Update JS-DevTools/npm-publish action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JS-DevTools/npm-publish	action	major	v2 → v4

---

Release Notes

JS-DevTools/npm-publish (JS-DevTools/npm-publish)

v4.1.5

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.5

Bug fixes

• deps: bump the production group with 2 updates (#​261) (3c4834c)

v4.1.4

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.4

Bug fixes

• deps: bump tar from 7.5.2 to 7.5.3 (#​260) (57836fb)

v4.1.3

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.3

Bug fixes

• add sourcemap back to tracking (#​259) (d2fef91)

v4.1.2

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.2

Bug fixes

• deps: bump the production group with 3 updates (#​252) (43babc0)

v4.1.1

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.1

Bug fixes

• bump tar from 7.4.3 to 7.5.1 (#​249) (99ef290)

v4.1.0

Compare Source

- uses: JS-DevTools/npm-publish@v4.1.0

Features

• allow token to be optional for OIDC-based publish (#​247) (612922f), closes #​242

v4.1

Compare Source

v4.0.1

Compare Source

- uses: JS-DevTools/npm-publish@v4.0.1
  with:
    token: ${{ secrets.NPM_TOKEN }}

Bug fixes

• do not suppress E409 from npm publish (#​246) (c13368d), closes #​245

v4.0.0

Compare Source

The v4 release updates the action runtime to Node 24, but there have been no usage changes to the action.

Immutable releases have been enabled for this repository. As a security practice, we recommend pinning to an exact release:

- uses: JS-DevTools/npm-publish@v4.0.0
  with:
    token: ${{ secrets.NPM_TOKEN }}

⚠ BREAKING CHANGES

• The action now runs on Node 24 with npm 11
• The library and CLI now require Node >= 20, Node 16 and 18 are no longer supported
• The library is now ESM only

Features

• update action runtime to Node 24 (#​231) (0b36106)

Bug Fixes

• deps: bump the production group across 1 directory with 5 updates (#​238) (314ae61)
• deps: update tar and semver dependencies (#​194) (cd26c94)
• update dry-run and publish conflict logic for npm>=10 (#​232) (62716ea)
• windows: allow spawning npm cli on windows (#​199) (f45e793), closes #​198

Code Refactoring

• switch module format to ESM (#​234) (e081941)

v4.0

Compare Source

v4

Compare Source

v3.1.1

Compare Source

Bug fixes

• include registry URL pathname in npm config (#​186)

v3.1.0

Compare Source

Features

• dry-run: always print publish results in dry run (#​185), closes #​184

Performance Improvements

• action: decrease bundle size (#​166)

v3.1

Compare Source

v3.0.1

Compare Source

Bug fixes

• errors: improve message when version validation fails (#​161), closes #​160

v3.0.0

Compare Source

The v3 release updates the action's runtime to Node.js v20, but otherwise, there are no public API changes.

BREAKING CHANGES

• The action will now run on Node.js v20 instead of v16

Bug fixes

• action: update runtime to Node.js v20 (#​150)

v3.0

Compare Source

v3

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 3am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.