fix: updating node action to avoid the token use

Author: jagalindo

.github/workflows/js.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # Required for OIDC trusted publishing
 
     steps:
     - name: Checkout code
@@ -16,7 +18,7 @@ jobs:
     - name: Setup Node
       uses: actions/setup-node@v4
       with:
-        node-version: 20
+        node-version: 22
         registry-url: https://registry.npmjs.org/
 
     - name: Install ANTLR4
@@ -34,17 +36,13 @@ jobs:
         npm version --no-git-tag-version "$(node -p "require('./package.json').version")-dev.${GITHUB_RUN_NUMBER}"
         echo "Publishing version: $(node -p "require('./package.json').version")"
         npm publish --tag dev --access public
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
 
     - name: Set release version and publish (main branch)
       if: github.ref == 'refs/heads/main'
       run: |
         cd js
         echo "Publishing version: $(node -p "require('./package.json').version")"
         npm publish --access public
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
 
     - name: Set release version and publish (tag)
       if: startsWith(github.ref, 'refs/tags/v')
@@ -54,5 +52,3 @@ jobs:
         npm version --no-git-tag-version "${TAG_VERSION}"
         echo "Publishing version: ${TAG_VERSION}"
         npm publish --access public
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}