From e70fbf83d66dd733b5b9e152b80815bd18eee501 Mon Sep 17 00:00:00 2001
From: Katy Bowman <katy.bowman@salesforce.com>
Date: Fri, 25 Sep 2026 16:21:55 -0400
Subject: [PATCH 1/2] ci: configure onRelease.yml for trusted publishing

---
 .github/workflows/onRelease.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/onRelease.yml b/.github/workflows/onRelease.yml
index 588957c331..75c49a7138 100644
--- a/.github/workflows/onRelease.yml
+++ b/.github/workflows/onRelease.yml
@@ -22,9 +22,13 @@ jobs:
       - uses: salesforcecli/github-workflows/.github/actions/getPreReleaseTag@main
         id: distTag
   npm:
+    permissions:
+      id-token: write
+      contents: read
     uses: salesforcecli/github-workflows/.github/workflows/npmPublish.yml@main
     needs: [getDistTag]
     with:
+      trustedPublishing: true
       tag: ${{ needs.getDistTag.outputs.tag || 'latest' }}
       githubTag: ${{ github.event.release.tag_name || inputs.tag }}
 

From 359179598077fbbb3438cf6f262a63cf1f41ad32 Mon Sep 17 00:00:00 2001
From: Katy Bowman <katy.bowman@salesforce.com>
Date: Mon, 28 Sep 2026 13:35:21 -0400
Subject: [PATCH 2/2] chore: bump core to latest

---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index ada36441e8..9ffbf61c63 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@salesforce/core": "^9.1.11",
+    "@salesforce/core": "^9.2.2",
     "@salesforce/kit": "^4.0.0",
     "@salesforce/ts-types": "^3.2.0",
     "@salesforce/types": "^1.6.0",
diff --git a/yarn.lock b/yarn.lock
index 6cfa31fdf8..ba8ed11a1e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -845,10 +845,10 @@
     ts-retry-promise "^0.8.1"
     zod "^4.1.12"
 
-"@salesforce/core@^9.1.11":
-  version "9.1.11"
-  resolved "https://registry.yarnpkg.com/@salesforce/core/-/core-9.1.11.tgz#dd2226ac1d67434575aac92eaa3ad9c1a12dcc2e"
-  integrity sha512-EE4oGYsoKThank4dQ1mVIzJjS9yP6C6s7JzKDx+ki8AFAxgpposzLc6GYwZZq1tS0XaOfBL2x+8RrgEgZvXwnw==
+"@salesforce/core@^9.2.2":
+  version "9.2.2"
+  resolved "https://registry.yarnpkg.com/@salesforce/core/-/core-9.2.2.tgz#e20561e763fef210c8a9f585a2fea84f7606e63e"
+  integrity sha512-7D4VqZuCzYbbrW5Yr4ECbVb3+fUa//YG7UMmWGBy3IwI/f65U5NuZ6ZTBOYuC0AM2/LXF97j2jASf5WubQVERg==
   dependencies:
     "@jsforce/jsforce-node" "^3.10.24"
     "@salesforce/kit" "^4.0.0"