feat(workflow): switch npmjs to OIDC auth

Author: Gioee

.github/workflows/main.yml

@@ -5,6 +5,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   build:
@@ -479,10 +480,12 @@ jobs:
           node-version: '20'
           registry-url: 'https://registry.npmjs.org'
 
+      - name: update npm
+        if: steps.tag.outputs.version != ''
+        run: npm install -g [email protected]
+
       - name: build and publish npm packages
         if: steps.tag.outputs.version != ''
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           cd packages/node
 
@@ -516,17 +519,15 @@ jobs:
             platform_name=$(basename "$platform_dir")
             echo "  Publishing @sqliteai/sqlite-ai-${platform_name}..."
             cd "$platform_dir"
-            npm publish --access public
-            # TODO: Add --provenance flag after switching to OIDC (requires package to exist first)
+            npm publish --provenance --access public
             cd ..
             echo "  ✓ Published @sqliteai/sqlite-ai-${platform_name}"
           done
           cd ..
 
           # Publish main package
           echo "Publishing main package to npm..."
-          npm publish --access public
-          # TODO: Add --provenance flag after switching to OIDC (requires package to exist first)
+          npm publish --provenance --access public
           echo "✓ Published @sqliteai/sqlite-ai@${{ steps.tag.outputs.version }}"
 
           echo ""

src/sqlite-ai.h

@@ -24,7 +24,7 @@
 extern "C" {
 #endif
 
-#define SQLITE_AI_VERSION "0.7.56"
+#define SQLITE_AI_VERSION "0.7.57"
 
 SQLITE_AI_API int sqlite3_ai_init (sqlite3 *db, char **pzErrMsg, const sqlite3_api_routines *pApi);