ci: use trusted publisher

sxzz · sxzz · commit 3d7dcc161224 · 2025-08-19T23:53:06.000+08:00
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -40,6 +40,4 @@ jobs:
         run: npm i -g npm@10.2.4
 
       - name: Publish package
-        run: pnpm run ci-publish ${{ github.ref_name }}
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm i -g npm@^11.5.2 && pnpm run ci-publish ${{ github.ref_name }}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/scripts/publishCI.ts b/scripts/publishCI.ts
@@ -2,6 +2,5 @@ import { publish } from '@vitejs/release-scripts'
 
 publish({
   defaultPackage: 'plugin-vue',
-  provenance: true,
   packageManager: 'pnpm',
 })
