chore: oidc (#1093)

Author: zibs

.github/workflows/pull-request.yml

@@ -14,7 +14,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: 'yarn'
 
       - name: Install dependencies

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    environment: Production
     permissions:
       contents: write
       id-token: write
@@ -22,9 +23,14 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: 'yarn'
 
+      - name: Upgrade npm for OIDC
+        run: npm i -g npm@^11.5.1
+
+      - run: npm config set registry https://registry.npmjs.org
+
       - name: Install dependencies
         run: yarn install --frozen-lockfile
 
@@ -39,4 +45,3 @@ jobs:
           publish: yarn changeset publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}