ci: update auto-release workflow

Author: juliolmuller

.github/workflows/release.yml

@@ -11,12 +11,10 @@ concurrency:
 
 env:
   HUSKY: 0
-  NODE_VERSION: 20
-  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} # for `npm publish`
   BUN_VERSION: latest
-  # NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }} # for `bun publish`
+  NODE_VERSION: 24
+  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} # for `npm publish`
   NPM_REGISTRY_URL: https://registry.npmjs.org/
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
   release:
@@ -26,34 +24,22 @@ jobs:
       id-token: write
       pull-requests: write
     steps:
-      - name: Checkout Project Artifacts
-        uses: actions/checkout@v4
-      - name: Setup Bun.js
-        uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: oven-sh/setup-bun@ecf28ddc73e819eb6fa29df6b34ef8921c743461 # v2.1.3
         with:
           bun-version: ${{ env.BUN_VERSION }}
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: ${{ env.NPM_REGISTRY_URL }}
 
-      - name: Install Dependencies
-        run: bun install --frozen-lockfile
-
-      - name: Build Distribution Artifacts
-        run: bun run build
-
-      - name: Check Types & Linting
-        run: |
-          bun run type-check
-          bun run lint
-
-      - name: Run Unit Tests
-        run: bun run test:ci
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: bun run type-check
+      - run: bun run lint:ci
+      - run: bun run test:ci
 
-      - name: Create Release PR or Publish to NPM
-        uses: changesets/action@v1
+      - uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
         with:
           version: bun run version
           publish: bun run release