ci: use trusted publishing for JS SDK (#4423)

* ci: use trusted publishing for JS SDK

* ci: keep pnpm for JS SDK publishing

.github/workflows/publish-js-sdk.yml

@@ -11,10 +11,14 @@ on:
 env:
   TEST_API_KEY: ${{ secrets.TEST_API_KEY }}
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish:
     name: Publish
-    runs-on: blacksmith-2vcpu-ubuntu-2404
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
       - name: Install pnpm
@@ -24,13 +28,9 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: "pnpm"
           cache-dependency-path: './apps/js-sdk/firecrawl/pnpm-lock.yaml'
-      - name: Authenticate
-        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Publish
         run: |
           pnpm install