Improve release workflow (#227)

* improve the retry process for publishing extensions

* use npm trusted publishing with OIDC

Author: mizdra

.github/workflows/release.yml

@@ -5,15 +5,9 @@ on:
     branches:
       - main
   workflow_dispatch:
-    inputs:
-      force_publish_extensions:
-        description: 'Force publish editor extensions even if no changesets are present'
-        type: boolean
-        required: true
-        default: false
 
 permissions:
-  id-token: write # Required for provenance
+  id-token: write # Required for npm trusted publishing with OIDC
   contents: write # Required for changesets/action
   pull-requests: write # Required for changesets/action
 
@@ -27,7 +21,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: 'npm'
       - run: npm install
       - run: npm run build
@@ -43,15 +37,14 @@ jobs:
           githubReleaseName: Release ${{ env.date }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
       - run: npx vsce publish --no-git-tag-version --skip-duplicate
-        if: steps.changesets.outputs.published == 'true' || github.event.inputs.force_publish_extensions == 'true'
+        if: steps.changesets.outputs.hasChangesets == 'false'
         working-directory: packages/vscode
         env:
           VSCE_PAT: ${{ secrets.VSCE_PAT }}
       - run: npx ovsx publish --skip-duplicate
-        if: steps.changesets.outputs.published == 'true' || github.event.inputs.force_publish_extensions == 'true'
+        if: steps.changesets.outputs.hasChangesets == 'false'
         working-directory: packages/vscode
         env:
           OVSX_PAT: ${{ secrets.OVSX_PAT }}