ci: use trusted publisher (#873)

Co-authored-by: 翠 <[email protected]>

Author: hi-ogawa

.github/workflows/publish.yml

@@ -50,9 +50,7 @@ jobs:
         run: pnpm build
 
       - name: Publish package
-        run: pnpm run ci-publish ${{ github.ref_name }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm i -g npm@^11.5.2 && pnpm run ci-publish ${{ github.ref_name }}
 
       - if: steps.tag.outputs.isAlpha == 'false' && steps.tag.outputs.pkgName != 'plugin-rsc'
         uses: ArnaudBarre/github-release@4fa6eafe8e2449c7c1c5a91ae50de4ee34db0b40 # v1.5.0

scripts/publishCI.ts

@@ -1,7 +1,6 @@
 import { publish } from '@vitejs/release-scripts'
 
 publish({
-  provenance: true,
   getPkgDir(pkg) {
     if (pkg === 'plugin-react-swc') {
       return `packages/${pkg}/dist`