Merge pull request #8299 from QwikDev/pr-v2-release-tokens

updated v2 release script to OIDC

Author: wmertens

.github/workflows/ci.yml

@@ -41,6 +41,12 @@ env:
   # Disable incremental build, speeds up CI
   CARGO_INCREMENTAL: 0
 
+
+permissions:
+  id-token: write
+  contents: write
+  pull-requests: write
+
 jobs:
   changes:
     name: Setup
@@ -912,20 +918,14 @@ jobs:
           branch: build/v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       # Delete this after V2 is released
       - name: Tag with latest
         if: steps.changesets.outputs.published == 'true'
         run: |
-          echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > $GITHUB_WORKSPACE/.npmrc
           npm dist-tag add @qwik.dev/core@${{ fromJSON(steps.changesets.outputs.publishedPackages)[0].version }} latest
           npm dist-tag add @qwik.dev/router@${{ fromJSON(steps.changesets.outputs.publishedPackages)[0].version }} latest
           npm dist-tag add @qwik.dev/react@${{ fromJSON(steps.changesets.outputs.publishedPackages)[0].version }} latest
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NPM_CONFIG_USERCONFIG: ${{ github.workspace }}/.npmrc
 
       - name: Fixup package.json files
         run: pnpm run release.fixup-package-json