move to npm trusted publishing

[wpalmeri]

Added permissions for OIDC and adjusted npm publish step. Trust relationship added on npm side already.

[Copilot]

Pull request overview

This pull request migrates the npm publishing workflow from token-based authentication to OIDC (OpenID Connect) trusted publishing, enhancing security by eliminating the need to store long-lived npm tokens as secrets.

Changes:

• Added OIDC permissions (id-token: write and contents: read) to the workflow
• Removed the NODE_AUTH_TOKEN environment variable that referenced the npm token secret

Comments suppressed due to low confidence (1)

.github/workflows/npm_publish.yml:23

• Corrected spelling of 'Depencencies' to 'Dependencies'.

      - name: Install Depencencies

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Size Change: 0 B

Total Size: 3.47 MB

ℹ️ View Unchanged

Filename	Size
dist/stellar-base.js	2.56 MB
dist/stellar-base.min.js	906 kB

_{compressed-size-action}