ci: Update npm release job to use trusted publishing

.github/workflows/publish.yml

@@ -5,21 +5,28 @@ on:
     branches:
       - master
 
+permissions:
+  id-token: write # required for trusted publishing
+  contents: read
+
 jobs:
   publish-npm:
     if: contains(github.event.head_commit.message, 'chore(release)') 
     runs-on: ubuntu-22.04
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3.5.3
-      
+        uses: actions/checkout@v4
+
       - name: Set up Node
-        uses: actions/setup-node@v3.7.0
+        uses: actions/setup-node@v4
         with:
-          node-version: 18.17.1
+          node-version: '20'
           registry-url: https://registry.npmjs.org/
 
+      - name: Install npm
+        run: npm install -g npm@">=11.5.1" # trusted publishing requires 11.5.1 or later
+
       - name: Install dependencies
         run: npm install
 
@@ -28,5 +35,3 @@ jobs:
 
       - name: Publish to npm
         run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -25,7 +25,7 @@
   "author": "ButterCMS <support@buttercms.com>",
   "repository": {
     "type": "git",
-    "url": "git://github.com/buttercms/buttercms-js.git"
+    "url": "git+https://github.com/ButterCMS/buttercms-js.git"
   },
   "main": "dist/butter.umd.cjs",
   "module": "dist/butter.esm.js",