Merge remote-tracking branch 'origin/main' into next

Author: jacek-prisma

.github/workflows/publish-prisma-schema-wasm.yml

@@ -3,6 +3,9 @@ run-name: npm - release @prisma/prisma-schema-wasm@${{ github.event.inputs.engin
 
 concurrency: publish-prisma-schema-wasm
 
+permissions:
+  id-token: write # required for OIDC / Trusted Publishers
+
 on:
   # usually triggered via GH Actions Workflow in prisma/engines-wrapper repo
   workflow_dispatch:
@@ -42,9 +45,8 @@ jobs:
         with:
           node-version: '20.x'
 
-      # This is needed to be done manually because of `PACKAGE_DIR` used later
-      - name: Set up NPM token for publishing later
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
+      - name: Update npm to support Trusted Publishers
+        run: npm install -g npm@^11.5
 
       - name: Publish @prisma/prisma-schema-wasm
         run: npm publish --access public --tag ${{ github.event.inputs.npmDistTag }}

.github/workflows/publish-query-compiler-wasm.yml

@@ -3,6 +3,9 @@ run-name: npm - release @prisma/query-compiler-wasm@${{ github.event.inputs.pack
 
 concurrency: publish-query-compiler-wasm
 
+permissions:
+  id-token: write # required for OIDC / Trusted Publishers
+
 on:
   # usually triggered via GH Actions Workflow in prisma/engines-wrapper repo
   workflow_dispatch:
@@ -42,8 +45,8 @@ jobs:
         with:
           node-version: '20.x'
 
-      - name: Set up NPM token for publishing
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
+      - name: Update npm to support Trusted Publishers
+        run: npm install -g npm@^11.5
 
       - name: Publish @prisma/query-compiler-wasm
         run: npm publish --access public --tag ${{ github.event.inputs.npmDistTag }}

.github/workflows/publish-schema-engine-wasm.yml

@@ -3,6 +3,9 @@ run-name: npm - release @prisma/schema-engine-wasm@${{ github.event.inputs.packa
 
 concurrency: publish-schema-engine-wasm
 
+permissions:
+  id-token: write # required for OIDC / Trusted Publishers
+
 on:
   # usually triggered via GH Actions Workflow in prisma/engines-wrapper repo
   workflow_dispatch:
@@ -43,8 +46,8 @@ jobs:
         with:
           node-version: '20.x'
 
-      - name: Set up NPM token for publishing
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
+      - name: Update npm to support Trusted Publishers
+        run: npm install -g npm@^11.5
 
       - name: Publish @prisma/schema-engine-wasm
         run: npm publish --access public --tag ${{ github.event.inputs.npmDistTag }}

query-compiler/query-compiler-wasm/package.json

@@ -1,5 +1,10 @@
 {
   "name": "@prisma/query-compiler-wasm",
   "version": "0.0.0",
-  "type": "module"
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/prisma/prisma-engines",
+    "directory": "query-compiler/query-compiler-wasm"
+  }
 }