fix: vulnerability-in-rust-rustls-webpki (#54)

Author: mosheshaham-dash0

.github/workflows/publish-sls-plugin.yml

@@ -10,17 +10,22 @@ jobs:
   publish:
     name: Publish to npm
     runs-on: ubuntu-latest
+    permissions:
+      contents: write   # REQUIRED to push the release tag
+      id-token: write   # REQUIRED for OIDC / trusted publishing
     if: github.ref == 'refs/heads/master'
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
       - name: Read version from package.json
         id: version
         working-directory: sls-plugin
-        run: echo "version=$(node -p 'require(\"./package.json\").version')" >> "$GITHUB_OUTPUT"
+        run: |
+          version=$(node -p "require('./package.json').version")
+          echo "version=$version" >> "$GITHUB_OUTPUT"
       - name: Fail if tag already exists
         run: |
           if git rev-parse "sls-plugin-v${{ steps.version.outputs.version }}" >/dev/null 2>&1; then
@@ -39,8 +44,6 @@ jobs:
       - name: Publish to npm
         working-directory: sls-plugin
         run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Tag release
         run: |
           git tag "sls-plugin-v${{ steps.version.outputs.version }}"