ci: Use Trusted publishing (#15)

* feat: Support trusted publishing

* chore: add missing shell to setup tools action

* chore: Update semantic release to support trusted publishing

* chore: update versions of semantic-release

Also requires higher version of node.

* fix: Use node 24 for CI

Author: OS-pedrogustavobilro

.github/actions/setup-tools/action.yml

@@ -7,7 +7,10 @@ runs:
     - name: Install Node.js
       uses: actions/setup-node@v4
       with:
-        node-version: 23
+        node-version: 24 # semantic-release requires at least this version, or 22 LTS
+    - name: Update npm # To ensure npm 11.5.1 or later is installed for Trusted publishing
+      shell: bash
+      run: npm install -g npm@latest
     - name: Install dependencies
       working-directory: ./packages/capacitor-plugin
       shell: bash

.github/workflows/release_plugin.yml

@@ -11,7 +11,7 @@ permissions:
     contents: write
     issues: write
     deployments: write
-    id-token: write # to enable use of OIDC for npm provenance
+    id-token: write # to enable use of OIDC for npm provenance and trusted publishing
 
 jobs:
   setup:
@@ -47,5 +47,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.CAP_GH_RELEASE_TOKEN }}
           GH_TOKEN: ${{ secrets.CAP_GH_RELEASE_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
         run: npx semantic-release