chore: enable trusted package publishing (#632)

* chore: upgrade to node 24 in CI

* chore: set up trusted publish workflow

Author: szuperaz

.github/actions/setup-node/action.yml

@@ -4,7 +4,7 @@ description: Sets up Node and Build SDK
 inputs:
   node-version:
     required: false
-    default: '18'
+    default: '24'
 
 runs:
   using: 'composite'
@@ -13,6 +13,7 @@ runs:
       uses: actions/setup-node@v3
       with:
         node-version: ${{ inputs.node-version }}
+        registry-url: 'https://registry.npmjs.org'
 
     - name: Cache Dependencies
       uses: actions/cache@v3

.github/workflows/release.yml

@@ -6,6 +6,10 @@ on:
     branches:
       - main
 
+permissions:
+  id-token: write # Required for OIDC
+  contents: write # Required to create GitHub releases (tags + release notes)
+
 jobs:
   Release:
     name: 🚀 Release
@@ -30,11 +34,7 @@ jobs:
       - uses: ./.github/actions/setup-node
 
       - name: Publish package
-        run: |
-          npm set //registry.npmjs.org/:_authToken ${{ secrets.NPM_TOKEN }}
-          npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish
 
       - name: Create release on GitHub
         uses: ncipollo/release-action@v1