Configure Trusted Publishing for NPM (#7587)

Author: achamayou

.github/workflows/npm.yml

@@ -4,18 +4,21 @@ on:
   release:
     types: [published]
 
-permissions: read-all
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   build_and_publish:
     name: "Publish ccf-app package to NPM"
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
+          registry-url: "https://registry.npmjs.org"
 
       - name: Get release number from git tag (release) or latest (branch)
         run: |
@@ -31,5 +34,5 @@ jobs:
         run: |
           set -ex
           cd js/ccf-app
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
+          echo "registry=https://registry.npmjs.org/" > .npmrc
           npm publish microsoft-ccf-app*.tgz --access public

js/ccf-app/package.json

@@ -1,5 +1,9 @@
 {
   "name": "@microsoft/ccf-app",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/microsoft/ccf"
+  },
   "version": "0.0.0",
   "description": "CCF app support package",
   "main": "index.js",