Switch to trusted publishing (#1090)

Author: eps1lon

.changeset/strong-owls-tan.md

@@ -0,0 +1,5 @@
+---
+"dom-accessibility-api": patch
+---
+
+Switch to trusted publishing

.github/workflows/release.yml

@@ -8,6 +8,12 @@ on:
 jobs:
   release:
     name: Prepare or publish release
+    environment: production
+    permissions:
+      id-token: write # Required for OIDC
+      # Changesets creates a commit and PR for the release
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
@@ -16,11 +22,10 @@ jobs:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0
 
-      # synced with #node-version
-      - name: Setup Node.js 16.x
+      - name: Setup Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 16.x
+          node-version: 24.x
 
       - name: Install Dependencies
         run: yarn
@@ -32,4 +37,3 @@ jobs:
           publish: yarn release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTOMATION_TOKEN }}