From 47f283f89144d9a1b48d5fd0f1ce3e661b10d2ac Mon Sep 17 00:00:00 2001
From: Abimael Martell <1450169+abimaelmartell@users.noreply.github.com>
Date: Wed, 26 Aug 2026 16:56:52 -0700
Subject: [PATCH] ci: use trusted publishing for JS SDK (#4423)

* ci: use trusted publishing for JS SDK

* ci: keep pnpm for JS SDK publishing
---
 .github/workflows/publish-js-sdk.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/publish-js-sdk.yml b/.github/workflows/publish-js-sdk.yml
index c0e96fceb..74bbb9863 100644
--- a/.github/workflows/publish-js-sdk.yml
+++ b/.github/workflows/publish-js-sdk.yml
@@ -11,10 +11,14 @@ on:
 env:
   TEST_API_KEY: ${{ secrets.TEST_API_KEY }}
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish:
     name: Publish
-    runs-on: blacksmith-2vcpu-ubuntu-2404
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
       - name: Install pnpm
@@ -24,13 +28,9 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: "pnpm"
           cache-dependency-path: './apps/js-sdk/firecrawl/pnpm-lock.yaml'
-      - name: Authenticate
-        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Publish
         run: |
           pnpm install