Adapt onRelease to npmjs trusted publisers approach

Author: rogargon

.github/workflows/onRelease.yml

@@ -5,6 +5,10 @@ on:
     types: [published, released]
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -16,7 +20,5 @@ jobs:
       - run: npm install
       - run: npm run build
       - run: npm run prepack
-      - uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c
-        with:
-          token: ${{ secrets.NPM_TOKEN }}
+      - run: npm publish --access public
       - run: npm run postpack