chore(ci): Migrate release workflow to npm Trusted Publishing with OIDC

.github/workflows/pr-title.yml

@@ -17,11 +17,3 @@ jobs:
       - uses: amannn/action-semantic-pull-request@v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          types: |
-            fix
-            feat
-            chore
-            docs
-            build
-            content

.github/workflows/release.yml

@@ -64,11 +64,7 @@ jobs:
           mise run integrationtest
 
       - if: ${{ needs.Process.outputs.releases_created == 'true' }}
-        env:
-          NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
         run: mise run publish TAG=latest
 
       - if: ${{ needs.Process.outputs.prs_created == 'true' }}
-        env:
-          NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
         run: mise run publish TAG=next

.mise.toml

@@ -3,8 +3,9 @@ mise.path = "./node_modules/.bin" # add a directory to PATH
 
 [tools]
 just="1.25.2"
-nodejs="20.12.1"
-yarn="1.22.19"
+yarn= "4.9.4"
 shellcheck="0.9.0"
 jq="1.7.1"
 usage = "latest"
+npm = "11.6.3"
+node = "22.16.0"

.yarnrc.yml

@@ -1,7 +1,13 @@
 compressionLevel: mixed
+
 enableGlobalCache: false
+
 nodeLinker: node-modules
-yarnPath: .yarn/releases/yarn-4.0.2.cjs
+
 npmAlwaysAuth: true
+
 npmAuthToken: "${NPM_AUTH_TOKEN:-''}"
-npmRegistryServer: 'https://registry.npmjs.org'
+
+npmRegistryServer: "https://registry.npmjs.org"
+
+yarnPath: .yarn/releases/yarn-4.11.0.cjs

package.json

@@ -65,5 +65,6 @@
   "repository": {
     "type": "github",
     "url": "https://github.com/zenobi-us/ink-mouse"
-  }
+  },
+  "packageManager": "yarn@4.11.0"
 }