Setup trusted publishing with npm (#72)

Author: davidjgoss

.github/workflows/release-npm.yml

@@ -1,34 +1,25 @@
-name: Release npm module
+name: Release NPM
 
 on:
   push:
-    branches:
-      - release/*
+    branches: [release/*]
 
-jobs:
-  pre-release-check:
-    uses: cucumber/.github/.github/workflows/prerelease-checks.yml@main
-
-  test-javascript:
-    uses: ./.github/workflows/test.yml
+permissions:
+  id-token: write
+  contents: read
 
+jobs:
   publish-npm:
     name: Publish NPM module
-    needs: [pre-release-check, test-javascript]
     runs-on: ubuntu-latest
     environment: Release
-
     steps:
       - uses: actions/checkout@v5
-
       - uses: actions/setup-node@v5
         with:
-          node-version: "22.x"
-          cache: "npm"
+          node-version: '24.x'
+          cache: 'npm'
           cache-dependency-path: package-lock.json
-
+          registry-url: 'https://registry.npmjs.org'
       - run: npm install-ci-test
-
-      - uses: cucumber/[email protected]
-        with:
-          npm-token: ${{ secrets.NPM_TOKEN }}
+      - run: npm publish