chore: bump actions and enable trustless publishing

.github/workflows/release.yml

@@ -5,13 +5,17 @@ on:
     branches:
       - 'master'
 
+permissions:
+  id-token: write # Required for OIDC
+  contents: write
+
 jobs:
   tag:
     name: Check and Tag
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Create tag
         id: tag
         uses: butlerlogic/action-autotag@1.1.2
@@ -31,20 +35,20 @@ jobs:
     if: needs.tag.outputs.tag != ''
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Setup Nodejs
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
-          node-version: "20.x"
+          node-version: "24.x"
           registry-url: "https://registry.npmjs.org"
+      - name: Upgrade npm for OIDC
+        run: npm i -g npm@^11.5.1
       - name: Install dependencies
         run: yarn install --non-interactive --frozen-lockfile
       - name: Build
         run: yarn run build
       - name: Publish to npm registry
-        run: yarn publish --no-git-tag-version --no-commit-hooks --non-interactive
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public
       - name: Create Release
         id: create_release
         uses: actions/create-release@v1

.github/workflows/test.yml

@@ -9,10 +9,10 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node: [18, 20]
+        node: [22, 24]
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: ${{matrix.node}}
       - name: Install deps