Merge pull request #223 from webdeveric/ci/release

Use trusted publishing

Author: webdeveric

.github/workflows/node.js.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v6
         with:
-          node-version-file: '.nvmrc'
+          node-version-file: '.node-version'
           cache: 'pnpm'
 
       - name: Installing dependencies

.github/workflows/pr-commit-messages.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v6
         with:
-          node-version-file: '.nvmrc'
+          node-version-file: '.node-version'
           cache: 'pnpm'
 
       - name: Installing dependencies

.github/workflows/release.yml

@@ -5,13 +5,16 @@ on:
     branches:
       - master
 
-permissions:
-  contents: read # for checkout
+concurrency: release
+
+env:
+  HUSKY: 0
 
 jobs:
   release:
     name: Release
     runs-on: ubuntu-24.04
+    environment: release
     permissions:
       contents: write # to be able to publish a GitHub release
       issues: write # to be able to comment on released issues
@@ -29,7 +32,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v6
         with:
-          node-version-file: '.nvmrc'
+          node-version-file: '.node-version'
           cache: 'pnpm'
 
       - name: Installing dependencies
@@ -42,6 +45,5 @@ jobs:
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
-        run: npx --no semantic-release
+        run: pnpm exec semantic-release

.node-version

@@ -0,0 +1 @@
+24

.nvmrc

@@ -87,7 +87,7 @@
   "devDependencies": {
     "@commitlint/config-conventional": "^20.4.3",
     "@commitlint/types": "^20.4.3",
-    "@types/node": "^22.19.13",
+    "@types/node": "^24.11.0",
     "@vitest/coverage-v8": "^4.0.18",
     "@webdeveric/eslint-config-ts": "^0.12.0",
     "@webdeveric/prettier-config": "^0.3.0",
@@ -104,7 +104,7 @@
     "lint-staged": "^16.3.2",
     "prettier": "^3.8.1",
     "rimraf": "^6.1.3",
-    "semantic-release": "^24.2.9",
+    "semantic-release": "^25.0.3",
     "typescript": "6.0.0-dev.20260304",
     "validate-package-exports": "^0.19.1",
     "vitest": "^4.0.18"