ci: prepare for trusted publishing

Author: danielwaltz

.github/workflows/main.yml

@@ -19,14 +19,17 @@ jobs:
   release:
     runs-on: ubuntu-latest
     needs: test
+    permissions: write-all
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/setup-node@v4
         with:
           node-version-file: .node-version
           cache: npm
+      - run: npm i -g npm@latest
       - run: npm ci
       - run: npm run semantic-release
         env:

package.json

@@ -30,6 +30,11 @@
       "import": "./dist/index.mjs"
     }
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/"
+  },
   "scripts": {
     "build": "unbuild",
     "stub": "unbuild --stub",