Commit 6836e985f1 for woocommerce

commit 6836e985f1ebc84e4872b4f42e6e79300c0a13c3
Author: Brandon Kraft <public@brandonkraft.com>
Date:   Mon Dec 1 16:14:04 2025 -0600

    Release Automation: update npmjs auth to OIDC (#62056)

    * Release Automation: update npmjs auth to OIDC

    * Use latest NPM for the publish workflow

diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml
index bb3945fdef..b01864bb38 100644
--- a/.github/workflows/package-release.yml
+++ b/.github/workflows/package-release.yml
@@ -11,7 +11,9 @@ on:
         type: boolean
         required: false

-permissions: { }
+permissions: {
+  id-token: write  # Required for OIDC
+}

 jobs:
   release:
@@ -34,7 +36,5 @@ jobs:

       - name: Execute script
         run: |
-          npm config set '//registry.npmjs.org/:_authToken' "${NODE_AUTH_TOKEN}"
+          npm install -g npm@latest # Need NPM 11.5.1+ for OIDC support. pnpm publish passes through to npm.
           ./tools/package-release/bin/dev publish ${{ github.event.inputs.packages }} --branch=${{ github.ref_name }} ${{ ( github.event.inputs.dry_run == 'true' && '--dry-run' ) || '' }} --skip-install
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}