chore: update semantic-release to v25 and node to 24.x for OIDC (#201)

* fix: update semantic-release to v25 and node to 24.x for OIDC

Signed-off-by: Lars Trieloff <lars@trieloff.net>

* fix: add missing OIDC permissions and upgrade @semantic-release/npm

* fix: correct repository URL for npm provenance verification

---------

Signed-off-by: Lars Trieloff <lars@trieloff.net>
Co-authored-by: Claude Code <noreply@anthropic.com>

Author: trieloff

.github/workflows/main.yaml

@@ -7,19 +7,20 @@ env:
 
 permissions:
   contents: write  # semantic-release-dry verifies the write permissions
-  issues: read # needed by semantic-release
+  issues: write # needed by semantic-release
   pull-requests: write # needed by semantic-release
+  id-token: write # needed for npm trusted publishers with OIDC
 
 jobs:
   test:
     name: Test
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - name: Use Node.js 20.x
+      - name: Use Node.js 24.x
         uses: actions/setup-node@v5
         with:
-          node-version: '22.x'
+          node-version: '24.x'
       - run: npm ci
       - run: npm test
       - uses: codecov/codecov-action@v5
@@ -38,10 +39,10 @@ jobs:
     if: github.ref == 'refs/heads/main'
     steps:
       - uses: actions/checkout@v5
-      - name: Use Node.js 20.x
+      - name: Use Node.js 24.x
         uses: actions/setup-node@v5
         with:
-          node-version: '22.x'
+          node-version: '24.x'
       - run: npm ci
       - run: npm run semantic-release
         env: