From 4c4d150dba7fb30e8642c7021158f7f64c4cc43d Mon Sep 17 00:00:00 2001
From: KM Koushik <koushikmohan1996@gmail.com>
Date: Sun, 18 Jan 2026 22:03:24 +1100
Subject: [PATCH] fix: configure npm OIDC trusted publishing correctly

---
 .github/workflows/release-js-package.yml | 6 +++++-
 packages/sdk/package.json                | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release-js-package.yml b/.github/workflows/release-js-package.yml
index a318acf..834f304 100644
--- a/.github/workflows/release-js-package.yml
+++ b/.github/workflows/release-js-package.yml
@@ -9,7 +9,7 @@ on:
       - ".github/workflows/release-js-package.yml"
 
 permissions:
-  id-token: write  # Required for OIDC
+  id-token: write # Required for OIDC
   contents: read
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
@@ -28,10 +28,14 @@ jobs:
         uses: actions/setup-node@v3
         with:
           node-version: 20.x
+          registry-url: "https://registry.npmjs.org"
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v4
 
+      - name: Update npm for OIDC support
+        run: npm install -g npm@latest
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
diff --git a/packages/sdk/package.json b/packages/sdk/package.json
index 5c76788..7f64683 100644
--- a/packages/sdk/package.json
+++ b/packages/sdk/package.json
@@ -9,7 +9,7 @@
     "test": "echo \"Error: no test specified\" && exit 1",
     "lint": "eslint . --max-warnings 0",
     "build": "tsup",
-    "publish-sdk": "pnpm run build && npm publish --no-git-checks",
+    "publish-sdk": "pnpm run build && npm publish --access public --no-git-checks",
     "openapi-typegen": "openapi-typescript ../../apps/docs/api-reference/openapi.json -o types/schema.d.ts"
   },
   "keywords": [],