Authenticate the release workflow through GitHub OIDC instead of a long-lived npm token: no secret to leak or rotate, provenance attached automatically. Upgrade npm on the runner since OIDC publishing needs npm >= 11.5.1 (Node 22 ships npm 10).
Authenticate the release workflow through GitHub OIDC instead of a long-lived npm token: no secret to leak or rotate, provenance attached automatically. Upgrade npm on the runner since OIDC publishing needs npm >= 11.5.1 (Node 22 ships npm 10).