From 09ac21435639678eaca598ba3bca4fc49650edd4 Mon Sep 17 00:00:00 2001
From: Boaz Poolman <boaz_skater@hotmail.com>
Date: Sun, 1 Mar 2026 18:57:46 +0100
Subject: [PATCH] fix: use npm to publish instead of yarn to allow provenance

---
 .github/workflows/publish.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3cc7219..2a75b6f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -44,9 +44,7 @@ jobs:
       - name: Set package version
         run: yarn version --new-version "${{ steps.get_version.outputs.VERSION }}" --no-git-tag-version
       - name: Publish package
-        run: yarn publish --access public --tag ${{ steps.extract_tag.outputs.NPM_TAG }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --tag ${{ steps.extract_tag.outputs.NPM_TAG }}
       - name: Push version bump
         uses: stefanzweifel/git-auto-commit-action@v4
         with: