build: adds trusted publishing (#85)

Author: iBotPeaches

.github/workflows/ci.yml

@@ -9,7 +9,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 18
+          node-version: 24
           cache: 'npm'
 
       - name: NPM Install

.github/workflows/publish.yml

@@ -2,6 +2,9 @@ name: Publish to NPM/GPR
 on:
   release:
     types: [published]
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
   publish:
@@ -15,7 +18,7 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v6
         with:
-          node-version: 18
+          node-version: 24
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
 
@@ -27,8 +30,6 @@ jobs:
 
       - name: Publish (NPM)
         run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - uses: actions/setup-node@v6
         with: