ci: add packages:write permission for trusted publishing

Author: koistya

.github/workflows/release.yml

@@ -16,10 +16,12 @@ jobs:
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: 22
-          registry-url: https://registry.npmjs.org
+          node-version: "24"
+          registry-url: "https://registry.npmjs.org"
       - run: bun install --frozen-lockfile
       - run: bun run build
-      - run: npm publish --provenance --access public
+      - run: npm publish --access public
+        env:
+          NPM_CONFIG_PROVENANCE: true

package.json

@@ -34,6 +34,10 @@
     "type": "git",
     "url": "https://github.com/kriasoft/srcpack.git"
   },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "bugs": {
     "url": "https://github.com/kriasoft/srcpack/issues"
   },