fix: use npm OIDC trusted publishing (Node 24, no NPM_TOKEN)

Author: Helweg

.github/workflows/build.yml

@@ -82,7 +82,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '24'
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
 
@@ -102,6 +102,4 @@ jobs:
         run: ls -la native/*.node
 
       - name: Publish to npm
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public

CHANGELOG.md

@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - Rust code formatting (cargo fmt)
+- CI publish workflow: use Node 24 + npm OIDC trusted publishing (no token required)
 
 ## [0.3.1] - 2025-01-18