ci(release): enable npm OIDC trusted publishing (#287)

Author: saeedjamshaid

.github/workflows/release.yml

@@ -50,6 +50,11 @@ jobs:
         working-directory: 'cli'
         run: pnpm build
 
+      # npm trusted publishing (OIDC) requires npm >= 11.5.1; the runner's bundled
+      # npm (shipped with Node 22) is older, so upgrade it before publishing.
+      - name: Upgrade npm for OIDC trusted publishing
+        run: npm install -g npm@latest
+
       - name: Release
         working-directory: cli
         env:

package.json

@@ -116,7 +116,7 @@
         "nyc": "^17.1.0",
         "oclif": "^4.17.34",
         "rimraf": "^6.0.1",
-        "semantic-release": "^23.1.1",
+        "semantic-release": "^25.0.3",
         "simple-git": "^3.36.0",
         "sinon": "^21.0.0",
         "string-argv": "^0.3.1",