ci: adjust release pipeline

.github/workflows/release.yaml

@@ -5,19 +5,14 @@ on:
       - main
   repository_dispatch:
     types: [semantic-release]
-
 permissions:
-  contents: read # for checkout
-
+  contents: write # to be able to publish a GitHub release
+  issues: write # to be able to comment on released issues
+  pull-requests: write # to be able to comment on released pull requests
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
-    permissions:
-      contents: write # to be able to publish a GitHub release
-      issues: write # to be able to comment on released issues
-      pull-requests: write # to be able to comment on released pull requests
-      id-token: write # to enable use of OIDC for npm provenance
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -27,8 +22,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: "lts/*"
+      - name: Install dependencies
+        run: npm install
       - name: Release
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npx semantic-release --ci
+        run: npm run release

package.json

@@ -1,16 +1,14 @@
 {
   "scripts": {
-    "release-dry-run": "semantic-release --dry-run",
+    "release-dry-run": "semantic-release --no-ci --dry-run",
     "release": "semantic-release"
   },
   "devDependencies": {
     "semantic-release": "^24.1.2",
     "semantic-release-replace-plugin": "^1.2.7"
   },
   "release": {
-    "branches": [
-      "main"
-    ],
+    "branches": ["main"],
     "plugins": [
       "@semantic-release/commit-analyzer",
       [