chore: update publish yml

Author: ctkm-aelf

.github/workflows/publish.yml

@@ -11,22 +11,31 @@ jobs:
     permissions:
       id-token: write # Required for trusted publishing
       contents: read # Required for checking out the repository
-    
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: "20"
+
+      - name: Verify npm version and configure for Trusted Publishers
+        run: |
+          npm --version
+          npm config set registry https://registry.npmjs.org/
+          # Ensure no token-based auth is used
+          npm config delete //registry.npmjs.org/:_authToken || true
+          npm config delete //registry.npmjs.org/:always-auth || true
+          # Verify no auth tokens are set
+          npm config list | grep auth || echo "No auth tokens found (good for Trusted Publishers)"
 
       - name: Install dependencies
         run: npm ci
 
       - name: Build package
         run: npm run build:lib
 
-      - name: Publish to npm
+      - name: Publish to npm using Trusted Publisher
         run: npm publish --provenance --access public