chore(npm): fix publish

Author: devthejo

.github/workflows/release-publish.yml

@@ -6,7 +6,8 @@ on:
       - v*.*
 
 permissions:
-  id-token: write  # Required for OIDC token generation
+  id-token: write
+  contents: write
 
 concurrency:
   cancel-in-progress: true
@@ -17,30 +18,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v6
         with:
           node-version: 20
           cache: 'yarn'
-      
+          registry-url: 'https://registry.npmjs.org'
+
       - name: yarn install
-        shell: bash
         run: yarn --immutable
 
       - name: build with ncc
-        shell: bash
         run: yarn workspace kontinuous build
 
       - name: prepublish
-        shell: bash
         run: |
           cp LICENSE README.md packages/kontinuous/
           cat <<< $(jq "del(.dependencies, .devDependencies, .scripts, .main)" packages/kontinuous/package.json) > packages/kontinuous/package.json
-      
+
       - name: extract npm tag
         id: npm-tag
-        shell: bash
         run: |
           if [[ "$GITHUB_REF" == *"alpha"* ]]; then
             npm_tag="alpha"
@@ -51,17 +49,9 @@ jobs:
           fi
           echo "tag=$npm_tag" >> $GITHUB_OUTPUT
 
-      - id: publish-kontinuous
-        uses: JS-DevTools/npm-publish@v2
-        with:
-          token: ${{ secrets.SOCIALGROOVYBOT_NPM_TOKEN }}
-          package: packages/kontinuous/package.json
-          tag: ${{ steps.npm-tag.outputs.tag }}
-      
-      - if: steps.publish-kontinuous.outputs.type
-        run: |
-          echo "Version changed: ${{ steps.publish-kontinuous.outputs.old-version }} => ${{ steps.publish-kontinuous.outputs.version }}"
-      
+      - name: Publish to npm
+        run: npm publish packages/kontinuous --tag ${{ steps.npm-tag.outputs.tag }} --provenance --access public
+
       - name: Get GitHub App Token
         id: token
         uses: SocialGouv/token-bureau@main
@@ -70,7 +60,7 @@ jobs:
           audience: socialgouv
 
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         if: startsWith(github.ref, 'refs/tags/')
         with:
           token: ${{ steps.token.outputs.token }}