Fix npm release and enable trusted publishing

.github/workflows/release.yml

@@ -6,6 +6,9 @@ on:
       - main
     types: [ closed ]
 
+permissions:
+  id-token: write  # Required for OIDC. See https://docs.npmjs.com/trusted-publishers#step-2-configure-your-cicd-workflow
+  contents: read
 
 jobs:
   changelog:
@@ -22,6 +25,11 @@ jobs:
         with:
           token: ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Configure Git author
         run: |
           git config --global user.name "Open Terms Archive Release Bot"
@@ -59,10 +67,11 @@ jobs:
           body: ${{ steps.release-changelog.outputs.content }}
           token: ${{ secrets.RELEASE_BOT_GITHUB_TOKEN }}
 
+      - name: Update npm
+        run: npm install -g npm@latest
+
       - name: Publish to NPM public repository
-        uses: JS-DevTools/npm-publish@v1
-        with:
-          token: ${{ secrets.NPMJS_ACCESS_TOKEN }}
+        run: npm publish
 
       - name: Trigger documentation deploy
         uses: peter-evans/repository-dispatch@v2

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All changes that impact users of this module are documented in this file, in the [Common Changelog](https://common-changelog.org) format with some additional specifications defined in the CONTRIBUTING file. This codebase adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Unreleased [no-release]
+
+_Modifications made in this changeset do not add, remove or alter any behavior, dependency, API or functionality of the software. They only change non-functional parts of the repository, such as the README file or CI workflows._
+
 ## 10.1.1 - 2025-11-25
 
 _Full changeset and discussions: [#1209](https://github.com/OpenTermsArchive/engine/pull/1209)._