From 4662bce96c4cf8ec8b3a87b9ae1572539a353511 Mon Sep 17 00:00:00 2001
From: "Adolfo R. Brandes" <adolfo@axim.org>
Date: Tue, 27 Jan 2026 10:49:50 -0300
Subject: [PATCH] build: Update the release workflow to use OIDC.

Also make other smaller updates to modernize the release file.
---
 .github/workflows/release.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7b554140..38e7a280 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,11 @@ on:
   push:
     branches:
       - master
+
+permissions:
+  id-token: write  # Required for OIDC
+  contents: write  # For Semantic Release tagging
+
 jobs:
   release:
     name: Release
@@ -19,7 +24,6 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Release
+        run: npx semantic-release@25
         env:
           GITHUB_TOKEN: ${{ secrets.OPENEDX_SEMANTIC_RELEASE_GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.OPENEDX_SEMANTIC_RELEASE_NPM_TOKEN }}
-        run: npx semantic-release