ci: modernize release pipeline + bump to 0.1.5

.github/workflows/release.yml

@@ -30,12 +30,17 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     needs: smoketest
     runs-on: ubuntu-latest
+    permissions:
+      contents: write   # create the GitHub release
+      id-token: write   # OIDC for npm trusted publishing
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-node@v5
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org
+      - name: Upgrade npm for trusted publishing
+        run: npm install -g npm@latest
       - run: npm ci
       - run: npm run build
 
@@ -49,6 +54,4 @@ jobs:
           files: "*.tgz"
 
       - name: Publish to npm
-        run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --provenance

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobbin/cli",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Agent-first terminal recording",
   "type": "module",
   "bin": {

src/cli.ts

@@ -19,7 +19,7 @@ process.on("unhandledRejection", (err) => {
 program
   .name("bobbin")
   .description("Agent-first terminal recording")
-  .version("0.1.4", "-v, --version")
+  .version("0.1.5", "-v, --version")
 
 program
   .command("rec")