From 182c2a31fe76bb559e8433f65b4642f410e86b9a Mon Sep 17 00:00:00 2001
From: highlander <highlander@keepkey.com>
Date: Fri, 28 Aug 2026 00:10:31 -0600
Subject: [PATCH] ci: harden npm trusted publishing

---
 .github/workflows/build-and-publish.yml | 18 ++++++++++++------
 package.json                            |  2 +-
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index 6433bf84..d8b21fc2 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -14,10 +14,12 @@ jobs:
   build-and-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+          package-manager-cache: false
       - name: Install dependencies
         run: npm ci
       - name: Build
@@ -40,10 +42,12 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+          package-manager-cache: false
       - run: npm ci
       - run: npm run build
       - name: Set pre-release version
@@ -64,10 +68,12 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+          package-manager-cache: false
       - run: npm ci
       - run: npm run build
       - run: npm test
diff --git a/package.json b/package.json
index c625eda0..0127721a 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/BitHighlander/device-protocol.git"
+    "url": "git+https://github.com/BitHighlander/device-protocol.git"
   },
   "author": "",
   "license": "ISC",