ci: use OIDC for publishing (#1832)

Author: G-Rath

.github/workflows/nodejs.yml

@@ -143,7 +143,7 @@ jobs:
       contents: write # to be able to publish a GitHub release
       issues: write # to be able to comment on released issues
       pull-requests: write # to be able to comment on released pull requests
-      id-token: write # to enable use of OIDC for npm provenance
+      id-token: write # to enable use of OIDC for npm provenance and publishing
 
     if:
       # prettier-ignore
@@ -165,4 +165,3 @@ jobs:
       - run: yarn semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -137,8 +137,5 @@
   "packageManager": "[email protected]",
   "engines": {
     "node": "^20.12.0 || ^22.0.0 || >=24.0.0"
-  },
-  "publishConfig": {
-    "provenance": true
   }
 }