Use OIDC for publishing to NPM registry

Author: bastianeicher

.github/workflows/build.yml

@@ -1,6 +1,12 @@
 name: Build
 on: [push, pull_request]
 
+permissions:
+  contents: write
+  packages: write
+  attestations: write
+  id-token: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -59,12 +65,11 @@ jobs:
         if: github.ref_type == 'tag'
         uses: actions/setup-node@v6
         with:
+          node-version: '24'
           registry-url: https://registry.npmjs.org
       - name: Publish packages (npmjs.com)
         if: github.ref_type == 'tag'
         run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
 
       # Publish
       - name: Connect to registry (GitHub)