Update publish workflow (#648)

Author: njooma

.github/workflows/publish.yml

@@ -3,9 +3,10 @@ name: NPM Publish
 on:
   release:
     types: [published]
-    secrets:
-      NPM_TOKEN:
-        required: true
+
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
   publish:
@@ -15,20 +16,6 @@ jobs:
       image: ghcr.io/viamrobotics/canon:amd64
 
     steps:
-      - name: Check if organization member
-        id: is_organization_member
-        if: github.event_name == 'workflow_dispatch'
-        uses: jamessingleton/[email protected]
-        with:
-          organization: viamrobotics
-          username: ${{ github.actor }}
-          token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Cancelling - not an organization member
-        uses: andymckay/[email protected]
-        if: |
-          github.event_name == 'workflow_dispatch' && steps.is_organization_member.outputs.result == 'false'
-
       - name: Download Release
         uses: dsaltares/fetch-gh-release-asset@master
         with:
@@ -51,13 +38,14 @@ jobs:
             echo "tag=latest" >> $GITHUB_OUTPUT
           fi
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Publish
         id: publish
-        uses: JS-DevTools/npm-publish@v2
-        with:
-          token: ${{ secrets.NPM_TOKEN }}
-          tag: ${{ steps.which_tag.outputs.tag }}
-          package: ${{ steps.release_file.outputs.path }}
+        run: npm publish ${{ steps.release_file.outputs.path }}
 
       - name: Notify Slack
         uses: slackapi/[email protected]

package-lock.json

@@ -56,7 +56,7 @@
     "@connectrpc/connect": "^1.6.0",
     "@connectrpc/connect-web": "^1.6.0",
     "bsonfy": "^1.0.2",
-    "exponential-backoff": "^3.1.2"
+    "exponential-backoff": "^3.1.3"
   },
   "devDependencies": {
     "@bufbuild/buf": "^1.15.0-1",