ci: upgrade release workflow (npm OIDC auth), Node LTS, semantic-release, actions, mparticle/web-sdk

.github/workflows/pull-request.yml

@@ -11,14 +11,14 @@ jobs:
 
         strategy:
             matrix:
-                node-version: [18.x, 20.x]
+                node-version: [18.x, 20.x, 22.x, 24.x]
 
         steps:
             - name: Checkout
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             - name: Use Node.js ${{ matrix.node-version }}
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
                   node-version: ${{ matrix.node-version }}
 
@@ -32,7 +32,7 @@ jobs:
               run: npm run test
 
             - name: Archive npm failure logs
-              uses: actions/upload-artifact@v3
+              uses: actions/upload-artifact@v4
               if: failure()
               with:
                   name: npm-logs

.github/workflows/release.yml

@@ -20,12 +20,12 @@ jobs:
         needs: confirm-public-repo-master-branch
         steps:
             - name: Checkout
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             - name: NPM install
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
-                  node-version: 18.x
+                  node-version: 24.x
 
             - name: Run NPM CI
               run: npm ci
@@ -37,7 +37,7 @@ jobs:
               run: npm run test
 
             - name: Archive npm failure logs
-              uses: actions/upload-artifact@v3
+              uses: actions/upload-artifact@v4
               if: failure()
               with:
                   name: npm-logs
@@ -51,7 +51,7 @@ jobs:
             - confirm-public-repo-master-branch
         steps:
             - name: Checkout development branch
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
               with:
                   repository: mparticle-integrations/mparticle-javascript-integration-mixpanel
                   ref: development
@@ -67,17 +67,24 @@ jobs:
             - build-and-test
             - create-release-branch
             - confirm-public-repo-master-branch
+
+        # OIDC permissions for npm trusted publishing
+        permissions:
+          contents: write
+          issues: write
+          pull-requests: write
+          id-token: write # Required for OIDC authentication with npm
+
         env:
             GITHUB_TOKEN: ${{ secrets.MP_INTEGRATIONS_SEMANTIC_RELEASE_BOT }}
             GIT_AUTHOR_NAME: mparticle-automation
             GIT_AUTHOR_EMAIL: developers@mparticle.com
             GIT_COMMITTER_NAME: mparticle-automation
             GIT_COMMITTER_EMAIL: developers@mparticle.com
-            NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
 
         steps:
             - name: Checkout public master branch
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
               with:
                   fetch-depth: 0
                   ref: master
@@ -94,13 +101,17 @@ jobs:
               run: |
                   git pull origin release/${{ github.run_number }}
             - name: Setup Node.js
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
-                  node-version: 16.x
+                  node-version: 24.x
+                  registry-url: 'https://registry.npmjs.org'
 
             - name: Install dependencies
               run: npm ci
 
+            - name: Ensure npm CLI supports OIDC
+              run: npm install -g npm@latest
+
             - name: Release --dry-run
               if: ${{ github.event.inputs.dryRun == 'true'}}
               run: |
@@ -110,7 +121,7 @@ jobs:
               run: |
                   npx semantic-release
             - name: Archive npm failure logs
-              uses: actions/upload-artifact@v3
+              uses: actions/upload-artifact@v4
               if: failure()
               with:
                   name: npm-logs
@@ -126,7 +137,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout master branch
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
               with:
                   fetch-depth: 0
                   repository: ${{ github.repository }}