From a43ae5e60feec6c62a0f2c18d711a390c1f5d6f0 Mon Sep 17 00:00:00 2001
From: Rafael Mestre <rafael@herodevs.com>
Date: Fri, 5 Sep 2025 08:43:44 -0400
Subject: [PATCH 1/2] chore: fix latest npm dist-tag

---
 .github/workflows/ci.yml | 56 +++++-----------------------------------
 1 file changed, 6 insertions(+), 50 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 45224b2d..2b3d1f50 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,57 +4,13 @@ on:
   pull_request:
 
 jobs:
-  commit-lint:
-    name: Commit Lint
+  npm-restore-latest:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-      - uses: wagoid/commitlint-github-action@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed # v6.2.1
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
 
-  code-quality:
-    name: Code Quality
-    needs: commit-lint
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-      - name: Setup Biome CLI
-        uses: biomejs/setup-biome@a9763ed3d2388f5746f9dc3e1a55df7f4609bc89 # v2.5.1
-      - name: Run Biome
-        run: biome ci
-
-  shellcheck:
-    name: Shell Script Linting
-    needs: code-quality
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-      - name: Install ShellCheck
-        run: sudo apt-get install shellcheck
-      - name: Run ShellCheck
-        run: shellcheck scripts/*.sh
-
-  build-and-test:
-    needs: shellcheck
-    strategy:
-      fail-fast: false
-      max-parallel: 3
-      matrix:
-        node: [20, 22, 24]
-        platform: [ubuntu-latest, macos-latest, windows-latest]
-    name: "${{matrix.platform}} w/ Node.js ${{matrix.node}}.x"
-    runs-on: ${{matrix.platform}}
-    env:
-      GRAPHQL_HOST: ${{ secrets.NEW_GRAPHQL_HOST }}
-      EOL_REPORT_URL: ${{ secrets.EOL_REPORT_URL }}
-    steps:
-      - uses: actions/checkout@v5
-      - name: "Use Node.js ${{matrix.node}}.x"
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
-        with:
-          node-version: ${{matrix.node}}.x
-      - run: npm ci
-      - run: npm run build
-      - run: npm test
-      - run: npm run test:e2e
+      - name: 
+        run: npm dist-tag add @herodevs/cli@0.3.1 latest
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.HD_CLI_NPM_TOKEN }}
\ No newline at end of file

From 49177ed256f48d696933c86434aa75ebe27d8ed4 Mon Sep 17 00:00:00 2001
From: Rafael Mestre <rafael@herodevs.com>
Date: Fri, 5 Sep 2025 08:47:13 -0400
Subject: [PATCH 2/2] chore: add permissions and explicit config

---
 .github/workflows/ci.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2b3d1f50..9f966925 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,11 +6,16 @@ on:
 jobs:
   npm-restore-latest:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version-file: '.nvmrc'
+          registry-url: 'https://registry.npmjs.org'
 
-      - name: 
+      - name: Restore latest tag
         run: npm dist-tag add @herodevs/cli@0.3.1 latest
         env:
           NODE_AUTH_TOKEN: ${{ secrets.HD_CLI_NPM_TOKEN }}
\ No newline at end of file