ci: Switch to trusted publishing (#207)

* ci: Switch to trusted publishing

* update npm only when a release is created

Author: Pixel998

.github/CODEOWNERS

@@ -0,0 +1 @@
+.github/workflows/release-please.yml @eslint/eslint-tsc

.github/workflows/release-please.yml

@@ -2,6 +2,7 @@ on:
   push:
     branches:
       - main
+
 name: release-please
 jobs:
   release-please:
@@ -30,11 +31,16 @@ jobs:
           node-version: lts/*
           registry-url: https://registry.npmjs.org
         if: ${{ steps.release.outputs.release_created }}
-      - run: npm install
+
+        # npm 11.5.1 or later is required so update to latest to be sure
+      - name: Update npm
+        run: npm install -g npm@latest
         if: ${{ steps.release.outputs.release_created }}
-      - run: npm publish --provenance
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish to npm
+        run: |
+            npm install
+            npm publish --provenance
         if: ${{ steps.release.outputs.release_created }}
 
         # Post to social media