Update GitHub Actions workflows for npm trusted publishers (#137)

* Initial plan

* Update GitHub Actions workflows for npm trusted publishers

- Upgrade actions/checkout from v4 to v5
- Upgrade actions/setup-node from v4 to v6
- Update node-version matrix to [lts/-1, lts/*, latest]
- Update release job node-version to lts/*
- Upgrade cycjimmy/semantic-release-action from v4 to v5.0.2
- Update semantic_version from 17 to 25
- Remove NPM_TOKEN environment variable
- Add explicit permissions block to release job

Co-authored-by: MichaelDeBoey <[email protected]>

* Update .github/workflows/validate.yml

* Update .github/workflows/validate.yml

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: MichaelDeBoey <[email protected]>
Co-authored-by: Michaël De Boey <[email protected]>

Author: Copilot

.github/workflows/validate.yml

@@ -21,14 +21,14 @@ jobs:
     if: ${{ !contains(github.head_ref, 'all-contributors') }}
     strategy:
       matrix:
-        node: [18, 20, 22]
+        node: [18, 20, 22, 24]
     runs-on: ubuntu-latest
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: ⎔ Setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
 
@@ -50,14 +50,19 @@ jobs:
       ${{ github.repository == 'remark-embedder/core' &&
       contains('refs/heads/main,refs/heads/beta,refs/heads/next,refs/heads/alpha',
       github.ref) && github.event_name == 'push' }}
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      id-token: write # to enable use of OIDC for npm provenance
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: ⎔ Setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: lts/*
 
       - name: 📥 Download deps
         uses: bahmutov/npm-install@v1
@@ -68,9 +73,9 @@ jobs:
         run: npm run build
 
       - name: 🚀 Release
-        uses: cycjimmy/semantic-release-action@v4
+        uses: cycjimmy/semantic-release-action@v5
         with:
-          semantic_version: 17
+          semantic_version: 25
           branches: |
             [
               '+([0-9])?(.{+([0-9]),x}).x',
@@ -82,4 +87,3 @@ jobs:
             ]
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}