Use trusted Organisation

Author: Jason2866

.github/workflows/build_upload.yml

@@ -12,6 +12,9 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write  # required to use OIDC
     steps:
       - uses: actions/checkout@v4
       - name: Remove old files and folders
@@ -32,8 +35,8 @@ jobs:
         with:
           commit_message: "Github Action: Updated dist files"
       - name: Publish to NPM registry
-        uses: JS-DevTools/npm-publish@v3
+        uses: JS-DevTools/npm-publish@v4
         with:
           registry: https://registry.npmjs.org/
-          token: ${{ secrets.NPM_TOKEN }}
+#          token: ${{ secrets.NPM_TOKEN }}
           strategy: all