refactor: to use trusted publishing

.changeset/hip-eggs-drum.md

@@ -0,0 +1,5 @@
+---
+"@commercetools/express-request-correlator": patch
+---
+
+Refactor to use trusted publishing.

.github/workflows/release.yml

@@ -8,6 +8,9 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       # Get GitHub token via the CT Changesets App
@@ -26,6 +29,11 @@ jobs:
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
 
+      - name: Verify npm version
+        run: |
+          npm --version
+          # Ensure latest npm is installed for trusted publishing (OIDC)
+
       - name: Install pnpm
         uses: pnpm/[email protected]
         with:
@@ -40,15 +48,6 @@ jobs:
       - name: Install dependencies
         run: pnpm install
 
-      - name: Creating .npmrc
-        run: |
-          cat << EOF > "$HOME/.npmrc"
-            [email protected]
-            //registry.npmjs.org/:_authToken=$NPM_TOKEN
-          EOF
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
       - name: Building packages
         run: pnpm build