ci(npm-publish): rework auth using actions/setup-node

Author: Alenar

.github/workflows/actions/publish-npm-package/action.yml

@@ -23,6 +23,13 @@ inputs:
 runs:
   using: "composite"
   steps:
+    - uses: actions/setup-node@v6
+      with:
+        node-version: 'lts/*'
+        package-manager-cache: 'false'
+        # Note: setting up the registry allows auth to be passed via env.NODE_AUTH_TOKEN
+        registry-url: https://registry.npmjs.org
+
     - name: Prepare
       id: prepare
       run: |
@@ -99,11 +106,10 @@ runs:
       shell: bash
       working-directory: ${{ inputs.package_dir }}
       env:
-        NPM_TOKEN: ${{ inputs.api_token }}
+        NODE_AUTH_TOKEN: ${{ inputs.api_token }}
       run: |
         echo "Publish '${{ steps.prepare.outputs.package_name }}"' package"
-        npm set "//registry.npmjs.org/:_authToken=${NPM_TOKEN}"
-        if [ -z "${NPM_TOKEN}" -a "${{ inputs.dry_run }}" == "true" ]; then
+        if [ -z "${NODE_AUTH_TOKEN}" -a "${{ inputs.dry_run }}" == "true" ]; then
           echo "Warning: An NPM access token is required for authentication and has not been provided."
         else
           npm whoami
@@ -121,10 +127,9 @@ runs:
       shell: bash
       working-directory: ${{ inputs.package_dir }}
       env:
-        NPM_TOKEN: ${{ inputs.api_token }}
+        NODE_AUTH_TOKEN: ${{ inputs.api_token }}
       run: |
         echo "Promote '${{ steps.prepare.outputs.package_name }}' package version '${{ steps.prepare.outputs.package_local_version }}' from 'next' to 'latest'"
-        npm set "//registry.npmjs.org/:_authToken=${NPM_TOKEN}"
         npm whoami
         npm dist-tag add ${{ steps.prepare.outputs.package_name }}"@${{ steps.prepare.outputs.package_local_version }} latest
         npm dist-tag rm ${{ steps.prepare.outputs.package_name }}"@${{ steps.prepare.outputs.package_local_version }} next