chore: Setup Trusted Publisher (#728)

Author: Jason3S

.github/workflows/release-please.yml

@@ -14,6 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
     steps:
       - uses: googleapis/release-please-action@v4
         id: release
@@ -34,19 +35,35 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v5
+        with:
+          ref: ${{ needs.release-please.outputs.tag_name }}
+
+      - name: Setup Pnpm
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
       - name: Setup Node
-        uses: ./.github/actions/setup-node
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 18
+          registry-url: 'https://registry.npmjs.org'
+          node-version: 22.x
 
       - name: Install Dependencies
-        run: pnpm i
+        run: |
+          pnpm i
+          pnpm build
 
       - name: Publish
         env:
-          NODE_AUTH_TOKEN: ${{secrets.PUBLISH_NPM}}
+          NPM_CONFIG_PROVENANCE: true
         run: |
           pnpm publish
 
+      - name: Summary
+        uses: streetsidesoftware/actions/public/summary@v1
+        with:
+          text: |
+            ## Published 🚀
+
+            - **ref:** ${{ needs.release-please.outputs.tag_name }}
+
 # cspell:ignore noreply googleapis