ci: use trusted publishing

Author: wescopeland

.github/workflows/release.yml

@@ -5,6 +5,12 @@ on:
     branches:
       - main
 
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
 jobs:
   release:
     name: Release
@@ -23,13 +29,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "22"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile --prefer-offline
 
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npx semantic-release --branches main

package.json

@@ -51,12 +51,15 @@
   "dependencies": {
     "isomorphic-unfetch": "^3.1.0"
   },
-  "peerDependencies": {},
   "devDependencies": {
     "@commitlint/cli": "^17.4.2",
     "@commitlint/config-conventional": "^17.4.2",
     "@digitak/esrun": "^3.2.19",
     "@faker-js/faker": "^7.6.0",
+    "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.5",
+    "@semantic-release/release-notes-generator": "^14.1.0",
     "@size-limit/preset-small-lib": "^8.1.2",
     "@types/jest": "^27.5.2",
     "@types/node": "^16.18.12",
@@ -77,7 +80,7 @@
     "nock": "^14.0.4",
     "prettier": "2.7.1",
     "pretty-quick": "^3.1.3",
-    "semantic-release": "^19.0.5",
+    "semantic-release": "^25.0.3",
     "size-limit": "^8.1.2",
     "ts-jest": "^29.0.5",
     "tslib": "^2.5.0",
@@ -112,6 +115,9 @@
       "next"
     ]
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "repository": {
     "type": "git",
     "url": "https://github.com/achievements-app/psn-api.git"