From b4f15200780efe46b7182f9d785ebfc6f8fcb969 Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:10:19 +0100
Subject: [PATCH 1/7] Update dotnet-linux-pub.yml

---
 .github/workflows/dotnet-linux-pub.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index 103fb6b..53b6f84 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -23,9 +23,15 @@ jobs:
 
     - name: Test
       run: dotnet test --no-build --verbosity normal --configuration Release Pmad.Cartography.sln
+      
+    - name: NuGet login (OIDC → temp API key)
+      uses: NuGet/login@v1
+      id: login
+      with:
+        user: ${{ secrets.NUGET_USER }}
 
     - name: Publish Nuget to nuget.org
-      run: dotnet nuget push **/*.nupkg -k ${{ secrets.NUGET_PUSH_API_KEY }} -s https://api.nuget.org/v3/index.json --skip-duplicate
+      run: dotnet nuget push **/*.nupkg --api-key ${{ steps.login.outputs.NUGET_API_KEY }} -s https://api.nuget.org/v3/index.json --skip-duplicate
         
     - name: Publish NuGet package to GitHub
       run: |

From 79a624a87d38800a86296c0fc29ba3d9e577a681 Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:13:34 +0100
Subject: [PATCH 2/7] temp change to test

---
 .github/workflows/dotnet-linux-pub.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index 53b6f84..07e50cf 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -3,6 +3,8 @@ name: .NET Linux Publish Release
 on:
   release:
     types: [ "published" ]
+  pull_request:
+    branches: [ "**" ]
     
 jobs:
   build:

From ba53bb806110dca1557eed7d17dcc47193fbe7d5 Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:17:30 +0100
Subject: [PATCH 3/7] need id-token: write

---
 .github/workflows/dotnet-linux-pub.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index 07e50cf..adf5def 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -1,5 +1,8 @@
 name: .NET Linux Publish Release
 
+permissions:
+  id-token: write
+
 on:
   release:
     types: [ "published" ]

From da87584a5b172ba1c91bcb1ee8ceb542791b15d9 Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:21:50 +0100
Subject: [PATCH 4/7] Add contents read permission to publish workflow

---
 .github/workflows/dotnet-linux-pub.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index adf5def..9f4cf04 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -2,6 +2,7 @@ name: .NET Linux Publish Release
 
 permissions:
   id-token: write
+  contents: read
 
 on:
   release:

From c6fc1542e1b091545d762e5dc46ea79d32deb382 Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:24:37 +0100
Subject: [PATCH 5/7] Update permissions in dotnet-linux-pub workflow

---
 .github/workflows/dotnet-linux-pub.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index 9f4cf04..29bd131 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -1,8 +1,9 @@
 name: .NET Linux Publish Release
 
 permissions:
-  id-token: write
   contents: read
+  pages: write
+  id-token: write
 
 on:
   release:

From b8dc90b764c52714aacafecb76dcf945caafed24 Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:30:31 +0100
Subject: [PATCH 6/7] Simplify permissions in dotnet-linux-pub.yml

Removed unnecessary permissions for the workflow.
---
 .github/workflows/dotnet-linux-pub.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index 29bd131..fb24647 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -1,10 +1,5 @@
 name: .NET Linux Publish Release
 
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
 on:
   release:
     types: [ "published" ]
@@ -16,6 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       packages: write
+      id-token: write
     steps:
     - name: Checkout
       uses: actions/checkout@v4

From d09a63c507a68abc5f8f67297646d5f0ad3dd2db Mon Sep 17 00:00:00 2001
From: Julien Etelain <33651126+jetelain@users.noreply.github.com>
Date: Tue, 13 Jan 2026 22:34:29 +0100
Subject: [PATCH 7/7] remove test code

---
 .github/workflows/dotnet-linux-pub.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/dotnet-linux-pub.yml b/.github/workflows/dotnet-linux-pub.yml
index fb24647..c8dd782 100644
--- a/.github/workflows/dotnet-linux-pub.yml
+++ b/.github/workflows/dotnet-linux-pub.yml
@@ -3,9 +3,7 @@ name: .NET Linux Publish Release
 on:
   release:
     types: [ "published" ]
-  pull_request:
-    branches: [ "**" ]
-    
+
 jobs:
   build:
     runs-on: ubuntu-latest