ci: setup trusted publisher

Author: ntnyq

.github/workflows/release.yml

@@ -1,6 +1,7 @@
 name: Release
 
 permissions:
+  id-token: write
   contents: write
 
 on:
@@ -15,10 +16,16 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+      - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
           node-version: lts/*
+          cache: pnpm
 
       - run: npx changelogithub
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - run: pnpm install --frozen-lockfile
+      - run: npm install -g npm@latest
+      - run: pnpm publish --no-git-checks --tag next

package.json

@@ -36,6 +36,10 @@
   "files": [
     "dist"
   ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "next"
+  },
   "scripts": {
     "build": "tsdown",
     "build:site": "run-s build docs:build",
@@ -45,9 +49,8 @@
     "lint": "eslint",
     "prepare": "husky",
     "prepublishOnly": "pnpm run build",
-    "release": "run-s release:check release:version release:publish",
+    "release": "run-s release:check release:version",
     "release:check": "run-s lint typecheck test",
-    "release:publish": "pnpm publish --tag next",
     "release:version": "bumpp",
     "test": "vitest",
     "typecheck": "tsc --noEmit"