From 07b42fe5e830cfa65ad944ab9c2f8865f7c9f178 Mon Sep 17 00:00:00 2001
From: Liam Bigelow <40188355+bglw@users.noreply.github.com>
Date: Fri, 3 Apr 2026 11:16:40 +1300
Subject: [PATCH 1/2] Use trusted publishing for crates.io

---
 .github/workflows/release.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 52b4420..2f57b90 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -435,6 +435,9 @@ jobs:
 
       - name: Build
         run: cargo build --release --verbose
+      - name: Authenticate with crates.io
+        id: crates-io-auth
+        uses: rust-lang/crates-io-auth-action@v1
       - name: Publish Crate
         working-directory: ./toolproof
         run: |
@@ -444,4 +447,4 @@ jobs:
             cargo publish --allow-dirty
           fi
         env:
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ steps.crates-io-auth.outputs.token }}

From d2afccae373bff828a23acfb674535e20a2bc69f Mon Sep 17 00:00:00 2001
From: Liam Bigelow <40188355+bglw@users.noreply.github.com>
Date: Fri, 3 Apr 2026 11:18:50 +1300
Subject: [PATCH 2/2] Changelog

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 888e1a8..2b8587f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,8 @@
 
 ## Unreleased
 
+* No changes (CI release improvements)
+
 ## v0.17.1 (April 1, 2026)
 
 * Fixed binary permissions when executing toolproof through npm