test-release-sync.yaml
@@ -155,6 +155,7 @@ jobs:
     name: Release
     needs: ["checks", "build"]
     permissions:
+      id-token: write
       contents: write
       pull-requests: write
     if: "success() && github.event_name == 'push'"