Update publish-npm.yml

Author: reygcalantaol

.github/workflows/publish-npm.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Get package version
         id: package_version
@@ -68,6 +68,7 @@ jobs:
 
     permissions:
       contents: read
+      id-token: write
 
     steps:
       - name: Checkout repository
@@ -76,9 +77,14 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           registry-url: https://registry.npmjs.org/
 
+      - name: Show tool versions
+        run: |
+          node --version
+          npm --version
+
       - name: Install dependencies
         run: npm ci
 
@@ -99,16 +105,6 @@ jobs:
             echo "Version ${PACKAGE_NAME}@${PACKAGE_VERSION} does not exist on npm. Publishing."
           fi
 
-      - name: Verify npm auth
-        run: npm whoami
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-      - name: Publish to NPM
+      - name: Publish to NPM with trusted publishing
         if: steps.npm_check.outputs.exists == 'false'
-        run: |
-          echo "::remove-mask::$NODE_AUTH_TOKEN"
-          echo "NPM TOKEN $NODE_AUTH_TOKEN"
-          npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --provenance --access public