Switch npm publish from token auth to OIDC trusted publishing

Author: mvantellingen

.github/workflows/release.yaml

@@ -88,13 +88,15 @@ jobs:
       - name: Build
         run: pnpm build
 
+      - name: Upgrade npm for trusted publishing
+        run: npm i -g [email protected]
+
       - name: Create and publish versions
         uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
         with:
           title: "Release new version"
           commit: "update version"
-          publish: pnpm publish --provenance
+          publish: pnpm publish:ci
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true

package.json

@@ -2,6 +2,10 @@
 	"name": "nextjs-basic-auth-middleware",
 	"version": "3.1.0",
 	"author": "Boris Besemer",
+	"publishConfig": {
+		"access": "public",
+		"registry": "https://registry.npmjs.org/"
+	},
 	"module": "dist/index.js",
 	"homepage": "https://github.com/labd/nextjs-basic-auth-middleware#readme",
 	"repository": {
@@ -30,7 +34,8 @@
 		"lint:fix": "biome check --write .",
 		"test": "vitest run",
 		"test:ci": "vitest run --coverage",
-		"tsc": "tsc --noEmit -p ."
+		"tsc": "tsc --noEmit -p .",
+		"publish:ci": "pnpm build && pnpm changeset publish"
 	},
 	"peerDependencies": {
 		"next": ">=13.1"