Simplify: Use official npm Trusted Publishing workflow

Author: willwade

.github/workflows/publish.yml

@@ -1,70 +1,29 @@
 name: Publish Package
 
 on:
-  release:
-    types:
-      - published
+  push:
+    tags:
+      - "v*"
 
 permissions:
+  id-token: write # Required for OIDC
   contents: read
-  id-token: write
 
 jobs:
   publish:
-    if: ${{ github.event.release.prerelease == false }}
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
+      - uses: actions/checkout@v4
 
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: "20"
           registry-url: "https://registry.npmjs.org"
-          scope: "@willwade"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build
-        run: npm run build
-
-      - name: Derive release version
-        id: release_version
-        env:
-          RELEASE_TAG: ${{ github.event.release.tag_name }}
-        run: |
-          VERSION="${RELEASE_TAG#refs/tags/}"
-          VERSION="${VERSION#v}"
-          if [[ -z "$VERSION" ]]; then
-            echo "Unable to determine version from release tag '${RELEASE_TAG}'" >&2
-            exit 1
-          fi
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-
-      - name: Sync package metadata
-        run: |
-          npm version "${{ steps.release_version.outputs.version }}" --no-git-tag-version
-
-      - name: Get OIDC token
-        id: oidc
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const token = await core.getIDToken('https://registry.npmjs.org');
-            core.setOutput('token', token);
-
-      - name: Configure npm with OIDC token
-        run: |
-          npm config set //registry.npmjs.org/:_authToken "${{ steps.oidc.outputs.token }}"
-          npm config set @willwade:registry https://registry.npmjs.org/
 
-      - name: Publish to npm (Trusted Publishing)
-        run: npm publish --access public --provenance
+      # Ensure npm 11.5.1 or later is installed for proper OIDC support
+      - name: Update npm
+        run: npm install -g npm@latest
 
-      - name: Show npm debug log on failure
-        if: failure()
-        run: cat ~/.npm/_logs/*-debug-0.log | tail -100
+      - run: npm ci
+      - run: npm run build --if-present
+      - run: npm publish --access public