chore: Setup trusted publishing for NPM

Author: miyanokomiya

.github/workflows/publish.yml

@@ -2,22 +2,22 @@ name: Publish Package to npmjs and JSR
 on:
   release:
     types: [created]
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
 jobs:
-  build:
+  publish:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '22.x'
           registry-url: 'https://registry.npmjs.org'
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
       - run: corepack enable yarn
       - run: yarn
       - run: npm publish
       - run: npx jsr publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}