Update release workflow to use trusted publishing

[risantos]

Description

• Updates the release workflow to use OIDC publishing via release-it. See https://github.com/release-it/release-it/blob/3378faf75f1a8e2e87f63a4914f8df68223b3a5b/docs/npm.md#trusted-publishing-oidc

[Copilot]

Pull request overview

This PR updates the release workflow to use OIDC-based trusted publishing for npm, replacing traditional token-based authentication. It also upgrades the release-it tool and several GitHub Actions to newer versions.

Changes:

• Adds OIDC permissions (id-token: write) and removes manual npm token configuration
• Updates release-it from v19.0.3 to v19.2.3 with skipChecks: true configuration
• Upgrades GitHub Actions and Node.js versions used in the release workflow

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 2 comments.

File	Description
.github/workflows/release.yaml	Adds OIDC permissions, removes npm token configuration, updates action versions to v6, and changes Node.js version to 24
.release-it.js	Adds skipChecks: true to npm configuration for trusted publishing
package.json	Updates release-it dependency version and reorders dependency list alphabetically
yarn.lock	Updates lockfile with new dependency versions for release-it and its transitive dependencies

Comments suppressed due to low confidence (1)

.github/workflows/release.yaml:50

• The removal of npm authentication configuration suggests a transition to OIDC trusted publishing, which relies on the id-token: write permission instead of npm tokens. However, the PR description or code comments do not explain how the npm registry needs to be configured on the npm side to accept OIDC tokens from this GitHub Actions workflow. Ensure that the npm package has trusted publishing configured for this GitHub repository before merging.

    - name: Generate release
      env:
        GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
      run: npm run release -- --increment "${{ github.event.inputs.VERSION_BUMP }}" -V

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.