setup trusted publishing and use node 24 for build

Author: adelinn

.github/workflows/release.yml

@@ -5,28 +5,28 @@ on:
     types: [published]
 
 permissions:
+  id-token: write  # Required for OIDC
   contents: read
 
 env:
   CI: true
-
 jobs:
   build:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - uses: actions/checkout/@v6
+      - uses: actions/setup-node@v6
         with:
-          node-version: '20'
+          node-version: "24"
           registry-url: 'https://registry.npmjs.org'
           cache: 'npm'
 
+      - run: npm install -g npm@latest # Required for trusted publishing (npm 11.5.1 or later)
+
       - name: Install dependencies
         run: npm ci
-      
+
       - name: Build Extension
         run: npm run build
 
@@ -36,5 +36,3 @@ jobs:
 
       - name: Publish Extension
         run: npm publish --tag ${{ env.RELEASE_CHANNEL }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}