Update GitHub Actions workflow for release process

Author: shairez

.github/workflows/release.yml

@@ -5,6 +5,11 @@ on:
     branches:
       - main
 
+permissions:
+  id-token: write
+  contents: write
+  pull-requests: write
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -14,7 +19,7 @@ jobs:
         node_version: [20, 22]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Setup
         uses: ./.github/actions/setup
         with:
@@ -33,27 +38,15 @@ jobs:
     needs: [test]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Setup
         uses: ./.github/actions/setup
 
-      # - name: Build Headless Kit
-      #   shell: bash
-      #   run: npx nx build headless
-
-      # - name: Release
-      #   uses: ./.github/actions/release
-      #   with:
-      #     github_token: ${{ secrets.GITHUB_TOKEN }}
-      #     npm_token: ${{ secrets.NPM_TOKEN }}
-
       - name: Create Release Pull Request or Publish
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1
         with:
           version: pnpm changeset.version
           publish: pnpm run release
         env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}