sync

Added permission for id-token and removed npm auth commands.

Author: fwang

.github/workflows/build.yml

@@ -9,6 +9,7 @@ on:
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
 permissions:
+  id-token: write
   contents: write
   packages: write
 
@@ -23,12 +24,6 @@ jobs:
         with:
           bun-version: latest
 
-      - run: |
-          npm config set //registry.npmjs.org/:_authToken $NODE_AUTH_TOKEN
-          npm whoami
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
       - run: git fetch --force --tags
 
       - uses: actions/setup-go@v5
@@ -48,3 +43,5 @@ jobs:
           distribution: goreleaser
           version: latest
           args: build --snapshot --clean
+        env:
+          NPM_CONFIG_PROVENANCE: false