From 86d5bb419f297045305b8f1d5f3da8f0198305a8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 4 Nov 2025 23:11:55 +0000
Subject: [PATCH 1/2] chore(deps): update vidavidorra/.github action to v8

---
 .github/workflows/ci-cd.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 5b47875..1a01ee8 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -8,11 +8,11 @@ on:
   pull_request: null
 jobs:
   lint-commit-messages:
-    uses: vidavidorra/.github/.github/workflows/lint-commit-messages.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/lint-commit-messages.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
   lint:
-    uses: vidavidorra/.github/.github/workflows/node-lint.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/node-lint.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
   build:
-    uses: vidavidorra/.github/.github/workflows/node-build.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/node-build.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
     strategy:
       fail-fast: false
       matrix:
@@ -20,7 +20,7 @@ jobs:
     with:
       nodeVersion: ${{ matrix.nodeVersion }}
   test:
-    uses: vidavidorra/.github/.github/workflows/node-test.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/node-test.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
     strategy:
       fail-fast: false
       matrix:
@@ -28,7 +28,7 @@ jobs:
     with:
       nodeVersion: ${{ matrix.nodeVersion }}
   code-coverage:
-    uses: vidavidorra/.github/.github/workflows/node-test-coverage.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/node-test-coverage.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
     needs:
       - lint
       - build
@@ -36,7 +36,7 @@ jobs:
     secrets:
       codecovToken: ${{ secrets.CODECOV_TOKEN }}
   release:
-    uses: vidavidorra/.github/.github/workflows/release.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/release.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
     needs:
       - lint-commit-messages
       - lint

From 84063b4038c52b9bc28a24b48a5df4fd779a81f1 Mon Sep 17 00:00:00 2001
From: Jeroen de Bruijn <vv9239@gmail.com>
Date: Thu, 6 Nov 2025 20:53:39 +0100
Subject: [PATCH 2/2] fix: remove Codecov and NPM token from CI/CD workflow,
 use OIDC instead

---
 .github/workflows/ci-cd.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 1a01ee8..1aa7eeb 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -33,8 +33,6 @@ jobs:
       - lint
       - build
       - test
-    secrets:
-      codecovToken: ${{ secrets.CODECOV_TOKEN }}
   release:
     uses: vidavidorra/.github/.github/workflows/release.yml@06f357a271f8bc7c0bc61cf27ec8cdb4ec9c9d26 # v8.0.0
     needs:
@@ -45,4 +43,3 @@ jobs:
       - code-coverage
     secrets:
       privateKey: ${{ secrets.RELEASE_PRIVATE_KEY }}
-      npmToken: ${{ secrets.NPM_PUBLISH_TOKEN }}