fix: disable NPM_CONFIG_PROVENANCE

Author: fengmk2

.github/workflows/node-release.yml

@@ -35,7 +35,7 @@ jobs:
   Release:
     permissions:
       contents: write
-      id-token: write
+      # id-token: write
       deployments: write
     runs-on: ubuntu-latest
     defaults:
@@ -87,7 +87,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           DRYRUN: ${{ inputs.dryRun }}
-          NPM_CONFIG_PROVENANCE: true
+          # NPM_CONFIG_PROVENANCE: true
 
       - name: Publish ${{ steps.release.outputs.name }}@${{ steps.release.outputs.release_version }}
         if: steps.release.outputs.release_version && !inputs.dryRun