use OIDC for publish

Author: msadovyi

.github/workflows/publish.yml

@@ -2,7 +2,11 @@ name: Publish
 
 on:
   push:
-    branches: ['main']
+    branches: ["main"]
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
 
 jobs:
   build:
@@ -24,8 +28,8 @@ jobs:
         uses: actions/setup-node@v3
         with:
           node-version: 22
-          cache: 'pnpm'
-          registry-url: 'https://registry.npmjs.org'
+          cache: "pnpm"
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install dependencies
         run: pnpm install
@@ -41,5 +45,3 @@ jobs:
 
       - name: Publish Package
         run: npm publish --tolerate-republish --no-fund
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}