use trusted publish for npm publish workflow

Author: lbjay

.github/workflows/npm-publish.yml

@@ -5,18 +5,27 @@ on:
   push:
     branches: [main]
     paths-ignore:
-      - '*.md'
+      - "*.md"
 
 jobs:
-  build:
+  publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v1
         with:
-          node-version: '14.x'
-          registry-url: 'https://registry.npmjs.org'
-      - run: npm ci
-      - uses: JS-DevTools/npm-publish@v1
-        with:
-          token: ${{ secrets.NPM_TOKEN }}
+          node-version: "14.x"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build package
+        run: npm run build --if-present
+
+      - name: Publish package
+        run: npm publish --access public

npm-shrinkwrap.json

@@ -1,6 +1,6 @@
 {
   "name": "caccl-deploy",
-  "version": "0.19.0",
+  "version": "0.19.0-pubfix",
   "description": "A cli tool for managing ECS/Fargate app deployments",
   "main": "index.js",
   "bin": {