ci: publish via trusted publishing

Author: nihalgonsalves

.github/workflows/publish.yml

@@ -17,7 +17,7 @@ jobs:
       version: ${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }}.${{ steps.release.outputs.patch }}
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v4
+      - uses: googleapis/release-please-action@v4
         id: release
 
   publish:
@@ -39,7 +39,7 @@ jobs:
           registry-url: "https://registry.npmjs.org"
           cache: "yarn"
       - run: yarn install --immutable
-      - env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        # yarn doesn't have an equivalent --provenance
-        run: npm publish --provenance --access public
+      # https://docs.npmjs.com/trusted-publishers#supported-cicd-providers
+      # Ensure npm 11.5.1 or later is installed
+      - run: npm install -g npm@latest
+      - run: npm publish --provenance --access public