fix: add provenance attestation

Author: DASPRiD

.github/workflows/release.yml

@@ -5,6 +5,11 @@ on:
     branches:
       - main
 
+permissions:
+  id-token: write
+  contents: write
+  issues: write
+
 jobs:
   release:
     name: Release
@@ -17,6 +22,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 24.x
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Cache node modules
         uses: actions/cache@v4
@@ -51,6 +57,5 @@ jobs:
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           HUSKY: 0
-        run: npx semantic-release@^19
+        run: npx semantic-release@^25