chore: update release action with trusted publishing (#59)

Author: tyiuhc

.github/workflows/release.yml

@@ -24,10 +24,12 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
-    needs: [authorize]
+    needs: [ authorize ]
+    permissions:
+      id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       # Needed for lerna version to determine last tag
       - name: Fetch
@@ -40,9 +42,13 @@ jobs:
           key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}
 
       - name: Setup Node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
-          node-version: '16'
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Update npm
+        run: npm install -g npm@latest
 
       - name: Install
         run: yarn install --frozen-lockfile
@@ -76,12 +82,6 @@ jobs:
             --loglevel silly \
             --yes
 
-      - name: Setup NPM Token
-        if: ${{ github.event.inputs.dryRun == 'false'}}
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: echo //registry.npmjs.org/:_authToken=${NPM_TOKEN} > .npmrc
-
       - name: Release
         if: ${{ github.event.inputs.dryRun == 'false'}}
         env: