upgrade pnpm to latest, add id-token to release workflow

Author: JReinhold

.github/workflows/release.yml

@@ -6,6 +6,9 @@ env:
   CI: true
   COREPACK_INTEGRITY_KEYS: 0
 
+permissions:
+  id-token: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -15,7 +18,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: 'Set git user'
+      - name: "Set git user"
         run: |
           git config --global user.name 'storybook-bot'
           git config --global user.email '32066757+storybook-bot@users.noreply.github.com'
@@ -24,11 +27,14 @@ jobs:
         # https://nodejs.org/api/corepack.html
         run: corepack enable
 
+      - name: Update npm to latest
+        run: npm install -g npm@latest
+
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          cache: 'pnpm'
-          node-version-file: '.nvmrc'
+          cache: "pnpm"
+          node-version-file: ".nvmrc"
 
       - name: Install Node.js dependencies with pnpm
         # https://pnpm.io/cli/install

package.json

@@ -107,7 +107,7 @@
     "svelte": "^5.0.0",
     "vite": "^5.0.0 || ^6.0.0 || ^7.0.0"
   },
-  "packageManager": "pnpm@9.12.3+sha512.cce0f9de9c5a7c95bef944169cc5dfe8741abfb145078c0d508b868056848a87c81e626246cb60967cbd7fd29a6c062ef73ff840d96b3c86c40ac92cf4a813ee",
+  "packageManager": "pnpm@10.18.0+sha512.e804f889f1cecc40d572db084eec3e4881739f8dec69c0ff10d2d1beff9a4e309383ba27b5b750059d7f4c149535b6cd0d2cb1ed3aeb739239a4284a68f40cfa",
   "publishConfig": {
     "access": "public"
   },