chore: update release workflow to support additional Node.js versions and OS environments

Author: demeyerthom

.github/workflows/release-dispatch.yml

@@ -24,8 +24,8 @@ jobs:
     needs: lint
     strategy:
       matrix:
-        node: ["20.x", "22.x"]
-        os: [ubuntu-latest]
+        node: ["20.x", "22.x", "24.x"]
+        os: [ubuntu-latest, windows-latest, macOS-latest]
 
     steps:
       - name: Checkout repo
@@ -46,16 +46,27 @@ jobs:
     timeout-minutes: 15
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
+    environment: release
     needs: build
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Node.js
         uses: labd/gh-actions-typescript/pnpm-install@main
 
+      - name: Run build
+        run: pnpm build
+
+      - name: Upgrade npm for trusted publishing
+        run: npm i -g npm@^11.6.4
+
       - name: Create and publish versions
         uses: changesets/action@v1
         with:
@@ -65,5 +76,4 @@ jobs:
           version: pnpm publish:version
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true