Set up npm trusted publisher (#1)

Author: Copilot

.github/workflows/auto-update.yml

@@ -10,14 +10,13 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
-          registry-url: 'https://registry.npmjs.org'
+          node-version: '22'
       - uses: fregante/setup-git-user@v2
       - name: Try updating the version
         run: ./scripts/bump-and-publish.sh
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - run: git push --follow-tags

package.json

@@ -9,7 +9,7 @@
     "octicons",
     "svgr"
   ],
-  "repository": "fregante/octicons-plain-react",
+  "repository": "refined-github/octicons-plain-react",
   "license": "MIT",
   "author": "GitHub Inc.",
   "contributors": [

scripts/bump-and-publish.sh

@@ -3,5 +3,5 @@
 set -e
 
 if npm version "$(npm info @primer/octicons version)"; then
-	npm publish
+	npm publish --provenance
 fi