- Added environment: npm + id-token: write permission - Added --provenance flag for supply chain security - Removed NPM_TOKEN secret dependency - Added setup-node with registry-url for OIDC auth