From e013f7874503271699c6c81c5e2ac5577870c1bd Mon Sep 17 00:00:00 2001
From: Jean Burellier <jean.burellier@gmail.com>
Date: Tue, 16 Dec 2025 18:04:24 +0100
Subject: [PATCH 1/2] chore(ci): npm-publish via reusable workflows

---
 .github/workflows/npm-publish.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 .github/workflows/npm-publish.yml

diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
new file mode 100644
index 0000000..8bc47b4
--- /dev/null
+++ b/.github/workflows/npm-publish.yml
@@ -0,0 +1,14 @@
+name: Publish package to npm
+on:
+  release:
+    types: [created]
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish:
+    uses: expressjs/ci-workflows/.github/workflows/release.yml@main
+    secrets:
+      NPM_PUBLISH: ${{ secrets.NPM_PUBLISH }}

From 2cfde26aab5af62701883823936a6709e570a0d6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ulises=20Gasc=C3=B3n?= <ulisesgascongonzalez@gmail.com>
Date: Wed, 9 Sep 2026 11:27:03 +0200
Subject: [PATCH 2/2] Update .github/workflows/npm-publish.yml

---
 .github/workflows/npm-publish.yml | 33 ++++++++++++++++++++++++++-----
 1 file changed, 28 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 8bc47b4..5c970c7 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -1,14 +1,37 @@
 name: Publish package to npm
+
 on:
   release:
-    types: [created]
+    types: [published]
+
+concurrency:
+  group: "${{ github.workflow }} ✨ ${{ github.ref }}"
+  cancel-in-progress: false
 
 permissions:
-  id-token: write
   contents: read
 
 jobs:
   publish:
-    uses: expressjs/ci-workflows/.github/workflows/release.yml@main
-    secrets:
-      NPM_PUBLISH: ${{ secrets.NPM_PUBLISH }}
+    name: Publish to npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: "lts/*"
+          registry-url: "https://registry.npmjs.org"
+
+      # npm stage publish requires npm >= 11.15.0
+      - name: Upgrade npm
+        run: npm install -g npm@latest
+
+      - name: Stage publish to npm
+        run: npm stage publish