From 927c425df4a2b0d9f47fe63677a2922ea5614327 Mon Sep 17 00:00:00 2001
From: Eli Polonsky <epolon@amazon.com>
Date: Thu, 11 Sep 2025 11:21:50 -0400
Subject: [PATCH 1/2] mid work

---
 .github/workflows/release.yml | 4 ++--
 projenrc/jsii.ts              | 9 +++++----
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 292ef4c74..c016413a8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -292,7 +292,7 @@ jobs:
           NPM_DIST_TAG: latest
           NPM_REGISTRY: registry.npmjs.org
           NPM_CONFIG_PROVENANCE: "true"
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TRUSTED_PUBLISHER: "true"
         run: npx -p publib@latest publib-npm
   aws-cdk-cloud-assembly-schema_release_maven:
     name: "@aws-cdk/cloud-assembly-schema: Publish to Maven Central"
@@ -861,7 +861,7 @@ jobs:
           NPM_DIST_TAG: latest
           NPM_REGISTRY: registry.npmjs.org
           NPM_CONFIG_PROVENANCE: "true"
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TRUSTED_PUBLISHER: "true"
         run: npx -p publib@latest publib-npm
   aws-cdk-cli-lib-alpha_release_maven:
     name: "@aws-cdk/cli-lib-alpha: Publish to Maven Central"
diff --git a/projenrc/jsii.ts b/projenrc/jsii.ts
index 4f3c82a22..74f0ece7e 100644
--- a/projenrc/jsii.ts
+++ b/projenrc/jsii.ts
@@ -270,6 +270,7 @@ export class JsiiBuild extends pj.Component {
       registry: tsProject.package.npmRegistry,
       npmTokenSecret: tsProject.package.npmTokenSecret,
       npmProvenance: tsProject.package.npmProvenance,
+      trustedPublishing: true,
       // No support for CodeArtifact here
       // codeArtifactOptions: tsProject.codeArtifactOptions,
     };
@@ -477,10 +478,10 @@ export class JsiiBuild extends pj.Component {
     target: JsiiPacmakTarget,
     packTask: pj.Task,
   ): {
-      publishTools: Tools;
-      bootstrapSteps: Array<Step>;
-      packagingSteps: Array<Step>;
-    } {
+    publishTools: Tools;
+    bootstrapSteps: Array<Step>;
+    packagingSteps: Array<Step>;
+  } {
     const bootstrapSteps: Array<Step> = [];
     const packagingSteps: Array<Step> = [];
 

From 0bc8a6437d9e9008ecba73d89f4d6b0937fabace Mon Sep 17 00:00:00 2001
From: github-actions <github-actions@github.com>
Date: Thu, 11 Sep 2025 15:30:13 +0000
Subject: [PATCH 2/2] chore: self mutation

Signed-off-by: github-actions <github-actions@github.com>
---
 projenrc/jsii.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/projenrc/jsii.ts b/projenrc/jsii.ts
index 74f0ece7e..b74b6d85a 100644
--- a/projenrc/jsii.ts
+++ b/projenrc/jsii.ts
@@ -478,10 +478,10 @@ export class JsiiBuild extends pj.Component {
     target: JsiiPacmakTarget,
     packTask: pj.Task,
   ): {
-    publishTools: Tools;
-    bootstrapSteps: Array<Step>;
-    packagingSteps: Array<Step>;
-  } {
+      publishTools: Tools;
+      bootstrapSteps: Array<Step>;
+      packagingSteps: Array<Step>;
+    } {
     const bootstrapSteps: Array<Step> = [];
     const packagingSteps: Array<Step> = [];