chore: bump node and enable trusted publishing

.github/workflows/CI.yml

@@ -51,15 +51,15 @@ jobs:
           # - host: windows-latest
           #   target: aarch64-pc-windows-msvc
           #   build: yarn build --target aarch64-pc-windows-msvc
-    name: Build - ${{ matrix.settings.target }} - node@22
+    name: Build - ${{ matrix.settings.target }} - node@24
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v4
       - name: Setup node
         uses: actions/setup-node@v4
         if: ${{ !matrix.settings.docker }}
         with:
-          node-version: "22.4.x"
+          node-version: "24"
           cache: yarn
       - name: Install
         uses: dtolnay/rust-toolchain@stable
@@ -95,7 +95,7 @@ jobs:
         uses: actions/setup-node@v4
         if: matrix.settings.target == 'i686-pc-windows-msvc'
         with:
-          node-version: "22.4.x"
+          node-version: "24"
           cache: yarn
           architecture: x86
       - name: Build in docker
@@ -129,8 +129,8 @@ jobs:
           - host: windows-latest
             target: x86_64-pc-windows-msvc
         node:
-          - "18"
-          - "22.4.x"
+          - "22"
+          - "24"
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v4
@@ -165,8 +165,8 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - "18"
-          - "22.4.x"
+          - "22"
+          - "24"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -251,8 +251,8 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - "18"
-          - 22.4
+          - "22"
+          - "24"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -293,8 +293,8 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - "18"
-          - 22.4
+          - "22"
+          - "24"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -336,8 +336,8 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - "18"
-          - 22.4
+          - "22"
+          - "24"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -387,8 +387,11 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v4
         with:
-          node-version: "22.4.x"
+          node-version: "24.x"
           cache: yarn
+      - name: Upgrade npm for OIDC
+        if: ${{ steps.release.outputs.releases_created }}
+        run: npm i -g npm@^11.5.1
       - name: Create tag
         id: tag
         uses: butlerlogic/[email protected]
@@ -418,15 +421,12 @@ jobs:
           npm config set provenance true
           if node -e "console.log(require('./package.json').version)" | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$";
           then
-            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
             npm publish --access public
           elif node -e "console.log(require('./package.json').version)" | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+";
           then
-            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
             npm publish --tag next --access public
           else
             echo "Not a release, skipping publish"
           fi
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}