ci(release)!: trusted publishing (#123)

Author: jer3m01

.github/workflows/release.yml

@@ -10,20 +10,21 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: write
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v5
 
       - name: Setup Node.js 22.14.0
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22.14.0
-          registry-url: 'https://registry.npmjs.org'
+          registry-url: "https://registry.npmjs.org"
           cache: pnpm
 
       - name: Install dependencies
@@ -32,5 +33,4 @@ jobs:
       - name: Release
         run: pnpm release
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

scripts/release.ts

@@ -3,11 +3,9 @@ import { Octokit } from "@octokit/core";
 
 if (!execSync("git --version").includes("git version")) {
 	console.error("Git not installed");
-	// @ts-expect-error
 	process.exit(1);
 }
 
-// @ts-expect-error
 const DRY_RUN = !process.env.GITHUB_ACTIONS;
 
 if (DRY_RUN) console.log("DRY RUN\n");
@@ -105,7 +103,6 @@ console.log(`Creating tag v${nextVersion} for hash ${currentHash}`);
 
 if (!DRY_RUN) {
 	const octokit = new Octokit({
-		// @ts-expect-error
 		auth: process.env.GITHUB_TOKEN,
 	});