fix(workflow): update npm publish workflow to support GitHub Packages and OIDC

Author: SMAKSS

.github/workflows/npm-publish.yml

@@ -34,8 +34,10 @@ jobs:
         run: pnpm release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Release (develop)
         if: github.ref_name == 'develop'
         run: pnpm release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.releaserc.js

@@ -6,7 +6,21 @@ export default {
     plugins: [
         '@semantic-release/commit-analyzer',
         '@semantic-release/release-notes-generator',
-        '@semantic-release/npm',
+        [
+            '@semantic-release/npm',
+            {
+                npmPublish: true,
+                pkgRoot: '.',
+            },
+        ],
+        [
+            '@semantic-release/npm',
+            {
+                npmPublish: true,
+                npmRegistryUrl: 'https://npm.pkg.github.com/',
+                pkgRoot: '.',
+            },
+        ],
         [
             '@semantic-release/github',
             {

CONTRIBUTING.md

@@ -47,10 +47,12 @@ Releases are automated with semantic-release on every push to the `master` and
 - Do not manually bump versions or edit a changelog; releases are published on
   GitHub without committing files back to the repo.
 - Follow Conventional Commits so the release type can be inferred.
-- Releases use npm trusted publishing (OIDC). Configure the repository as a
-  trusted publisher in npm (using this workflow file) and ensure the workflow
-  has `id-token: write` and npm CLI >= 11.5.1.
-- `GITHUB_TOKEN` is used to create GitHub releases.
+- Releases use npm trusted publishing (OIDC) for the npm registry and also
+  publish to GitHub Packages. Configure the repository as a trusted publisher in
+  npm (using this workflow file) and ensure the workflow has `id-token: write`
+  and npm CLI >= 11.5.1.
+- `GITHUB_TOKEN` is used to create GitHub releases and to publish to GitHub
+  Packages.
 
 To run a local dry run: