ci: setup trusted publishing

Author: timofei-iatsenko

.github/workflows/release.yml

@@ -3,22 +3,25 @@ name: release
 on:
   workflow_dispatch:
 
+permissions:
+  contents: write
+  id-token: write # Required for npm trusted publishing
+
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
-          cache: yarn
-          registry-url: https://registry.npmjs.org/
+          node-version: 24
+
+      - name: Enable Corepack
+        run: corepack enable
 
       - name: Install dependencies and build
         run: |

.gitignore

@@ -17,3 +17,4 @@ src/**/*.json
 *.tgz
 aot/*
 lib/*
+.yarn

.yarnrc.yml

@@ -1 +1 @@
-yarnPath: .yarn/releases/yarn-1.22.22.cjs
+nodeLinker: node-modules

package.json

@@ -54,5 +54,5 @@
       "eslint --fix"
     ]
   },
-  "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
+  "packageManager": "yarn@4.13.0+sha512.5c20ba010c99815433e5c8453112165e673f1c7948d8d2b267f4b5e52097538658388ebc9f9580656d9b75c5cc996f990f611f99304a2197d4c56d21eea370e7"
 }