From de33d0408655d244f5f1f0d9bab635c1af0d7b96 Mon Sep 17 00:00:00 2001
From: gaurav <721466+soodoku@users.noreply.github.com>
Date: Fri, 23 Oct 2026 14:39:47 -0700
Subject: [PATCH] Stop granting id-token to the shared release workflow

py-canon's reusable release no longer requests an OIDC token (py-canon#118).
The publish job keeps its own id-token grant.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/release.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 06f9d42..5bf163a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,6 @@ jobs:
     uses: gojiplus/py-canon/.github/workflows/reusable-release.yml@v1
     permissions:
       contents: write
-      id-token: write
     with:
       # `gh release create` fails when the release already exists, so create it
       # only on the original tag push — not on a manual re-run of a released tag.