Merge pull request #327 from BitGo/DX-2085-trusted-publishing

ci: attempt OIDC without specifying environments

Author: Tanjeem Hossain

.github/workflows/release.yaml

@@ -1,6 +1,9 @@
 name: Release
 
 permissions:
+  # Needed for OIDC Trusted Publishing
+  id-token: write
+  # Needed for semantic-release
   contents: write
   pull-requests: write
   issues: write
@@ -18,8 +21,6 @@ on:
 
 jobs:
   release:
-    uses: semantic-release-action/typescript/.github/workflows/release.yml@1d40c29e2d500f3bcceeb13f95d26a3a1b571f51
-    secrets:
-      npm-token: ${{ secrets.NPM_TOKEN }}
+    uses: semantic-release-action/typescript/.github/workflows/release.yml@fd8c4abce3b0710e4e0d0ecf17fdaf2e770d4c82 # v3.2.0-beta.1
     with:
       disable-semantic-release-git: true