Add trusted publish

Author: ComfortablyCoding

.github/actions/setup/action.yml

@@ -1,22 +1,28 @@
 name: Setup
-description: Install dependencies and build package
 
 runs:
   using: composite
   steps:
-    - name: Install Node.js
+    - name: setup Node
       uses: actions/setup-node@v4
       with:
         node-version: 'lts/*'
         check-latest: true
         registry-url: https://registry.npmjs.org/
 
-    - uses: pnpm/action-setup@v4
-      name: Install pnpm
+    # Trusted publishing requires npm 11.5.1 or later is installed
+    - name: update npm
+      # required for composite actions
+      shell: bash
+      run: npm install -g npm@11.5.1
+
+    - name: setup pnpm
+      uses: pnpm/action-setup@v4
       with:
         run_install: false
         version: 10
 
-    - name: Install dependencies
+    - name: install dependencies
+      # required for composite actions
       shell: bash
       run: pnpm install

.github/workflows/publish.yml

@@ -1,4 +1,8 @@
-name: Publish
+name: Publish Package
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
 
 on:
   release:
@@ -14,11 +18,12 @@ jobs:
       - name: setup
         uses: ./.github/actions/setup
 
+      - name: test
+        run: pnpm test
+
       - name: build
         run: pnpm run build
 
       - name: publish to npm
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         shell: bash
-        run: pnpm publish --no-git-checks --access public
+        run: pnpm publish --access public --no-git-checks