Switch to Trusted Publishing.

Author: whitequark

.github/workflows/package.yml

@@ -58,21 +58,21 @@ jobs:
     - name: Set up Node.js
       uses: actions/setup-node@v4
       with:
+        node-version: '20'
         registry-url: 'https://registry.npmjs.org'
+    - name: Update npm
+      run: npm install -g npm@latest
     - name: Download NPM package
       uses: actions/download-artifact@v4
       with:
         name: dist
         path: dist/
     - name: Publish package to NPM (dry run)
       if: ${{ github.event_name == 'push' && startsWith(github.event.ref, 'refs/heads/develop') }}
-      run: npm publish --access public $(find dist -name *.tgz -printf 'file:%p ') --dry-run
+      run: npm publish $(find dist -name *.tgz -printf 'file:%p ') --tag latest --dry-run
     - name: Publish package to NPM
       if: ${{ github.event_name == 'push' && startsWith(github.event.ref, 'refs/heads/release') }}
-      run: npm publish --access public $(find dist -name *.tgz -printf 'file:%p ')
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        NPM_CONFIG_PROVENANCE: true
+      run: npm publish $(find dist -name *.tgz -printf 'file:%p ') --tag latest
   release:
     needs: check
     runs-on: ubuntu-latest