MET-4394 update to npm trusted publish

also update to node 24
also update github actions

Author: agentschmitt

.github/workflows/ci.yaml

@@ -4,29 +4,29 @@ on:
   push:
   workflow_dispatch:
 
+permissions:
+  id-token: write
+
 jobs:
   ci:
     name: ci
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: volta-cli/action@v4
       - run: echo "::remove-matcher owner=tsc::"
       - run: echo "::remove-matcher owner=eslint-compact::"
       - run: echo "::remove-matcher owner=eslint-stylish::"
       - run: node --version
+      - run: npm --version
       - run: yarn --version
-      - run: yarn install --frozen-lockfile
+      - run: yarn install --immutable
       - run: yarn lint
       - run: yarn test
       - run: yarn build
       - if: startsWith(github.ref, 'refs/tags/')
         name: set package.json version by tag
         run: npm version --allow-same-version --no-commit-hooks --no-git-tag-version from-git
       - if: startsWith(github.ref, 'refs/tags/')
-        uses: JS-DevTools/npm-publish@v3
-        with:
-          token: ${{ secrets.NPM_API_KEY }}
-          package: package.json
-          access: public
+        run: npm publish

package.json

@@ -24,7 +24,7 @@
     "@rushstack/eslint-patch": "^1.10.3",
     "@types/lodash": "^4.17.5",
     "@types/migrate-mongo": "^8.2.0",
-    "@types/node": "^22.13.10",
+    "@types/node": "^24.10.4",
     "@typescript-eslint/eslint-plugin": "^7.13.0",
     "@typescript-eslint/parser": "^7.13.0",
     "eslint": "^8.57.0",

yarn.lock

@@ -1096,7 +1096,7 @@ __metadata:
     "@samhammer/vault-client-sag": "npm:^1.2.0"
     "@types/lodash": "npm:^4.17.5"
     "@types/migrate-mongo": "npm:^8.2.0"
-    "@types/node": "npm:^22.13.10"
+    "@types/node": "npm:^24.10.4"
     "@typescript-eslint/eslint-plugin": "npm:^7.13.0"
     "@typescript-eslint/parser": "npm:^7.13.0"
     commander: "npm:^12.1.0"
@@ -1655,12 +1655,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/node@npm:^22.13.10":
-  version: 22.13.10
-  resolution: "@types/node@npm:22.13.10"
+"@types/node@npm:^24.10.4":
+  version: 24.10.9
+  resolution: "@types/node@npm:24.10.9"
   dependencies:
-    undici-types: "npm:~6.20.0"
-  checksum: 10c0/a3865f9503d6f718002374f7b87efaadfae62faa499c1a33b12c527cfb9fd86f733e1a1b026b80c5a0e4a965701174bc3305595a7d36078aa1abcf09daa5dee9
+    undici-types: "npm:~7.16.0"
+  checksum: 10c0/e9e436fcd2136bddb1bbe3271a89f4653910bcf6ee8047c4117f544c7905a106c039e2720ee48f28505ef2560e22fb9ead719f28bf5e075fdde0c1120e38e3b2
   languageName: node
   linkType: hard
 
@@ -5379,10 +5379,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"undici-types@npm:~6.20.0":
-  version: 6.20.0
-  resolution: "undici-types@npm:6.20.0"
-  checksum: 10c0/68e659a98898d6a836a9a59e6adf14a5d799707f5ea629433e025ac90d239f75e408e2e5ff086afc3cace26f8b26ee52155293564593fbb4a2f666af57fc59bf
+"undici-types@npm:~7.16.0":
+  version: 7.16.0
+  resolution: "undici-types@npm:7.16.0"
+  checksum: 10c0/3033e2f2b5c9f1504bdc5934646cb54e37ecaca0f9249c983f7b1fc2e87c6d18399ebb05dc7fd5419e02b2e915f734d872a65da2e3eeed1813951c427d33cc9a
   languageName: node
   linkType: hard