From e03632266ae6f8d387d73a473e9e04b898a18fab Mon Sep 17 00:00:00 2001
From: Jonny Larsson <jonny@gardnet.nu>
Date: Sun, 11 Oct 2026 21:20:20 +0200
Subject: [PATCH] Update NuGet push to Trusted Publishing

---
 .github/workflows/release.yml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b8f0d5b..e712fdc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -30,10 +31,13 @@ jobs:
           restore-keys: ${{ runner.os }}-nuget-
       - name: Pack
         run: dotnet pack MudBlazor.ThemeManager.slnx --configuration Release --output artifacts/packages
-      - name: 'Push: nuget.org'
-        env:
-          NUGET_KEY: ${{ secrets.NUGET_KEY }}
-        run: dotnet nuget push "artifacts/packages/*.nupkg" --source https://api.nuget.org/v3/index.json --api-key "$NUGET_KEY" --skip-duplicate
+      - name: NuGet login
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: MudBlazor
+      - name: NuGet push
+        run: dotnet nuget push "artifacts/packages/*.nupkg" --api-key ${{steps.login.outputs.NUGET_API_KEY}} --source https://api.nuget.org/v3/index.json --skip-duplicate
       - name: 'Push: GitHub Packages'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}