feat(TU-33147): Migrate to OIDC Authentication

[tom-ridsdale]

Migrated the @typeform/api-client repository from classic NPM_TOKEN authentication to npm's Trusted Publishers (OIDC) authentication.

Updated branch protection rules

• Removed:
  • build-lint-test - node 18
  • build-lint-test - node 20
• Added:
  • build-lint-test - node 22

Node Version Strategy

Build/CI (Node 22):

• Release workflow and PR tests use Node 22
• Required by @semantic-release/npm ^13.1.1 for OIDC support
• Dev dependencies cannot be installed on older Node versions

Runtime (Node >=12):

• engines.node remains at >=12 for user compatibility

Changes made:

1. Upgraded dependencies (package.json)

• @semantic-release/npm: ^11.0.1 → ^13.1.1
• This version adds OIDC support and provenance attestation

2. Updated Release workflow

• Upgraded Node.js: 20 → 22 (required for @semantic-release/npm ^13.1.1)
• Added OIDC permissions: id-token: write and contents: write
• Removed things related to NPM_TOKEN authentication

4. Enabled provenance (.releaserc)

• Enables automatic provenance attestation for published packages

5. Added Node 22 to test matrix (.github/workflows/pr.yml)

• PR workflow now only tests Node 22
• Coverage uploaded from Node 22

[tom-ridsdale]

There are lots of changes here 🫠

[tom-ridsdale]

Built and tests ran successfully locally.
Not sure if there's any manual testing I can do to verify it's all okay 🤔 - I am not familiar with this repo

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitstream-cm]

🥷 Code experts: robespmun

robespmun has most 👩‍💻 activity in the files.
robespmun has most 🧠 knowledge in the files.

See details

.github/workflows/pr.yml

Activity based on git-commit:

	robespmun
DEC
NOV
OCT
SEP
AUG
JUL	98 additions & 0 deletions

Knowledge based on git-blame:
robespmun: 100%

.github/workflows/release.yml

Activity based on git-commit:

	robespmun
DEC
NOV
OCT
SEP
AUG
JUL	50 additions & 0 deletions

Knowledge based on git-blame:
robespmun: 100%

.releaserc

Activity based on git-commit:

	robespmun
DEC
NOV
OCT
SEP
AUG
JUL	30 additions & 0 deletions

Knowledge based on git-blame:
robespmun: 100%

package.json

Activity based on git-commit:

	robespmun
DEC
NOV
OCT
SEP
AUG
JUL	115 additions & 0 deletions

Knowledge based on git-blame:
robespmun: 99%

yarn.lock

Activity based on git-commit:

	robespmun
DEC
NOV
OCT
SEP
AUG
JUL	13822 additions & 0 deletions

Knowledge based on git-blame:
robespmun: 99%

✨ Comment /gs review for LinearB AI review. Learn how to automate it here.

[typeform-ops-gha]

🎉 This PR is included in version 2.6.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀