ci: trusted publisher

Author: sxzz

.github/workflows/release.yml

@@ -1,9 +1,5 @@
 name: Release
 
-permissions:
-  contents: write
-  id-token: write
-
 on:
   push:
     tags:
@@ -12,13 +8,18 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      id-token: write
+
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v3.0.0
+        uses: pnpm/action-setup@v4.1.0
 
       - name: Setup node
         uses: actions/setup-node@v4
@@ -33,13 +34,10 @@ jobs:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
       - name: Install deps
-        run: pnpm i --frozen-lockfile
+        run: pnpm i
 
       - name: Build
         run: pnpm run build
 
       - name: Publish
         run: pnpm publish -r --access public --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_PUBLISH_TOKEN}}
-          NPM_CONFIG_PROVENANCE: true