From 551445bcd5b8bd16fb273a3a129142e50401ed99 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Romuald=20Cz=C5=82onkowski?=
 <romualdczlonkowski@MacBook-Pro-Romuald.local>
Date: Fri, 12 Dec 2025 16:22:04 +0100
Subject: [PATCH] fix: revert to Node 20 and use granular NPM token
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

NPM classic tokens were revoked on Dec 9, 2025. OIDC trusted publishing
requires npm >= 11.5.1 which caused lockfile sync issues with npm ci.

Reverted to Node 20 with granular access token approach:
- Removed OIDC permissions block
- Removed npm upgrade step
- Restored NODE_AUTH_TOKEN usage
- Removed --provenance flag

User created new granular token with "Bypass 2FA" enabled.

Conceived by Romuald Członkowski - www.aiadvisors.pl/en

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 .github/workflows/release.yml | 18 ++++++------------
 package.json                  |  2 +-
 package.runtime.json          |  2 +-
 3 files changed, 8 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bfe5fe7..c28c143 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -308,25 +308,17 @@ jobs:
     runs-on: ubuntu-latest
     needs: [detect-version-change, build-and-verify, create-release]
     if: needs.detect-version-change.outputs.version-changed == 'true'
-    permissions:
-      contents: read
-      id-token: write  # Required for NPM Trusted Publishing (OIDC)
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 20
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
 
-      - name: Upgrade npm for OIDC support
-        run: |
-          npm install -g npm@latest
-          echo "npm version: $(npm --version)"
-
       - name: Install dependencies
         run: npm ci
       
@@ -401,8 +393,10 @@ jobs:
           max_attempts: 3
           command: |
             cd npm-publish-temp
-            npm publish --access public --provenance
-      
+            npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
       - name: Clean up
         if: always()
         run: rm -rf npm-publish-temp
diff --git a/package.json b/package.json
index f676e2b..66ca1df 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "n8n-mcp",
-  "version": "2.29.4",
+  "version": "2.29.5",
   "description": "Integration between n8n workflow automation and Model Context Protocol (MCP)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
diff --git a/package.runtime.json b/package.runtime.json
index 04ff198..2799988 100644
--- a/package.runtime.json
+++ b/package.runtime.json
@@ -1,6 +1,6 @@
 {
   "name": "n8n-mcp-runtime",
-  "version": "2.29.4",
+  "version": "2.29.5",
   "description": "n8n MCP Server Runtime Dependencies Only",
   "private": true,
   "dependencies": {