feat(release): enable npm trusted packages

Author: mvantellingen

.github/workflows/ci-cd.yaml

@@ -16,7 +16,7 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'pull_request'
     strategy:
       matrix:
-        node: ["18.x", "20.x", "22.x"]
+        node: ["20.x", "22.x", "24.x"]
         os: [ubuntu-latest, windows-latest, macOS-latest]
     runs-on: ${{ matrix.os }}
     env:
@@ -76,6 +76,9 @@ jobs:
     timeout-minutes: 15
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/main' && github.event.pull_request.draft == false
+    permissions:
+      id-token: write  
+      contents: read
     needs: validate
     steps:
       - name: Checkout repo
@@ -96,5 +99,5 @@ jobs:
           version: pnpm publish:version
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: ''
+          NPM_CONFIG_PROVENANCE: true

package.json

@@ -68,6 +68,7 @@
 		"pnpm": ">=9.0.2"
 	},
 	"publishConfig": {
-		"access": "public"
+		"access": "public",
+		"provenance": true
 	}
 }