chore(cicd): use oidc for trusted publishes to npm

Author: rkoopmans

.github/workflows/ci-cd.yaml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
       - run: npm install
@@ -41,7 +41,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: Setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
       - name: Install Dependencies
@@ -59,12 +59,16 @@ jobs:
     timeout-minutes: 10
     needs: [Unit_tests, Integration_tests]
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - name: Set up node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-            node-version: "22.x"
+            node-version: "26.x"
             registry-url: "https://registry.npmjs.org"
       - name: Install dependencies
         run: npm install
@@ -82,5 +86,3 @@ jobs:
         run: npx tsc
       - name: Publish to npm
         run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}