From 319599a5b7561a47edd3422e060c0f78ca89f2aa Mon Sep 17 00:00:00 2001
From: Rajat <hi@rajatsaxena.dev>
Date: Wed, 4 Feb 2026 23:05:51 +0530
Subject: [PATCH] More changes

---
 .github/workflows/publish-packages.yaml | 36 ++++++++++++-------------
 package.json                            |  2 +-
 2 files changed, 18 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/publish-packages.yaml b/.github/workflows/publish-packages.yaml
index 597dbd0b..d4e48d7e 100644
--- a/.github/workflows/publish-packages.yaml
+++ b/.github/workflows/publish-packages.yaml
@@ -15,33 +15,32 @@ env:
 jobs:
   publish-packages:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+      pull-requests: write
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
+      - name: Install pnpm 
+        uses: pnpm/action-setup@v4
+        with:
+          version: latest
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+
       - name: Configure CI Git User
         run: |
           git config --global user.name 'Rajat Saxena'
           git config --global user.email 'hi@sub.rajatsaxena.dev'
-          git remote set-url origin https://$GITHUB_ACTOR:$GITHUB_PAT@github.com/codelitdev/medialit
-        env:
-          GITHUB_PAT: ${{ secrets.PAT }}
-
-      - name: Checkout and pull branch
-        run: git checkout "${GITHUB_REF:11}" && git pull
-
-      - name: Install pnpm 
-        run: |
-          npm i pnpm@latest -g
-
-      # - name: Authenticate with Registry
-      #   run: |
-      #     echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc
-      #     npm whoami
-      #   env:
-      #     NPM_TOKEN: ${{ secrets.NPM }}
+          git remote set-url origin https://x-access-token:${{ secrets.PAT }}@github.com/${{ github.repository }}
 
       - name: Install dependencies
         run: pnpm install 
@@ -55,7 +54,6 @@ jobs:
           publish: pnpm ci:publish 
         env:
           GITHUB_TOKEN: ${{ secrets.PAT }}
-          NPM_TOKEN: ${{ secrets.NPM }}
 
       - name: Echo changeset output
         run: echo "${{ steps.changesets.outputs.hasChangesets }}"
diff --git a/package.json b/package.json
index 6edb55bb..1fa0d725 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
   },
   "scripts": {
     "prepare": "husky",
-    "ci:publish": "pnpm publish -r",
+    "ci:publish": "pnpm publish -r --provenance --no-git-checks",
     "test": "pnpm --filter @medialit/api --filter medialit test",
     "lint": "eslint --cache --quiet",
     "prettier": "prettier --check **/*.{ts,tsx,js,css,md}",