ci(github): fix npm and gh release

.github/workflows/release.yml

@@ -2,7 +2,8 @@ name: Release
 
 on:
   push:
-    branches: main
+    branches:
+      - main
   pull_request:
 
 concurrency:
@@ -33,8 +34,6 @@ jobs:
 
       - name: 📥 Install dependencies
         run: pnpm install
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 🏗 Build
         run: pnpm clean && pnpm build
@@ -52,7 +51,7 @@ jobs:
         run: pnpm test
 
       - name: 📏 Report bundle size
-        if: github.event.pull_request.merged == 'pull_request'
+        if: github.event.event_name == 'pull_request'
         uses: andresz1/size-limit-action@v1
         continue-on-error: true
         with:
@@ -93,8 +92,9 @@ jobs:
 
       - name: 📥 Install dependencies
         run: pnpm install
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPMJS_TOKEN }}
+
+      - name: ⬆️ Update npm for OIDC trusted publishing
+        run: npm install -g npm@latest
 
       - name: 🚀 Create Release Pull Request or Release to NPM
         uses: changesets/action@v1
@@ -103,9 +103,9 @@ jobs:
           title: 'chore: 🤖 update versions'
           publish: pnpm release:publish
           version: pnpm release:version
+          createGithubReleases: false
         env:
-          GITHUB_TOKEN: ${{ secrets.NPMJS_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPMJS_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   release-gpr:
     name: Release to GPR
@@ -150,9 +150,9 @@ jobs:
         with:
           commit: 'chore: update versions'
           title: 'chore: update versions'
-          publish: pnpm release:publish --no-git-tag
+          publish: pnpm release:publish
           version: pnpm release:version
-          createGithubReleases: false
+          createGithubReleases: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}