ci: publish v0.1.0 with registry tokens

.github/workflows/release.yml

@@ -36,11 +36,6 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     timeout-minutes: 15
-    # Both registries trust OIDC tokens from this environment only
-    environment: release
-    permissions:
-      contents: read
-      id-token: write # OIDC for Azure login and Open VSX trusted publishing
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -50,7 +45,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v6
 
-      # No dependency cache in a job that can mint publishing tokens
+      # No dependency cache in a job that holds publishing tokens
       - name: Setup Node.js
         uses: actions/setup-node@v7
         with:
@@ -62,15 +57,12 @@ jobs:
       - name: Package extension
         run: pnpm run package --out toon.vsix
 
-      - name: Log in to Azure
-        uses: azure/login@v3
-        with:
-          client-id: ${{ vars.AZURE_CLIENT_ID }}
-          tenant-id: ${{ vars.AZURE_TENANT_ID }}
-          subscription-id: ${{ vars.AZURE_SUBSCRIPTION_ID }}
-
       - name: Publish to VS Code Marketplace
-        run: pnpm exec vsce publish --packagePath toon.vsix --azure-credential
+        run: pnpm exec vsce publish --packagePath toon.vsix
+        env:
+          VSCE_PAT: ${{ secrets.VSCE_PAT }}
 
       - name: Publish to Open VSX
-        run: pnpm exec ovsx publish toon.vsix --trusted-publishing
+        run: pnpm exec ovsx publish toon.vsix
+        env:
+          OVSX_PAT: ${{ secrets.OVSX_PAT }}

package.json

@@ -3,7 +3,7 @@
   "name": "toon",
   "displayName": "Token-Oriented Object Notation (TOON) Support",
   "type": "module",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "packageManager": "[email protected]",
   "description": "Syntax highlighting for TOON (Token-Oriented Object Notation)",
   "license": "MIT",