chore: Publish via npm OIDC trusted publishing

.github/workflows/release.yml

@@ -2,14 +2,20 @@ name: 🚀 Release
 
 on:
   workflow_dispatch:
+    inputs:
+      dry-run:
+        description: 'Dry run (verify auth and build, do not publish)'
+        type: boolean
+        default: false
 
 jobs:
   release:
     runs-on: ubuntu-latest
 
     permissions:
-      contents: write
-      packages: write
+      contents: write # push the changelog commit and tag
+      issues: write # @semantic-release/github opens a failure issue
+      id-token: write # OIDC trusted publishing and npm provenance
 
     steps:
       - name: 🛒 Checkout code
@@ -21,7 +27,7 @@ jobs:
       - name: 🔧 Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '24' # ships npm >= 11.6, required for OIDC trusted publishing
           cache: 'yarn'
 
       - name: 📦 Install dependencies
@@ -30,8 +36,7 @@ jobs:
 
       - name: 🎉 Release
         working-directory: packages/react-native-sortables
-        run: yarn semantic-release
+        run: yarn semantic-release ${{ inputs.dry-run && '--dry-run' || '' }}
         env:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}
-          YARN_NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           HUSKY: 0

packages/react-native-sortables/.releaserc

@@ -145,7 +145,7 @@
         "changelogFile": "CHANGELOG.md"
       }
     ],
-    "semantic-release-yarn",
+    "@semantic-release/npm",
     [
       "@semantic-release/git",
       {

packages/react-native-sortables/package.json

@@ -10,6 +10,7 @@
     "@semantic-release/commit-analyzer": "^13.0.0",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/github": "^10.0.7",
+    "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "^14.0.1",
     "@testing-library/react-hooks": "^8.0.1",
     "@testing-library/react-native": "^12.5.1",
@@ -28,8 +29,7 @@
     "react-native-gesture-handler": "3.0.2",
     "react-native-reanimated": "4.5.1",
     "react-native-worklets": "0.10.1",
-    "semantic-release": "^24.0.0",
-    "semantic-release-yarn": "^3.0.2",
+    "semantic-release": "^25.0.5",
     "syncpack": "^12.3.3",
     "typescript": "^5.8.3"
   },