fix: 修复release创建失败的问题 (#20)

- 合并 code-quality、dependency-check 和 build-test 为单个工作流
- 添加安全检查步骤
- 移除单独的 PR Check 工作流
- 更新 CI 工作流触发条件，支持 push 和 pull_request
- 在 .release-please-config.json 中添加 skip-github-release 配置项

Author: sunerpy

.github/workflows/ci.yml

@@ -3,21 +3,44 @@ name: CI
 on:
   pull_request:
     branches: [main, master]
-  push:
-    branches: [main, master]
 
 jobs:
   code-quality:
     name: Code Quality
     uses: ./.github/workflows/code-quality.yml
 
-  test:
-    name: Test
+  build-test:
+    name: Build Test
     uses: ./.github/workflows/build-test.yml
     with:
       test_matrix: '["ubuntu-latest", "windows-latest", "macos-latest"]'
     secrets: inherit
 
+  dependency-check:
+    name: Dependency Check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js and pnpm
+        uses: ./.github/actions/setup-node-pnpm
+
+      - name: Check for outdated dependencies
+        run: |
+          echo "📦 Checking for outdated dependencies..."
+          pnpm outdated || echo "✅ All dependencies are up to date"
+
+      - name: Check for unused dependencies
+        run: |
+          echo "🔍 Checking for unused dependencies..."
+          npx depcheck || echo "⚠️  Some dependencies might be unused"
+
+      - name: Security audit
+        run: |
+          echo "🔒 Running security audit..."
+          pnpm audit --audit-level moderate || echo "⚠️  Security vulnerabilities found"
+
   security:
     name: Security Check
     runs-on: ubuntu-latest

.github/workflows/pr-check.yml

@@ -9,6 +9,7 @@
       "bump-minor-pre-major": false,
       "bump-patch-for-minor-pre-major": false,
       "draft": false,
+      "skip-github-release": true,
       "changelog-types": [
         {
           "type": "feat",