Update GitHub Actions workflow to use trusted publishers and latest action versions

Co-authored-by: kentcdodds <[email protected]>

Author: Copilot

.github/workflows/release.yml

@@ -15,14 +15,17 @@ jobs:
   test:
     name: 🧪 Test
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [lts/-1, lts/*, latest]
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: ⎔ Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: ${{ matrix.node-version }}
 
       - name: 📥 Download deps
         uses: bahmutov/npm-install@v1
@@ -48,12 +51,12 @@ jobs:
       github.ref) && github.event_name == 'push' }}
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: ⎔ Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: lts/*
 
       - name: 📥 Download deps
         uses: bahmutov/npm-install@v1
@@ -67,9 +70,9 @@ jobs:
           --moduleResolution nodenext --target es2022 --outDir . index.js
 
       - name: 🚀 Release
-        uses: cycjimmy/semantic-release-action@v3.2.0
+        uses: cycjimmy/semantic-release-action@v5.0.2
         with:
-          semantic_version: 17
+          semantic_version: 25
           branches: |
             [
               '+([0-9])?(.{+([0-9]),x}).x',
@@ -82,4 +85,3 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_CONFIG_PROVENANCE: true
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}