ci: sync npm publish workflow

Author: kangschampagne

.github/workflows/publish-npm-package.yml

@@ -6,14 +6,16 @@ jobs:
   build:
     runs-on: ubuntu-latest
     environment: npm
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout 🛎️
-        uses: actions/checkout@v2.3.1
+        uses: actions/checkout@v4
 
-      # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v4
         with:
-          node-version: "16.x"
+          node-version: "24.x"
           registry-url: "https://registry.npmjs.org"
 
       - name: Install 👾
@@ -25,16 +27,24 @@ jobs:
 
       - name: Publish core 🚀
         if: ${{ contains(github.ref, 'juno-core') }}
-        run: npm publish ./packages/juno-core/dist
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          VERSION=$(node -p "require('./packages/juno-core/dist/package.json').version")
+          if [[ "$VERSION" == *-* ]]; then
+            npm publish ./packages/juno-core/dist --provenance --access public --tag next
+          else
+            npm publish ./packages/juno-core/dist --provenance --access public
+          fi
 
       - name: Build icon 📦
         if: ${{ contains(github.ref, 'juno-icon') }}
         run: yarn workspace @ringcentral/juno-icon run release
 
       - name: Publish icon 🚀
         if: ${{ contains(github.ref, 'juno-icon') }}
-        run: npm publish ./packages/juno-icon/dist
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          VERSION=$(node -p "require('./packages/juno-icon/dist/package.json').version")
+          if [[ "$VERSION" == *-* ]]; then
+            npm publish ./packages/juno-icon/dist --provenance --access public --tag next
+          else
+            npm publish ./packages/juno-icon/dist --provenance --access public
+          fi