chore(cicd): remove GH_TOKEN and add permissions (#487)

* no token needed

* ???

* update dist

* dist

Author: Lou1415926

.github/workflows/package.yml

@@ -10,7 +10,6 @@ jobs:
     name: Package distribution file
     runs-on: ubuntu-latest
     permissions:
-      # pull-requests: read
       contents: write
     steps:
       - name: Init a git repo
@@ -25,8 +24,7 @@ jobs:
           npm test
           npm run package
       - name: Commit to PR
-        # if: github.actor == 'dependabot[bot]'
-        if: github.event.commits[0].author.name != 'GitHub Actions'
+        if: github.actor == 'dependabot[bot]'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
@@ -36,7 +34,5 @@ jobs:
           git push 
       - name: Check git diff
         if: github.actor != 'dependabot[bot]'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git diff --exit-code dist/index.js