Configure trusted publisher (#99)

Author: pshevche

.github/workflows/publish.yaml

@@ -5,6 +5,10 @@ on:
     tags:
       - 'v[0-9]+.[0-9]+.[0-9]+'
 
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -13,22 +17,19 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v6
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Setup act
         run: |
           curl --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/nektos/act/master/install.sh | sudo bash -s -- -b "/usr/bin"
           # Use the micro image to speed up tests: https://nektosact.com/usage/runners.html
           echo "-P ubuntu-latest=node:16-buster-slim" > $HOME/.actrc
 
-      - name: Install dependencies
-        run: |
-          npm install
-
-      - name: Package act-test-runner
-        run: |
-          npm run package
-
       - name: Publish act-test-runner to npm
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
-          npm publish
+          npm ci
+          npm run check
+          npm publish --provenance

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@pshevche/act-test-runner",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Convention wrapper around https://github.com/nektos/act for e2e testing GitHub actions",
   "author": "Pavlo Shevchenko",
   "keywords": [