chore: publish via trusted publisher (#834)

Author: KazuCocoa

.github/workflows/publish.yml

@@ -16,6 +16,7 @@ permissions:
   contents: write
   pull-requests: write
   issues: write
+  id-token: write # to enable use of OIDC for trusted publishing and npm provenance
 
 jobs:
   build:
@@ -56,7 +57,5 @@ jobs:
       - run: npx semantic-release --branches main
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # to make the push failure
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         name: Release
         working-directory: driver

driver/package.json

@@ -68,7 +68,7 @@
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
     "eslint": "^9.17.0",
-    "semantic-release": "^24.2.8",
+    "semantic-release": "^25.0.2",
     "ts-node": "^10.9.1",
     "typescript": "~5.9"
   },