ci: Switch to trusted publishing (#51)

* ci: Switch to trusted publishing

* update npm only when a release is created

Author: Pixel998

.github/CODEOWNERS

@@ -0,0 +1 @@
+.github/workflows/release-please.yml @eslint/eslint-tsc

.github/workflows/release-please.yml

@@ -2,6 +2,7 @@ on:
   push:
     branches:
       - main
+
 name: release-please
 jobs:
   release-please:
@@ -30,10 +31,16 @@ jobs:
           node-version: lts/*
           registry-url: https://registry.npmjs.org
         if: ${{ steps.release.outputs.release_created }}
-      - run: npm publish --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+        # npm 11.5.1 or later is required so update to latest to be sure
+      - name: Update npm
+        run: npm install -g npm@latest
+        if: ${{ steps.release.outputs.release_created }}
+
+      - name: Publish to npm
+        run: npm publish --provenance
         if: ${{ steps.release.outputs.release_created }}
+
       - run: 'npx @humanwhocodes/tweet "eslint-transforms ${{ steps.release.outputs.tag_name }} has been released: ${{ steps.release.outputs.html_url }}"'
         if: ${{ steps.release.outputs.release_created }}
         env: