feat: use npm trusted publish

Author: stormslowly

.github/workflows/release-npm.yml

@@ -131,21 +131,17 @@ jobs:
           echo "token=${token}" >> $GITHUB_OUTPUT
         shell: bash
 
+      - name: Update npm
+        run: npm install -g npm@latest
+
       - name: Release Full
         run: |
           git status
           cp napi/{index,browser}.js  npm
           cp napi/index.d.ts          npm
           pnpm node scripts/x.mjs prepublish
-          pnpm node scripts/x.mjs    publish --otp --tag ${{inputs.tag}} ${{inputs.dry_run && '--dry-run' || '--no-dry-run'}} ${{inputs.push_tags && '--push-tags' || '--no-push-tags'}}
+          pnpm node scripts/x.mjs    publish --tag ${{inputs.tag}} ${{inputs.dry_run && '--dry-run' || '--no-dry-run'}} ${{inputs.push_tags && '--push-tags' || '--no-push-tags'}}
         env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           REPOSITORY: ${{ github.repository }}
           REF: ${{ github.ref }}
-          ONLY_RELEASE_TAG: true
-          # CFA required environment variables
-          CFA_HOST: https://cfa.rspack.dev
-          GITHUB_TOKEN: ${{ steps.github_creds.outputs.token }}
-          GITHUB_OIDC_TOKEN: ${{ steps.oidc.outputs.token }}
-          CFA_PROJECT_ID: ${{ secrets.CFA_PROJECT_ID }}
-          CFA_SECRET: ${{ secrets.CFA_SECRET }}
+          ONLY_RELEASE_TAG: true