ci: change release workflow to npm use OIDC trusted publishing

.github/workflows/build.yml

@@ -16,4 +16,4 @@ jobs:
         with:
           node-version: lts/*
       - name: Run Build
-        run: npm i && npx nest build
+        run: npm ci && npx nest build

.github/workflows/lint.yml

@@ -27,5 +27,5 @@ jobs:
           path: |
             node_modules
           key: node-modules
-      - run: npm i
+      - run: npm ci
       - run: npm run lint

.github/workflows/npm.yml

@@ -24,7 +24,7 @@ jobs:
             test-app/node_modules
           key: node-modules
       - name: NPM Install
-        run: npm i
+        run: npm ci
       - name: Check if git is clean
         uses: CatChen/check-git-status-action@bde80484b437cece974f79da735a5cd1dfdc9b0b # v1.4.4
         with:

.github/workflows/release.yml

@@ -59,12 +59,7 @@ jobs:
           git config user.email "${{ steps.import-gpg.outputs.email }}"
 
       - name: Install dependencies
-        run: npm i
-
-      - name: Authenticate with registry
-        run: npm config set //registry.npmjs.org/:_authToken $NPM_TOKEN
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm ci
 
       - name: Run release-it
         run: npx release-it ${{ github.event.inputs.input_version }} --ci

.github/workflows/test.yml

@@ -22,4 +22,4 @@ jobs:
           path: node_modules
           key: node-modules
       - name: Run Build
-        run: npm i && npx nest build && npm run test
+        run: npm ci && npx nest build && npm run test

.release-it.json

@@ -1,5 +1,5 @@
 {
-    "$schema": "https://unpkg.com/release-it@17/schema/release-it.json",
+    "$schema": "https://unpkg.com/release-it@19/schema/release-it.json",
     "hooks": {
         "after:bump": [
             "rm -f *.tgz",
@@ -14,6 +14,7 @@
         "tagArgs": ["-s"]
     },
     "npm": {
+        "skipChecks": true,
         "publish": true,
         "publishArgs": ["--provenance"]
     },

package.json

@@ -55,7 +55,7 @@
         "@nestjs/cli": "^11.0.0",
         "@nestjs/schematics": "^11.0.0",
         "@nestjs/testing": "^11.0.1",
-        "@release-it/conventional-changelog": "^10.0.0",
+        "@release-it/conventional-changelog": "10.0.1",
         "@swc/cli": "^0.6.0",
         "@swc/core": "^1.10.7",
         "@trivago/prettier-plugin-sort-imports": "^5.2.2",
@@ -70,7 +70,7 @@
         "prettier": "^3.4.2",
         "prettier-eslint": "^16.3.0",
         "reflect-metadata": "^0.2.2",
-        "release-it": "^19.0.2",
+        "release-it": "19.0.5",
         "rimraf": "^6.0.1",
         "rxjs": "^7.8.1",
         "source-map-support": "^0.5.21",