fix: add npm OIDC (#44)

check https://docs.npmjs.com/trusted-publishers and upstash/ratelimit-js#149 for details

Author: CahidArda

.github/workflows/release.yaml

@@ -5,6 +5,10 @@ on:
     types:
       - published
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   release:
     name: Release
@@ -17,9 +21,10 @@ jobs:
         run: echo "VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
 
       - name: Setup Node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 24
+          registry-url: https://registry.npmjs.org
 
       - name: Set package version
         run: echo $(jq --arg v "${{ env.VERSION }}" '(.version) = $v' package.json) > package.json
@@ -35,13 +40,10 @@ jobs:
       - name: Build
         run: bun run build
 
-      - name: Add npm token
-        run: echo "//registry.npmjs.org/:_authToken=${{secrets.NPM_TOKEN}}" > .npmrc
-
       - name: Publish release candidate
         if: "github.event.release.prerelease"
-        run: npm publish --access public --tag=canary
+        run: npm publish --access public --tag=canary --provenance
 
       - name: Publish
         if: "!github.event.release.prerelease"
-        run: npm publish --access public
+        run: npm publish --access public --provenance

package.json

@@ -8,6 +8,10 @@
   "publishConfig": {
     "access": "public"
   },
+  "repository": {
+    "type": "git",
+    "url": "git@github.com:upstash/react-redis-browser.git"
+  },
   "bugs": {
     "url": "https://github.com/upstash/react-redis-browser/issues"
   },