publish workflow using OIDC

Author: azmy60

.github/workflows/publish.yml

@@ -1,10 +1,15 @@
-name: Publish Packages to npm
+name: Publish to NPM
 
 on:
   push:
     tags:
       - 'v*' # Run on any tag that starts with v (e.g., v1.0.0)
 
+
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -15,9 +20,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18'
-          registry-url: 'https://registry.npmjs.org/'
-          scope: '@beekeeperstudio'
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
 
       - name: Get tag version
         id: get_version
@@ -30,7 +38,7 @@ jobs:
         run: |
           yarn version --new-version $VERSION --no-git-tag-version
 
-      - name: Build packages
+      - name: Build package
         run: yarn build
 
       - name: Check if beta version
@@ -46,25 +54,8 @@ jobs:
 
       - name: Publish package (beta)
         if: env.IS_BETA == 'true'
-        run: yarn publish --access public --non-interactive --tag beta
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --tag beta
 
       - name: Publish package (stable)
         if: env.IS_BETA == 'false'
-        run: yarn publish --access public --non-interactive
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-      # Create GitHub release for this version
-      - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
-        with:
-          name: Release ${{ env.VERSION }}
-          body: |
-            # Beekeeper Studio Plugin v${{ env.VERSION }}
-            
-            Published package:
-            - @beekeeperstudio/plugin@${{ env.VERSION }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: npm publish --access public