chore: publish via trusted publisher (#4)

Author: KazuCocoa

.github/workflows/publish.js.yml

@@ -9,6 +9,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  id-token: write # to enable use of OIDC for trusted publishing and npm provenance
 
 jobs:
   build:
@@ -28,5 +29,4 @@ jobs:
     - run: npx semantic-release
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       name: Release

package.json

@@ -70,7 +70,7 @@
     "conventional-changelog-conventionalcommits": "^9.0.0",
     "mocha": "^11.0.1",
     "prettier": "^3.0.0",
-    "semantic-release": "^25.0.0",
+    "semantic-release": "^25.0.2",
     "ts-node": "^10.9.1",
     "typescript": "^5.4.3"
   }