chore: upgrade dev deps, trusted publishing. (#39)

Author: knightedcodemonkey

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest]
-        version: ['22.17.1', '24.4.1']
+        version: ['22.21.1', '24.11.1']
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
@@ -38,7 +38,7 @@ jobs:
       - name: Test
         run: npm test
       - name: Report Coverage
-        uses: codecov/codecov-action@v5.4.0
+        uses: codecov/codecov-action@v5.5.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
       - name: Pack

.github/workflows/publish.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [published]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     if: contains('["knightedcodemonkey"]', github.actor)
@@ -14,7 +18,7 @@ jobs:
       - name: Setup Node
         uses: actions/[email protected]
         with:
-          node-version: '24.4.1'
+          node-version: '24.11.1'
       - name: Install Dependencies
         run: npm ci
       - name: Save error log
@@ -30,8 +34,7 @@ jobs:
       - name: Pack
         run: npm pack
       - name: Push to NPM registry
-        uses: JS-DevTools/npm-publish@v3.1.1
+        uses: JS-DevTools/npm-publish@v4.1.1
         with:
-          token: ${{ secrets.NPM_AUTH_TOKEN }}
-          tag: ${{ contains(github.ref, '-') && 'next' || 'latest' }}
           access: public
+          tag: ${{ contains(github.ref, '-') && 'next' || 'latest' }}