Merge pull request #754 from mnfst/fix/release-trusted-publishing

fix: use npm trusted publishing (OIDC) for release workflow

Author: brunobuddy

.changeset/silver-ears-watch.md

@@ -0,0 +1,2 @@
+---
+---

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 permissions:
   contents: write
   pull-requests: write
+  id-token: write
 
 jobs:
   release:
@@ -17,7 +18,6 @@ jobs:
         with:
           node-version: 22
           cache: npm
-          registry-url: https://registry.npmjs.org
       - run: npm ci
       - run: npm run build
       - uses: changesets/action@v1
@@ -27,4 +27,4 @@ jobs:
           title: "chore: version packages"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true