diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 21a35bb..0cbfa3b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,11 +36,6 @@ jobs: publish: runs-on: ubuntu-latest timeout-minutes: 15 - # Both registries trust OIDC tokens from this environment only - environment: release - permissions: - contents: read - id-token: write # OIDC for Azure login and Open VSX trusted publishing steps: - name: Checkout uses: actions/checkout@v7 @@ -50,7 +45,7 @@ jobs: - name: Setup pnpm uses: pnpm/action-setup@v6 - # No dependency cache in a job that can mint publishing tokens + # No dependency cache in a job that holds publishing tokens - name: Setup Node.js uses: actions/setup-node@v7 with: @@ -62,15 +57,12 @@ jobs: - name: Package extension run: pnpm run package --out toon.vsix - - name: Log in to Azure - uses: azure/login@v3 - with: - client-id: ${{ vars.AZURE_CLIENT_ID }} - tenant-id: ${{ vars.AZURE_TENANT_ID }} - subscription-id: ${{ vars.AZURE_SUBSCRIPTION_ID }} - - name: Publish to VS Code Marketplace - run: pnpm exec vsce publish --packagePath toon.vsix --azure-credential + run: pnpm exec vsce publish --packagePath toon.vsix + env: + VSCE_PAT: ${{ secrets.VSCE_PAT }} - name: Publish to Open VSX - run: pnpm exec ovsx publish toon.vsix --trusted-publishing + run: pnpm exec ovsx publish toon.vsix + env: + OVSX_PAT: ${{ secrets.OVSX_PAT }} diff --git a/package.json b/package.json index 19471fb..3ac4cea 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,7 @@ "name": "toon", "displayName": "Token-Oriented Object Notation (TOON) Support", "type": "module", - "version": "0.0.1", + "version": "0.1.0", "packageManager": "pnpm@11.17.0", "description": "Syntax highlighting for TOON (Token-Oriented Object Notation)", "license": "MIT",