chore: migrate npm publishing to OIDC

Author: hexqi

.github/workflows/auto-publish.yml

@@ -9,6 +9,10 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: write
+  id-token: write
+
 # 定义工作流中的作业
 jobs:
   build:
@@ -29,7 +33,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v5
         with:
-          node-version: 22 # 使用Node.js 22版本
+          node-version: 24 # 使用Node.js 24版本
           package-manager-cache: false
           registry-url: 'https://registry.npmjs.org' # 设置npm registry地址
 
@@ -89,10 +93,7 @@ jobs:
 
       # 步骤8: 发布组件到NPM
       - name: Publish components
-        run: pnpm lerna publish from-package --pre-dist-tag ${{steps.parse_tag.outputs.dist_tag}} --yes
-        env:
-          # 使用NPM令牌进行身份验证
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_OPENTINY_ROBOT_TOKEN }}
+        run: pnpm lerna publish from-package --pre-dist-tag ${{ steps.parse_tag.outputs.dist_tag }} --yes
 
       # 步骤9: 发布组件到GitHub Release
       - name: Release

lerna.json

@@ -11,5 +11,6 @@
     "npmClient": "pnpm"
   },
   "ignoreChanges": ["**/*.md", "**/test/**", ".npmrc"],
-  "granularPathspec": false
+  "granularPathspec": false,
+  "$schema": "node_modules/lerna/schemas/lerna-schema.json"
 }

package.json

@@ -36,7 +36,7 @@
     "eslint-plugin-vue": "^10.0.0",
     "husky": "^9.1.7",
     "jiti": "^2.4.2",
-    "lerna": "^7.2.0",
+    "lerna": "^9.0.7",
     "lint-staged": "^15.5.0",
     "prettier": "^3.5.3",
     "typescript": "^5.2.2"

packages/cli/package.json

@@ -2,6 +2,13 @@
   "name": "@opentiny/tiny-robot-cli",
   "version": "0.5.0",
   "description": "CLI to scaffold TinyRobot product projects",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/opentiny/tiny-robot.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
   "type": "module",
   "bin": {
     "tiny-robot-cli": "./bin/cli.js"