ci: Switch to trusted publishing (#164)

* ci: Switch to trusted publishing

* update npm only when a release is created

Author: Pixel998

.github/CODEOWNERS

@@ -1 +1,2 @@
 .release-please-manifest.json @eslint/eslint-tsc
+.github/workflows/release-please.yml @eslint/eslint-tsc

.github/workflows/release-please.yml

@@ -2,6 +2,7 @@ on:
     push:
         branches:
             - main
+
 name: release-please
 jobs:
     release-please:
@@ -22,12 +23,15 @@ jobs:
                   registry-url: https://registry.npmjs.org
               if: ${{ steps.release.outputs.release_created }}
 
+              # npm 11.5.1 or later is required so update to latest to be sure
+            - name: Update npm
+              run: npm install -g npm@latest
+              if: ${{ steps.release.outputs.release_created }}
+
             - name: Publish to npm
               run: |
                   npm install
                   npm publish --provenance
-              env:
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
               if: ${{ steps.release.outputs.release_created }}
 
             - name: Publish to JSR