Update npm workflow

Author: esezen

.github/workflows/publish-npm.yml

@@ -18,7 +18,14 @@ on:
         description: 'The version to publish.'
         required: true
         type: string
-  
+
+# It's required to set permissions to be able to:
+# - Authenticate to NPM with OIDC
+# See: https://docs.npmjs.com/trusted-publishers
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish-to-npm:
     name: Publish to NPM
@@ -34,33 +41,34 @@ jobs:
         with:
           version: ${{ inputs.version }}
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18.12.x
-          registry-url: https://registry.npmjs.org/
-          scope: '@constructorio'
-          token: ${{ secrets.NPM_TOKEN }}
+          node-version: 22.18.x
+
+      - name: Install npm 11
+        run: npm install -g npm@11
+
+      - name: Debug node and npm versions
+        run: node --version && npm --version
 
       - name: Install dependencies
         run: npm ci
 
       - name: Build compiled package for publishing
         uses: "./.github/actions/compile"
-        with: 
+        with:
           version: ${{ inputs.version }}
 
       - name: Update package.json version field
         id: update-version
         run: |
           # updates the package.json version field
           jq --arg new_version "${{ steps.version.outputs.without_prefix }}" '.version = $new_version' package.json > tmp.json && mv tmp.json package.json
-          
+
           echo "new-version=$new_version" >> $GITHUB_OUTPUT
 
       - name: Publish to NPM
         run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Notify Slack about new publish to NPM
         uses: ravsamhq/notify-slack-action@bca2d7f5660b833a27bda4f6b8bef389ebfefd25 # v2