chore: publish via trusted publisher (#1068)

Author: KazuCocoa

.github/workflows/publish.js.yml

@@ -12,6 +12,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  id-token: write # to enable use of OIDC for trusted publishing and npm provenance
 
 jobs:
   build:
@@ -97,6 +98,5 @@ jobs:
     - run: npx semantic-release
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       name: Release
 

package.json

@@ -65,7 +65,7 @@
     "node-simctl": "^8.0.0",
     "mocha": "^11.0.1",
     "prettier": "^3.0.0",
-    "semantic-release": "^25.0.0",
+    "semantic-release": "^25.0.2",
     "semver": "^7.3.7",
     "sinon": "^21.0.0",
     "ts-node": "^10.9.1",