feat(cd): switch to npm trusted publishers

Replace NPM_TOKEN with OIDC-based trusted publishing. Bump Node to
24 LTS (bundles npm 11 which supports OIDC). Add @videojs/store and
@videojs/element to release-please config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.github/release-please/.release-please-manifest.json

@@ -1,7 +1,9 @@
 {
   "packages/core": "10.0.0-alpha.1",
+  "packages/element": "10.0.0-alpha.1",
   "packages/html": "10.0.0-alpha.1",
-  "packages/react": "10.0.0-alpha.1",
   "packages/icons": "10.0.0-alpha.1",
+  "packages/react": "10.0.0-alpha.1",
+  "packages/store": "10.0.0-alpha.1",
   "packages/utils": "10.0.0-alpha.1"
 }

.github/release-please/release-please-config.json

@@ -12,7 +12,7 @@
     {
       "type": "linked-versions",
       "groupName": "videojs",
-      "components": ["@videojs/core", "@videojs/html", "@videojs/icons", "@videojs/react", "@videojs/utils"]
+      "components": ["@videojs/core", "@videojs/element", "@videojs/html", "@videojs/icons", "@videojs/react", "@videojs/store", "@videojs/utils"]
     }
   ],
   "packages": {
@@ -21,6 +21,11 @@
       "prerelease": true,
       "versioning": "prerelease"
     },
+    "packages/element": {
+      "component": "@videojs/element",
+      "prerelease": true,
+      "versioning": "prerelease"
+    },
     "packages/html": {
       "component": "@videojs/html",
       "prerelease": true,
@@ -36,6 +41,11 @@
       "prerelease": true,
       "versioning": "prerelease"
     },
+    "packages/store": {
+      "component": "@videojs/store",
+      "prerelease": true,
+      "versioning": "prerelease"
+    },
     "packages/utils": {
       "component": "@videojs/utils",
       "prerelease": true,

.github/workflows/cd.yml

@@ -39,16 +39,10 @@ jobs:
         if: ${{ steps.release.outputs.releases_created == 'true' }}
         uses: pnpm/action-setup@v4
 
-      - name: read node version from the .nvmrc file
-        if: ${{ steps.release.outputs.releases_created == 'true' }}
-        run: echo ::set-output name=NODE_VERSION::$(cat .nvmrc)
-        shell: bash
-        id: nvmrc
       - uses: actions/setup-node@v5
         if: ${{ steps.release.outputs.releases_created == 'true' }}
         with:
-          node-version: ${{steps.nvmrc.outputs.NODE_VERSION}}
-          # this line is required for the setup-node action to be able to run the npm publish below.
+          node-version-file: '.nvmrc'
           registry-url: 'https://registry.npmjs.org'
 
       - name: Install
@@ -75,5 +69,3 @@ jobs:
       - name: Publish
         if: ${{ steps.release.outputs.releases_created == 'true' }}
         run: pnpm -r publish --filter "./packages/*" publish --access public --provenance --tag next --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
-          node-version: 22
+          node-version-file: '.nvmrc'
           cache: pnpm
 
       - name: Install dependencies

.nvmrc

@@ -1 +1 @@
-22.19.0
+24.14.0

packages/element/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@videojs/element",
   "type": "module",
-  "version": "0.1.0-alpha.1",
+  "version": "10.0.0-alpha.1",
   "description": "Lightweight reactive custom element base for Video.js",
   "license": "Apache-2.0",
   "main": "dist/default/index.js",

packages/store/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@videojs/store",
   "type": "module",
-  "version": "0.1.0-alpha.1",
+  "version": "10.0.0-alpha.1",
   "description": "Reactive state management for external systems.",
   "license": "Apache-2.0",
   "main": "dist/default/index.js",