chore: publish via trusted publisher (#276)

Author: KazuCocoa

.github/workflows/publish.js.yml

@@ -9,6 +9,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  id-token: write # to enable use of OIDC for trusted publishing and npm provenance
 
 jobs:
   build:
@@ -28,6 +29,5 @@ jobs:
     - run: npx semantic-release
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       name: Release
 

package.json

@@ -78,7 +78,7 @@
     "mocha": "^11.0.1",
     "prettier": "^3.0.0",
     "proxyquire": "^2.1.3",
-    "semantic-release": "^25.0.0",
+    "semantic-release": "^25.0.2",
     "sinon": "^21.0.0",
     "ts-node": "^10.9.1",
     "typescript": "^5.4.3"