chore: oidc publishing (#1786)

Author: huntabyte

.github/workflows/release.yml

@@ -13,6 +13,7 @@ jobs:
         permissions:
             contents: write # to create release (changesets/action)
             pull-requests: write # to create pull request (changesets/action)
+            id-token: write # Required for OIDC
         name: Release
         runs-on: macos-latest
         steps:
@@ -22,9 +23,11 @@ jobs:
             - uses: pnpm/action-setup@v4
             - uses: actions/setup-node@v4
               with:
-                  node-version: 20
+                  node-version: 24
                   cache: pnpm
 
+            - run: npm install -g npm@latest
+
             - name: Install dependencies
               run: pnpm install --frozen-lockfile --prefer-offline