From 363640ba691a8b9427d91b78416f0103ffba5d4f Mon Sep 17 00:00:00 2001
From: unional <homawong@gmail.com>
Date: Sun, 9 Aug 2026 11:15:15 -0700
Subject: [PATCH] ci: release through cyberuni OIDC and point metadata at
 cyberuni

---
 .changeset/olive-donkeys-invite.md |  6 ++++++
 .github/workflows/pull-request.yml | 12 +++++++++++-
 .github/workflows/release.yml      | 12 +++++++++---
 .releaserc.json                    |  3 ---
 .yarnrc.yml                        |  7 -------
 README.md                          | 14 +++++++-------
 package.json                       |  6 +++---
 7 files changed, 36 insertions(+), 24 deletions(-)
 create mode 100644 .changeset/olive-donkeys-invite.md
 delete mode 100644 .releaserc.json
 delete mode 100644 .yarnrc.yml

diff --git a/.changeset/olive-donkeys-invite.md b/.changeset/olive-donkeys-invite.md
new file mode 100644
index 0000000..175265e
--- /dev/null
+++ b/.changeset/olive-donkeys-invite.md
@@ -0,0 +1,6 @@
+---
+'assertron': patch
+---
+
+Point repository metadata at `cyberuni/assertron` and release through npm trusted
+publishing (OIDC) instead of a long-lived `NPM_TOKEN`.
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 48b6683..f12d3a4 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -2,7 +2,17 @@ name: pull-request
 on:
   pull_request:
     types: [opened, synchronize]
+  merge_group:
 
 jobs:
   code:
-    uses: unional/.github/.github/workflows/pnpm-verify.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-verify.yml@main
+    with:
+      os: '["ubuntu-latest"]'
+      skip-playwright: true
+
+  publish-gate:
+    if: startsWith(github.head_ref, 'changeset-release/')
+    uses: cyberuni/.github/.github/workflows/pnpm-publish-gate.yml@main
+    permissions:
+      contents: read
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9b7e871..ce8cc8a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,9 +5,15 @@ on:
 
 jobs:
   code:
-    uses: unional/.github/.github/workflows/pnpm-verify.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-verify.yml@main
+    with:
+      os: '["ubuntu-latest"]'
+      skip-playwright: true
 
   release:
-    uses: unional/.github/.github/workflows/pnpm-release-changeset.yml@main
+    uses: cyberuni/.github/.github/workflows/pnpm-release-changeset-oidc.yml@main
     needs: code
-    secrets: inherit
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
diff --git a/.releaserc.json b/.releaserc.json
deleted file mode 100644
index f50e89a..0000000
--- a/.releaserc.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-	"branches": ["main", "next", "beta"]
-}
diff --git a/.yarnrc.yml b/.yarnrc.yml
deleted file mode 100644
index 7d689c7..0000000
--- a/.yarnrc.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-nodeLinker: node-modules
-
-plugins:
-  - path: .yarn/plugins/@yarnpkg/plugin-typescript.cjs
-    spec: "@yarnpkg/plugin-typescript"
-
-yarnPath: .yarn/releases/yarn-3.6.1.cjs
diff --git a/README.md b/README.md
index e38a91e..2fe4a2e 100644
--- a/README.md
+++ b/README.md
@@ -6,7 +6,7 @@
 [![GitHub NodeJS][github-nodejs]][github-action-url]
 [![Codecov][codecov-image]][codecov-url]
 
-[![Semantic Release][semantic-release-image]][semantic-release-url]
+[![Changesets][changesets-image]][changesets-url]
 
 [![Visual Studio Code][vscode-image]][vscode-url]
 
@@ -186,13 +186,13 @@ yarn verify
 [downloads-image]: https://img.shields.io/npm/dm/assertron.svg?style=flat
 [downloads-url]: https://npmjs.org/package/assertron
 
-[github-nodejs]: https://github.com/unional/assertron/workflows/nodejs/badge.svg
-[github-action-url]: https://github.com/unional/assertron/actions
-[codecov-image]: https://codecov.io/gh/unional/assertron/branch/master/graph/badge.svg
-[codecov-url]: https://codecov.io/gh/unional/assertron
+[github-nodejs]: https://github.com/cyberuni/assertron/actions/workflows/release.yml/badge.svg
+[github-action-url]: https://github.com/cyberuni/assertron/actions
+[codecov-image]: https://codecov.io/gh/cyberuni/assertron/branch/main/graph/badge.svg
+[codecov-url]: https://codecov.io/gh/cyberuni/assertron
 
-[semantic-release-image]: https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg
-[semantic-release-url]: https://github.com/semantic-release/semantic-release
+[changesets-image]: https://img.shields.io/badge/maintained%20with-changesets-176de3.svg
+[changesets-url]: https://github.com/changesets/changesets
 
 [vscode-image]: https://img.shields.io/badge/vscode-ready-green.svg
 [vscode-url]: https://code.visualstudio.com/
diff --git a/package.json b/package.json
index b6a9a2f..45246ea 100644
--- a/package.json
+++ b/package.json
@@ -2,13 +2,13 @@
   "name": "assertron",
   "version": "11.5.2",
   "description": "A supplementary assertion library",
-  "homepage": "https://github.com/unional/assertron",
+  "homepage": "https://github.com/cyberuni/assertron",
   "bugs": {
-    "url": "https://github.com/unional/assertron/issues"
+    "url": "https://github.com/cyberuni/assertron/issues"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/unional/assertron.git"
+    "url": "https://github.com/cyberuni/assertron.git"
   },
   "license": "MIT",
   "author": {