chore: update publish workflow - #41

Merged

cowboyd merged 7 commits into

bombshell-dev:mainfrom

ghostdevv:ci-publish

May 27, 2026

Commits on May 24, 2026

chore: use hashes for versions
ghostdevv
committed
5ccbffd
chore: don't save git credentials
ghostdevv
committed
822b00e
chore: limit id-token permission to the publishing steps
ghostdevv
committed
851de35
chore: explicitly disable npm cache to mitigate cache poisoning attacks
ghostdevv
committed
e71f703
chore: mitigate potential template injection
ghostdevv
committed
a968d96
chore: use oidc
ghostdevv
committed
fa296c7
chore: update ::set-output command to new syntax
ghostdevv
committed
f48f103