ci: add an action for trusted publisher

.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: release
+
+on:
+  push:
+    tags:
+      - '*'
+
+permissions:
+  contents: read
+
+jobs:
+  npm:
+    name: publish-to-npm
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+        with:
+          node-version: 24.x
+          registry-url: 'https://registry.npmjs.org'
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
+      - run: bun install
+      - run: bun run build
+      - name: Publish to npm
+        run: npm publish --tag latest-1

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hono/node-server",
-  "version": "1.19.14",
+  "version": "1.19.15",
   "description": "Node.js Adapter for Hono",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -59,7 +59,7 @@
     "watch": "tsup --watch",
     "postbuild": "publint",
     "prerelease": "bun run build && bun run test",
-    "release": "np",
+    "release": "np --no-publish --branch v1.x",
     "lint": "eslint src test",
     "lint:fix": "eslint src test --fix",
     "format": "prettier --check \"src/**/*.{js,ts}\" \"test/**/*.{js,ts}\"",

test/serve-static.test.ts

@@ -437,7 +437,6 @@ describe('Serve Static Middleware with wrong path', () => {
         root: './public',
       })
     )
-
     expect(logSpy).toHaveBeenCalledWith(
       // eslint-disable-next-line quotes
       "serveStatic: root path './public' is not found, are you sure it's correct?"