chore: migrate release flow to OIDC

Author: mweststrate

.github/workflows/release.yml

@@ -8,14 +8,20 @@ on:
     branches:
       - main
 
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
+          registry-url: https://registry.npmjs.org
       - name: install
         run: yarn
       - name: test
@@ -27,5 +33,4 @@ jobs:
         if: github.repository == 'immerjs/immer'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: yarn semantic-release --branches main
+        run: npm semantic-release --branches main