Switch to trusted publishing for npm

[Shinigami92]

Like prettier/eslint-plugin-prettier#757 we should switch to Trusted publishing for npm packages

[xDivisionByZerox]

We already have automatic provenance generation on NPM. Does that not mean that we already use trusted publishing.

I'm only on mobile right now and saw the issue in my emails. Sorry if that's incorrect

[Shinigami92]

We already have automatic provenance generation on NPM. Does that not mean that we already use trusted publishing.

I'm only on mobile right now and saw the issue in my emails. Sorry if that's incorrect

First I will test everything in my auralis project
But this will remove out manually added npm token from our CI

[Shinigami92]

It is about removing these lines

faker/.github/workflows/publish-release.yml

Lines 49 to 52 in 2f82f49

	- name: Set publishing config
	run: pnpm config set '//registry.npmjs.org/:_authToken' "${NPM_AUTH_TOKEN}"
	env:
	NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}