Prepare sdk-crypto-wasm to use npm trusted publishing

Update to node 24 (and hence a sufficiently-recent npm), and request an
id-token from GHA

Author: richvdh

.github/workflows/ci.yml

@@ -76,13 +76,13 @@ jobs:
         with:
           save-if: ${{ github.ref == 'refs/heads/main' }}
 
-        # Keep this in sync with:
-        # .github/workflows/latest-matrix-sdk-crypto.yml
-        # .github/workflows/release.yml
+      # Keep this in sync with:
+      # .github/workflows/latest-matrix-sdk-crypto.yml
+      # .github/workflows/release.yml
       - name: Install Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v5
         with:
-          node-version: 20.0
+          node-version: 24.0
 
       - name: Install yarn
         run: npm install --global yarn

.github/workflows/latest-matrix-sdk-crypto.yml

@@ -55,13 +55,13 @@ jobs:
         run: |
            cargo xtask unstable-rust-sdk
 
+      # Keep this in sync with:
+      # .github/workflows/ci.yml
+      # .github/workflows/release.yml
       - name: Install Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v5
         with:
-          # Keep this in sync with:
-          # .github/workflows/ci.yml
-          # .github/workflows/release.yml
-          node-version: 20.0
+          node-version: 24.0
 
       - name: Install yarn
         run: npm install --global yarn

.github/workflows/release.yml

@@ -22,6 +22,10 @@ jobs:
     name: Publish 🕸 [m]-crypto-wasm
     runs-on: ubuntu-latest
 
+    permissions:
+      id-token: write # Allow requesting an OIDC JWT, which is required to publish to npm
+      contents: read
+
     steps:
       - name: Checkout the repo
         uses: actions/checkout@v3
@@ -31,26 +35,28 @@ jobs:
         with:
           targets: wasm32-unknown-unknown
 
-        # Keep this in sync with:
-        # .github/workflows/ci.yml
-        # .github/workflows/latest-matrix-sdk-crypto.yml
+      # Keep this in sync with:
+      # .github/workflows/ci.yml
+      # .github/workflows/latest-matrix-sdk-crypto.yml
       - name: Install Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v5
         with:
-          node-version: 20.0
+          node-version: 24.0
 
       - name: Install yarn
         run: npm install --global yarn
 
       - name: Install dependencies
         run: yarn install
 
-      - name: Publish the WebAssembly + JavaScript binding (imply building + testing)
-        uses: JS-DevTools/npm-publish@v1
-        with:
-          package: package.json
-          access: public
-          token: ${{ secrets.NPM_TOKEN }}
+      - name: Build
+        run: yarn build
+
+      - name: Run tests
+        run: yarn test
+
+      - name: Publish to npmjs
+        run npm publish --provenance --ignore-scripts
 
   github-release:
     name: Create the Github release