Use the latest NPM version and fix permission in release workflow

Author: gonzaloriestra

.github/actions/setup-cli-deps/action.yml

@@ -24,6 +24,9 @@ runs:
         registry-url: 'https://registry.npmjs.org'
         cache: 'pnpm'
         cache-dependency-path: 'pnpm-lock.yaml'
+    - name: Install latest npm
+      run: npm install -g npm@latest
+      shell: bash
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
       shell: bash

.github/workflows/release.yml

@@ -52,11 +52,10 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Install pnpm
-        uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # pin@v4.0.0
+      - name: Setup deps
+        uses: ./.github/actions/setup-cli-deps
         with:
-          version: ${{ env.PNPM_VERSION }}
-          run_install: false
+          node-version: 24.1.0
       - name: Force snapshot changeset
         run: "mv .changeset/force-snapshot-build.md.ignore .changeset/force-snapshot-build.md"
       - name: Create snapshot version
@@ -87,7 +86,7 @@ jobs:
     if: ${{ github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && github.event.inputs.tag == '') }}
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       pull-requests: write
       id-token: write
     steps: