feat: OIDC npm support

[JaysonGCS]

[FEATURE] Enable npm Trusted Publishing (OIDC)

Description

This PR enables npm Trusted Publishing (OIDC) for secure, token-free package publishing. By using OpenID Connect, we eliminate the need for long-lived NPM tokens in our secrets, improving security and enabling automatic provenance attestations for our packages.

Changes Made

• Release Workflow (.github/workflows/release.yml):
  • Added id-token: write permission to the release job (required for OIDC).
  • Updated pnpm/action-setup to v4 (using pnpm v10).
  • Updated actions/setup-node usage.
  • Updated actions/checkout usage.
• Package Configuration (package.json):
  • Added publishConfig with provenance: true and access: public to enable build attestations and verified publising.

Definition of Done

Before submitting this pull request, please ensure that the following criteria have been met:

• All automated tests have passed successfully.
• All manual tests have passed successfully.
• Code has been reviewed by at least one other team member.
• Code has been properly documented and commented as needed.
• All new and existing code adheres to our project's coding standards.
• All dependencies have been added or removed from the project's README or other documentation as needed.
• Any relevant documentation or help files have been updated to reflect the changes made in this pull request.
• Any necessary database migrations have been run.
• Any relevant UI changes have been reviewed and approved by the UI/UX team.

Additional Notes

Important: This setup requires a one-time configuration on npmjs.com to add the GitHub repository as a trusted publisher. Once configured, the existing NPM_TOKEN can eventually be removed, though it has been retained in the workflow for now as a fallback or parallel option during the transition.

[github-actions]

🎉 This PR is included in version 1.0.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀