From 99156e0f2f43caafeb3352f1e3217aa91d7e2fc9 Mon Sep 17 00:00:00 2001
From: Even Stensberg <evenstensberg@gmail.com>
Date: Wed, 14 Oct 2026 14:26:28 +0200
Subject: [PATCH] ci: higher level vars

---
 .changeset/twenty-houses-burn.md | 5 +++++
 .github/workflows/release.yml    | 9 ++++-----
 2 files changed, 9 insertions(+), 5 deletions(-)
 create mode 100644 .changeset/twenty-houses-burn.md

diff --git a/.changeset/twenty-houses-burn.md b/.changeset/twenty-houses-burn.md
new file mode 100644
index 0000000..0d8bbfe
--- /dev/null
+++ b/.changeset/twenty-houses-burn.md
@@ -0,0 +1,5 @@
+---
+"coffee-loader": patch
+---
+
+testing ci workflow
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b41445d..2c3ada3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,7 +7,10 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
-permissions: {}
+permissions:
+  id-token: write # Required for OIDC
+  contents: write
+  pull-requests: write
 
 jobs:
   release:
@@ -16,10 +19,6 @@ jobs:
     runs-on: ubuntu-latest
     # Must match the environment set on the npm trusted publisher for this package.
     environment: npm
-    permissions:
-      id-token: write # mint the OIDC token npm exchanges for a short-lived publish token
-      contents: write # version commit, tags and GitHub releases
-      pull-requests: write # open/update the release pull request
     outputs:
       published: ${{ steps.changesets.outputs.published }}
       publishedPackages: ${{ steps.changesets.outputs.publishedPackages }}