ci: switch to npm trusted publishing via OIDC

Author: hiddentao

.github/workflows/ci.yml

@@ -49,7 +49,5 @@ jobs:
         if: github.ref == 'refs/heads/main'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npx semantic-release
 

package.json

@@ -1,7 +1,8 @@
 {
   "name": "@hiddentao/logger",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "version": "1.3.2",
   "description": "A flexible and customizable logging library for JavaScript/TypeScript applications",