Update release workflow to use trusted OIDC publishing

Author: risantos

.github/workflows/release.yaml

@@ -20,17 +20,21 @@ jobs:
       group: release-${{ github.repository }}-${{ github.ref_name }}
       cancel-in-progress: false
     environment: release
+    permissions:
+      contents: write
+      id-token: write
 
     steps:
     - name: Checkout code
       uses: actions/checkout@v6
       with:
         persist-credentials: false
 
-    - name: Setup Node.js version
+    - name: Set up Node.js version
       uses: actions/setup-node@v6
       with:
-        node-version: 22
+        node-version: 24
+        registry-url: 'https://registry.npmjs.org/'
 
     - name: Enable yarn
       run: corepack enable
@@ -44,9 +48,6 @@ jobs:
         git config user.email "[email protected]"
         git config --global url.https://${{ secrets.RELEASE_GITHUB_TOKEN }}@github.com/.insteadOf https://github.com/
 
-    - name: Configure npm
-      run: npm config set //registry.npmjs.org/:_authToken ${{ secrets.RELEASE_NPM_TOKEN }}
-
     - name: Generate release
       env:
         GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}

.release-it.json

@@ -19,6 +19,7 @@
     ]
   },
   "npm": {
-    "publish": true
+    "publish": true,
+    "skipChecks": true
   }
 }