fix(schema): use pnpm and trusted publishers

Author: Plopix

components/schema/.github/workflows/release.yaml

@@ -5,6 +5,10 @@ on:
 
 name: Release a New Version
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: write
+
 jobs:
     releaseandpublish:
         name: Release on Github and Publish on NPM
@@ -16,16 +20,40 @@ jobs:
             - name: ⎔ Setup node
               uses: actions/setup-node@v5
               with:
-                  node-version: 22
-                  always-auth: true
+                  node-version: 24
                   registry-url: 'https://registry.npmjs.org'
                   scope: '@crystallize'
 
+            - name: ⬆️ Upgrade npm
+              run: npm i -g npm@11
+
+            - name: ⎔ Set up pnpm
+              uses: pnpm/action-setup@v4
+              with:
+                  version: 10.14.0
+
             - name: 📥 Download deps
-              run: yarn install
+              run: pnpm install
 
             - name: 🏄 Run the tests
-              run: yarn build && yarn test
+              run: pnpm build && pnpm test
+
+            - name: 🧪 Debug environment
+              run: |
+                  echo "node=$(node -v)"
+                  echo "npm=$(npm -v)"
+                  echo "repo=${GITHUB_REPOSITORY}"
+                  echo "workflow=${GITHUB_WORKFLOW}"
+                  echo "workflow_ref=${GITHUB_WORKFLOW_REF}"
+                  echo "ref=${GITHUB_REF}"
+                  echo "ref_name=${GITHUB_REF_NAME}"
+                  echo "actor=${GITHUB_ACTOR}"
+                  echo "sha=${GITHUB_SHA}"
+                  echo "event_name=${GITHUB_EVENT_NAME}"
+                  echo "registry=$(npm config get registry)"
+                  echo "userconfig=${NPM_CONFIG_USERCONFIG}"
+                  npm config get "//registry.npmjs.org/:_authToken" || true
+                  npm config list -l
 
             - name: 🏷 Create Release
               uses: actions/create-release@v1
@@ -38,7 +66,9 @@ jobs:
                   prerelease: false
 
             - name: 📢 Publish to NPM
-              run: yarn publish --new-version ${GITHUB_REF#"refs/tags/"} --no-git-tag-version
+              run: npm publish --provenance --access public
               env:
-                  NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  # Use OIDC for npm authentication instead of NPM_TOKEN
+                  NODE_AUTH_TOKEN: ''
+                  NPM_TOKEN: ''

components/schema/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@crystallize/schema",
-    "version": "6.3.3",
+    "version": "6.3.4",
     "license": "MIT",
     "exports": {
         "./catalogue": {