Update release workflow to use trusted OIDC publishing

Author: risantos

.github/workflows/release.yaml

@@ -20,6 +20,9 @@ jobs:
       group: release-${{ github.repository }}-${{ github.ref_name }}
       cancel-in-progress: false
     environment: release
+    permissions:
+      contents: write
+      id-token: write
 
     steps:
     - name: Checkout code
@@ -30,7 +33,8 @@ jobs:
     - name: Setup Node.js version
       uses: actions/setup-node@v6
       with:
-        node-version: 20
+        node-version: 24
+        registry-url: 'https://registry.npmjs.org/'
 
     - name: Install node packages
       run: yarn install --ci
@@ -42,8 +46,5 @@ jobs:
 
     - name: Generate release
       env:
-        NPM_TOKEN: ${{ secrets.RELEASE_NPM_TOKEN }}
         GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
-      run: |
-        echo "//registry.npmjs.org/:_authToken=\${NPM_TOKEN}" > .npmrc
-        npm run release -- --increment ${{ github.event.inputs.VERSION_BUMP }} -V
+      run: npm run release -- --increment ${{ github.event.inputs.VERSION_BUMP }} -V

.release-it.js

@@ -17,6 +17,7 @@ module.exports = {
     `
   },
   npm: {
-    publish: true
+    publish: true,
+    skipChecks: true
   }
 };