Setup trusted publishing to NPM (#5802)

Author: IMax153

.github/actions/setup/action.yml

@@ -5,6 +5,8 @@ inputs:
     description: The version of Node.js to install
     required: true
     default: 23.7.0
+  registry-url:
+    description: Optional registry to set up for auth.
 
 runs:
   using: composite
@@ -16,6 +18,7 @@ runs:
       with:
         cache: pnpm
         node-version: ${{ inputs.node-version }}
+        registry-url: ${{ inputs.registry-url }}
     - name: Install dependencies
       shell: bash
       run: pnpm install

.github/workflows/release.yml

@@ -22,11 +22,14 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install dependencies
         uses: ./.github/actions/setup
+        with:
+          registry-url: "https://registry.npmjs.org"
+      - name: Upgrade npm for OIDC support
+        run: npm install -g npm@latest
       - name: Create Release Pull Request or Publish
         uses: changesets/action@v1
         with:
           version: pnpm changeset-version
           publish: pnpm changeset-publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}