ci: enable trusted publishing releases

.github/workflows/release.yml

@@ -0,0 +1,24 @@
+name: Release the package
+
+on:
+  workflow_dispatch:
+    inputs:
+      semver:
+        description: 'Release bump type'
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+
+permissions: {}
+
+jobs:
+  release:
+    permissions:
+      id-token: write # required for npm provenance via OIDC
+      contents: write # required to push the release commit and the tag
+    uses: fastify/workflows/.github/workflows/reusable-release.yml@b1a11bce713bc857e52b2231fec3c89071ad3135
+    with:
+      semver: ${{ inputs.semver }}

package.json

@@ -29,6 +29,7 @@
     "build:post": "node post-build.js",
     "build:test": "attw --pack .",
     "build": "npm-run-all build:clean build:cjs build:esm build:post build:test",
+    "release:build": "npm run build",
     "lint": "eslint .",
     "lint:fix": "npm run lint -- --fix",
     "test:node": "node --test test/index.cjs",
@@ -97,4 +98,4 @@
     "tstyche": "^7.0.0",
     "typescript": "~6.0.2"
   }
-}
+}