fix: github action with new mpmjs auth policy

Author: phoebus-84

.github/workflows/node.js.yml

@@ -13,9 +13,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}
   cancel-in-progress: true
 
-permissions:
-  id-token: write
-
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -64,6 +61,9 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master'
     needs: build
+    permissions:
+      contents: write
+      id-token: write 
     steps:
     - uses: actions/checkout@v4
       with:
@@ -78,12 +78,9 @@ jobs:
     - run: yarn build
     - run: git update-index --assume-unchanged package.json
     - name: Install lerna globally
-      run: npm install --global --loglevel=error lerna@6.6.1
+      run: npm install --global --loglevel=error lerna@latest
     - name: Authenticate with Registry and publish
       run: |
-          yarn logout
-          echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" > .npmrc
-          npm whoami
-          lerna publish --no-verify-access -c -y --pre-dist-tag next --preid $(git rev-parse --short HEAD) --force-publish=*
-      env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          # No manual .npmrc creation or 'npm whoami' needed.
+          # Lerna v9+ automatically detects the OIDC environment.
+          lerna publish --no-verify-access -c -y --pre-dist-tag next --preid $(git rev-parse --short HEAD) --force-publish=*