ci: use oidc

Author: marklai1998

.github/workflows/release.yml

@@ -5,6 +5,7 @@ on:
       - main
 
 permissions:
+  id-token: write
   contents: write
   pull-requests: write
   issues: write
@@ -30,9 +31,6 @@ jobs:
         with:
           release-type: node
 
-      - run: 'echo "//registry.npmjs.org/:_authToken=${{secrets.NPM_TOKEN}}" > ~/.npmrc'
-        if: ${{ steps.release.outputs.release_created }}
-
       - name: Install dependencies
         run: pnpm i --frozen-lockfile
         if: ${{ steps.release.outputs.release_created }}