ci(npm): use trusted publishing for npm packages (#199)

Author: mlmoravek

.github/workflows/build.yml

@@ -11,8 +11,6 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
-    strategy:
-      max-parallel: 24
     steps:
       - uses: actions/checkout@v4
       - name: Setup Node

.github/workflows/publish.yml

@@ -2,6 +2,9 @@ name: Node.js Package
 on:
   release:
     types: [created]
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -12,11 +15,12 @@ jobs:
         with:
           node-version: 22.x
           registry-url: "https://registry.npmjs.org"
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
       - name: Install dependencies 📦
         run: npm ci
       - name: Build lib 🛠️
         run: npm run build
       - name: Publish NPM lib 📋
         run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}