Use npm trusted publishing

Author: airhorns

.github/workflows/release.yml

@@ -13,18 +13,25 @@ jobs:
   release:
     needs: test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v2
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: "https://registry.npmjs.org"
       - uses: ./.github/actions/setup-test-env
       - id: npm-publish
         name: Publish requirefire to npm
-        uses: JS-DevTools/npm-publish@v1
+        uses: JS-DevTools/npm-publish@v4
         with:
-          token: ${{ secrets.NPM_TOKEN }}
           access: public
+          provenance: true
       - name: Publish Release to github
         uses: softprops/action-gh-release@v1
         if: ${{ steps.npm-publish.outputs.type != 'none' }}
         with:
           tag_name: ${{ steps.npm-publish.outputs.version }}
-          generate_release_notes: true
+          generate_release_notes: true

package.json

@@ -5,7 +5,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/gadget-inc/requirefire.git"
+    "url": "git+https://github.com/gadget-inc/requirefire.git"
   },
   "publishConfig": {
     "access": "public"