Update JS-DevTools/npm-publish action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JS-DevTools/npm-publish	action	major	v3.1.1 -> v4.1.1

---

Release Notes

JS-DevTools/npm-publish (JS-DevTools/npm-publish)

v4.1.1

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.1

Bug fixes

• bump tar from 7.4.3 to 7.5.1 (#​249) (99ef290)

v4.1.0

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.0

Features

• allow token to be optional for OIDC-based publish (#​247) (612922f), closes #​242

v4.0.1

Compare Source

- uses: JS-DevTools/npm-publish@v4.0.1
  with:
    token: ${{ secrets.NPM_TOKEN }}

Bug fixes

• do not suppress E409 from npm publish (#​246) (c13368d), closes #​245

v4.0.0

Compare Source

The v4 release updates the action runtime to Node 24, but there have been no usage changes to the action.

Immutable releases have been enabled for this repository. As a security practice, we recommend pinning to an exact release:

- uses: JS-DevTools/npm-publish@v4.0.0
  with:
    token: ${{ secrets.NPM_TOKEN }}

⚠ BREAKING CHANGES

• The action now runs on Node 24 with npm 11
• The library and CLI now require Node >= 20, Node 16 and 18 are no longer supported
• The library is now ESM only

Features

• update action runtime to Node 24 (#​231) (0b36106)

Bug Fixes

• deps: bump the production group across 1 directory with 5 updates (#​238) (314ae61)
• deps: update tar and semver dependencies (#​194) (cd26c94)
• update dry-run and publish conflict logic for npm>=10 (#​232) (62716ea)
• windows: allow spawning npm cli on windows (#​199) (f45e793), closes #​198

Code Refactoring

• switch module format to ESM (#​234) (e081941)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.