ci(*): switch to trusted publishing (#483)

This pull request makes a small update to the npm publishing workflow.
The most notable change is the addition of a step to update npm to the
latest version before installing dependencies and publishing the
package.

Workflow improvements:

* Added a step to update npm to the latest version using `npm install -g
npm@latest` before running `npm ci` and publishing.
(.github/workflows/publish.yml)

Author: lumirlumir

.github/workflows/publish.yml

@@ -28,10 +28,11 @@ jobs:
           path: ~/.npm
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
 
+      - name: Update npm
+        run: npm install -g npm@latest
+
       - name: Set up node_modules
         run: npm ci
 
       - name: Publish
         run: npm run publish-package
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}