ci: fix ci

Author: Groupguanfang

.github/workflows/publish.yml

@@ -18,15 +18,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup Node.js 20.x
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20.x
           registry-url: 'https://registry.npmjs.org'
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -37,15 +35,15 @@ jobs:
       - name: Build
         run: pnpm build
 
-      - name: Configure npm authentication for pnpm
+      - name: Configure npm authentication for pnpm (OIDC)
         run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" >> ~/.npmrc
-          echo "@arkts:registry=https://registry.npmjs.org/" >> ~/.npmrc
-          chmod 600 ~/.npmrc
+          # setup-node 已经创建了 ~/.npmrc，pnpm 需要能够读取它
+          # 确保 @arkts scope 使用正确的 registry
+          if [ -f ~/.npmrc ]; then
+            echo "@arkts:registry=https://registry.npmjs.org/" >> ~/.npmrc
+          fi
           echo "Verifying npm authentication..."
           npm whoami --registry=https://registry.npmjs.org/ || echo "Warning: npm whoami failed"
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
@@ -55,4 +53,3 @@ jobs:
           publish: pnpm changeset publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}