Update release action to work with trusted publishers

.github/workflows/release.yaml

@@ -16,19 +16,25 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
-    concurrency: "1"
+    concurrency:
+      group: release
+      cancel-in-progress: false
     environment: release
+    permissions:
+      contents: write
+      id-token: write
 
     steps:
     - name: Checkout code
       uses: actions/checkout@v6
       with:
-        token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
+        persist-credentials: false
 
     - name: Setup Node.js version
       uses: actions/setup-node@v6
       with:
         node-version: 24
+        registry-url: 'https://registry.npmjs.org/'
 
     - name: Install dependencies
       run: npm ci
@@ -37,11 +43,10 @@ jobs:
       run: |
         git config user.name "Uphold"
         git config user.email "bot@uphold.com"
+        git config --global url.https://${{ secrets.RELEASE_GITHUB_TOKEN }}@github.com/.insteadOf https://github.com/
 
     - name: Generate release
       env:
-        NPM_TOKEN: ${{ secrets.RELEASE_NPM_TOKEN }}
         GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
       run: |
-        echo "//registry.npmjs.org/:_authToken=\${NPM_TOKEN}" > .npmrc
         npm run release -- --increment ${{ github.event.inputs.VERSION_BUMP }} -V

package.json

@@ -27,6 +27,10 @@
   "bugs": {
     "url": "https://github.com/uphold/debino/issues"
   },
+  "npm": {
+    "publish": true,
+    "skipChecks": true
+  },
   "publishConfig": {
     "access": "public"
   },