fix(schema): use pnpm and trusted publishers

Author: Plopix

components/schema/.github/workflows/release.yaml

@@ -5,6 +5,10 @@ on:
 
 name: Release a New Version
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: write
+
 jobs:
     releaseandpublish:
         name: Release on Github and Publish on NPM
@@ -21,11 +25,16 @@ jobs:
                   registry-url: 'https://registry.npmjs.org'
                   scope: '@crystallize'
 
+            - name: ⎔ Set up pnpm
+              uses: pnpm/action-setup@v4
+              with:
+                  version: 10.14.0
+
             - name: 📥 Download deps
-              run: yarn install
+              run: pnpm install
 
             - name: 🏄 Run the tests
-              run: yarn build && yarn test
+              run: pnpm build && pnpm test
 
             - name: 🏷 Create Release
               uses: actions/create-release@v1
@@ -38,7 +47,9 @@ jobs:
                   prerelease: false
 
             - name: 📢 Publish to NPM
-              run: yarn publish --new-version ${GITHUB_REF#"refs/tags/"} --no-git-tag-version
+              run: npm publish --provenance --access public
               env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  # Use OIDC for npm authentication instead of NPM_TOKEN
+                  NODE_AUTH_TOKEN: ''
+                  NPM_TOKEN: ''

components/schema/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@crystallize/schema",
-    "version": "6.3.3",
+    "version": "6.3.4",
     "license": "MIT",
     "exports": {
         "./catalogue": {