Use yarn npm publish with OIDC for trusted publishing

- Upgrade to Yarn 4.12.0 for OIDC support (PR yarnpkg/berry#6898)
- Replace npx npm@latest publish --provenance with yarn npm publish
- Provenance is automatic with OIDC trusted publishing
- Add packageManager field where missing

Author: hillna

.github/workflows/ci.yml

@@ -19,17 +19,15 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
-      - run: corepack enable
       - uses: actions/setup-node@v6
         with:
-          node-version: 22.x
+          node-version: 16.x
           registry-url: https://registry.npmjs.org
-          cache: yarn
 
-      - run: yarn install --immutable
+      - run: yarn install --frozen-lockfile
       - run: yarn run lint:ci
 
       - run: yarn pack
       - name: Publish to NPM
         if: ${{ startsWith(github.ref, 'refs/tags/v') }}
-        run: npx npm@latest publish package.tgz --provenance --access public
+        run: npx npm@11.7.0 publish package.tgz --provenance --access public

.vscode/settings.json

@@ -1,7 +1,7 @@
 // -*- jsonc -*-
 {
   "editor.codeActionsOnSave": {
-    "source.fixAll.eslint": "explicit"
+    "source.fixAll.eslint": true
   },
   "editor.formatOnSave": true,
   "editor.defaultFormatter": "esbenp.prettier-vscode",

package.json

@@ -6,7 +6,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/foxglove/just-fetch.git"
+    "url": "https://github.com/foxglove/just-fetch.git"
   },
   "author": {
     "name": "Foxglove",