feat: support no provenance

Author: fengmk2

.github/workflows/node-release-no-provenance.yml

@@ -0,0 +1,96 @@
+name: Node.js Release
+
+on:
+  workflow_call:
+    secrets:
+      NPM_TOKEN:
+        description: 'npm token'
+        required: true
+      GIT_TOKEN:
+        description: 'github personal token'
+        required: true
+
+    inputs:
+      checkTest:
+        type: boolean
+        description: whether run test before release
+        default: false
+
+      dryRun:
+        type: boolean
+        description: pass dry-run to semantic-release
+        default: false
+
+      install:
+        type: string
+        description: 'Install dependencies script'
+        default: 'npm i --no-package-lock --no-fund'
+
+      action_ref:
+        type: string
+        description: 'Branch name for node-modules/github-actions, for test purpose'
+        default: master
+
+jobs:
+  Release:
+    permissions:
+      contents: write
+      deployments: write
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: main_repo
+
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+
+    steps:
+      # Checkout action repository
+      - name: Checkout action repository
+        uses: actions/checkout@v4
+        with:
+          repository: node-modules/github-actions
+          path: action_repo
+          ref: ${{ inputs.action_ref }}
+
+      # Checkout project repository
+      - name: Checkout project repository
+        uses: actions/checkout@v4
+        with:
+          path: main_repo
+          token: ${{ secrets.GIT_TOKEN }}
+
+      # Setup Node.js environment
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+
+      # Install action dependencies
+      - name: Install action dependencies
+        run: npm i --no-package-lock --no-fund --omit=dev
+        working-directory: action_repo/scripts/release
+
+      # Install dependencies
+      - name: Install dependencies
+        run: ${{ inputs.install }}
+
+      # Run Test Only
+      - name: Run Test
+        run: npm test
+        if: inputs.checkTest
+
+      - name: Semantic Release
+        id: release
+        run: node ../action_repo/scripts/release/index.js
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          DRYRUN: ${{ inputs.dryRun }}
+
+      - name: Publish ${{ steps.release.outputs.name }}@${{ steps.release.outputs.release_version }}
+        if: steps.release.outputs.release_version && !inputs.dryRun
+        run: |
+          echo ${{ steps.release.outputs.name }}
+          echo ${{ steps.release.outputs.release_version }}
+          echo ${{ steps.release.outputs.registry }}
+          echo ${{ steps.release.outputs.cnpm_sync_url }}