fix: CI perms

.github/workflows/build-and-publish.yml

@@ -16,7 +16,10 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
+    permissions:
+      contents: read
+      id-token: write # The OIDC ID token is used for authentication with JSR
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4

.github/workflows/lint-and-analyze.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
 
     steps:
       - uses: actions/checkout@v4