ci: Use trusted publishing (#33)

* ci: Enable trusted publishing

* chore: Update semantic-release for OIDC use.

Author: OS-pedrogustavobilro

.github/actions/setup-tools/action.yml

@@ -7,7 +7,11 @@ runs:
     - name: Install Node.js
       uses: actions/setup-node@v4
       with:
-        node-version: 23
+        node-version: 24 # semantic-release requires at least this version, or 22 LTS
+    # Ensure npm 11.5.1 or later is installed for Trusted publishing
+    - name: Update npm
+      shell: bash
+      run: npm install -g npm@latest
     - name: Install dependencies
       shell: bash
       run: npm i

.github/workflows/release_plugin.yml

@@ -11,7 +11,7 @@ permissions:
     contents: write
     issues: write
     deployments: write
-    id-token: write # to enable use of OIDC for npm provenance
+    id-token: write # to enable use of OIDC for npm provenance and trusted publishing
 
 jobs:
   setup:
@@ -46,7 +46,6 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.CAP_GH_RELEASE_TOKEN }}
           GH_TOKEN: ${{ secrets.CAP_GH_RELEASE_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
         run: npx semantic-release
 
   publish-android:

package.json

@@ -58,13 +58,14 @@
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^11.0.1",
-    "@semantic-release/npm": "^12.0.1",
+    "@semantic-release/github": "^12.0.0",
+    "@semantic-release/npm": "^13.1.1",
     "eslint": "^8.57.0",
     "prettier": "~2.3.0",
     "prettier-plugin-java": "~1.0.2",
     "rimraf": "^6.0.1",
     "rollup": "^4.26.0",
+    "semantic-release": "^25.0.1",
     "swiftlint": "^1.0.1",
     "typescript": "~4.1.5"
   },