ci: switch to trusted publishing (#113)

Author: ooade

.github/workflows/publish-on-npm.yml

@@ -21,8 +21,14 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version-file: '.nvmrc'
+          registry-url: 'https://registry.npmjs.org'
           cache: 'npm'
       - run: npm ci --legacy-peer-deps
       - run: npx semantic-release
         env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Publish to npm (Trusted Publishing)
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ env.NODE_AUTH_TOKEN }}

package.json

@@ -100,7 +100,10 @@
 		"plugins": [
 			"@semantic-release/commit-analyzer",
 			"@semantic-release/release-notes-generator",
-			"@semantic-release/npm"
+			["@semantic-release/npm", {
+				"npmPublish": false
+			}],
+			"@semantic-release/github"
 		]
 	}
 }