ci: update and adjust release workflow

Author: henri-hulski

.github/workflows/release.yml

@@ -6,6 +6,10 @@ on:
     types: [completed]
     branches: [master, next]
 
+permissions:
+  id-token: write
+  contents: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -20,21 +24,29 @@ jobs:
           node-version: 24
           cache: 'npm'
           registry-url: https://registry.npmjs.org/
+      - name: Update npm
+        run: npm install -g npm@latest
       - run: npm ci
-      - run: git config user.name "cerebral[bot]"
-      - run: git config user.email "136202705+cerebral[bot]@users.noreply.github.com"
-      - name: Create token
-        id: create_token
-        uses: tibdex/github-app-token@v2
+      - name: Create GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v3
         with:
-          app_id: ${{ secrets.APP_ID }}
-          private_key: ${{ secrets.PRIVATE_KEY }}
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.PRIVATE_KEY }}
+      - name: Get GitHub App User ID
+        id: get-user-id
+        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+      - name: Configure Git
+        run: |
+          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
+          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'
       - name: Release packages
         run: npm run release -- --no-parallel --print-release
         if: github.event_name != 'pull_request'
         env:
-          REPO_COOKER_GITHUB_TOKEN: ${{ steps.create_token.outputs.token }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          REPO_COOKER_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
       - name: Publish vscode extension to Visual Studio Marketplace
         if: github.event_name != 'pull_request' && github.event.workflow_run.head_branch == 'master'
         uses: HaaLeo/publish-vscode-extension@v2