Enable trusted publishing for npm release

Author: Ndpnt

.github/workflows/release.yml

@@ -6,6 +6,9 @@ on:
       - main
     types: [ closed ]
 
+permissions:
+  id-token: write  # Required for OIDC. See https://docs.npmjs.com/trusted-publishers#step-2-configure-your-cicd-workflow
+  contents: read
 
 jobs:
   changelog:
@@ -22,6 +25,11 @@ jobs:
         with:
           token: ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Configure Git author
         run: |
           git config --global user.name "Open Terms Archive Release Bot"
@@ -59,10 +67,11 @@ jobs:
           body: ${{ steps.release-changelog.outputs.content }}
           token: ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
 
+      - name: Update npm
+        run: npm install -g npm@latest
+      
       - name: Publish to NPM public repository
-        uses: JS-DevTools/npm-publish@v1
-        with:
-          token: ${{ secrets.NPMJS_ACCESS_TOKEN }}
+        run: npm publish
 
       - name: Trigger documentation deploy
         uses: peter-evans/repository-dispatch@v2