From e8194540ed75d3eda2969e8794819f92f9cc2ee3 Mon Sep 17 00:00:00 2001
From: Kuba Adamczyk <jakub.adamczyk@phantom.app>
Date: Mon, 26 Jan 2026 10:38:49 +0100
Subject: [PATCH] Match config with SDK repo

---
 .github/workflows/release.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 71488f1cce..748b001b3a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,6 @@ jobs:
     env:
       # Force npm to emit provenance (SLSA) when publishing via OIDC.
       NPM_CONFIG_PROVENANCE: true
-      NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN_PHANTOM_SECURITY_BOT }}
 
     steps:
       - name: Checkout Repo
@@ -33,8 +32,8 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 20.x
+          cache: "yarn"
           registry-url: "https://registry.npmjs.org"
-          token: ${{ secrets.NPM_PUBLISH_TOKEN_PHANTOM_SECURITY_BOT }}
 
       - name: Ensure npm 11.5.1+ for trusted publishing
         run: npm install -g npm@^11.5.1
@@ -44,10 +43,11 @@ jobs:
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba
         with:
           # This expects you to have a script called release which does a build for your packages and calls changeset publish
+          version: yarn changeset version
           publish: yarn release
+          commitMode: github-api
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN_PHANTOM_SECURITY_BOT }}