release to OIDC

.github/workflows/release.yml

@@ -1,16 +1,18 @@
 name: Release
 
 on:
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
   push:
     branches:
       - main
 
-  # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
-
 permissions:
-  id-token: write # Required for OIDC
-  contents: read
+  id-token: write # Required for OIDC / npm provenance
+  contents: write # to create release (changesets/action)
+  pull-requests: write # to create pull request (changesets/action)
+
+concurrency: ${{ github.workflow }}-${{ github.ref }}
 
 jobs:
   release:
@@ -38,17 +40,21 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Update NPM
+        run: |
+          npm install -g npm@latest
+          npm -v
+
       # https://github.com/changesets/action
       - name: Publish on version increment
         uses: changesets/action@v1
         id: changesets
         with:
           publish: npx changeset publish
         env:
+          NPM_TOKEN: ''
           HOME: ${{ github.workspace }} # https://github.com/changesets/action/issues/147
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB }}
-          NPM_TOKEN: ''
 
       # When changesets has published a new version of @microsoft/atlas-css, then we can attempt to publish a new extension version too.
       - name: Publish VSCode extension on version increment

.npmrc

@@ -0,0 +1,2 @@
+registry=https://registry.npmjs.org/
+provenance=true

css/package.json

@@ -49,7 +49,7 @@
 	"homepage": "https://github.com/microsoft/atlas-design",
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/microsoft/atlas-design"
+		"url": "git+https://github.com/microsoft/atlas-design.git"
 	},
 	"engines": {
 		"node": "24.11.1",

js/package.json

@@ -15,7 +15,7 @@
 	"homepage": "https://github.com/microsoft/atlas-design",
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/microsoft/atlas-design"
+		"url": "git+https://github.com/microsoft/atlas-design.git"
 	},
 	"engines": {
 		"node": "24.11.1",

package.json

@@ -47,7 +47,7 @@
 	},
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/microsoft/atlas-design"
+		"url": "git+https://github.com/microsoft/atlas-design.git"
 	},
 	"workspaces": {
 		"packages": [