From 3e0ec81053517622ca66fc3eb8f81b8994b46fb3 Mon Sep 17 00:00:00 2001
From: Guilherme Francisco <guilherme.de-freitas@diamond.ac.uk>
Date: Thu, 16 Jul 2026 16:26:02 +0100
Subject: [PATCH] Update OIDC permissions

---
 .github/workflows/npm-publish-pre-release.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/npm-publish-pre-release.yaml b/.github/workflows/npm-publish-pre-release.yaml
index d47cb5e8..24a7b9da 100644
--- a/.github/workflows/npm-publish-pre-release.yaml
+++ b/.github/workflows/npm-publish-pre-release.yaml
@@ -13,6 +13,9 @@ on:
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # Required for OIDC
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4