chore(deployment): update to Trusted Token Exchange

Author: buehler

.github/workflows/dotnet-pre-release.yml

@@ -13,6 +13,7 @@ jobs:
   semantic-release:
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: write
       issues: write
     steps:
@@ -25,6 +26,12 @@ jobs:
         with:
           dotnet-version: 9.x
 
+      - name: NuGet login
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Setup Semantic Release
         run: |
           npm install https://github.com/buehler/semantic-release#feat/force-pre-release
@@ -39,6 +46,6 @@ jobs:
         run: npx https://github.com/buehler/semantic-release#feat/force-pre-release -e ./.release/release.base.mjs -e ./.release/release.main-pre.mjs
         env:
           DEBUG: semantic-release:*
-          NUGET_API_KEY: ${{ secrets.NUGET_KEY }}
+          NUGET_API_KEY: ${{ steps.login.outputs.NUGET_API_KEY }}
           GH_NUGET_API_KEY: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/dotnet-release.yml

@@ -12,6 +12,7 @@ jobs:
   semantic-release:
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: write
       issues: write
     steps:
@@ -24,6 +25,12 @@ jobs:
         with:
           dotnet-version: 9.x
 
+      - name: NuGet login
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Setup Semantic Release
         run: |
           npm install https://github.com/buehler/semantic-release#feat/force-pre-release
@@ -38,6 +45,6 @@ jobs:
         run: npx https://github.com/buehler/semantic-release#feat/force-pre-release -e ./.release/release.base.mjs -e ./.release/release.main.mjs
         env:
           DEBUG: semantic-release:*
-          NUGET_API_KEY: ${{ secrets.NUGET_KEY }}
+          NUGET_API_KEY: ${{ steps.login.outputs.NUGET_API_KEY }}
           GH_NUGET_API_KEY: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}