fix: release workflow

.github/workflows/release.yml

@@ -15,10 +15,8 @@ jobs:
 
   release:
     name: Release
-    permissions:
-      contents: write
-      id-token: write
-      pull-requests: write
+    needs: verify
+    permissions: write-all
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
@@ -29,22 +27,28 @@ jobs:
       - name: Install dependencies
         uses: ./.github/actions/install-deps
 
+      - name: 🏗 Setup Node
+        uses: actions/setup-node@v3
+        with:
+          registry-url: 'https://npm.pkg.github.com'
+
       - name: Create Release Pull Request
         uses: changesets/action@v1
         with:
           publish: pnpm release
           createGithubReleases: ${{ github.ref == 'refs/heads/main' }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Publish prerelease
         if: steps.changesets.outputs.published != 'true'
         continue-on-error: true
         env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          npm config set "//registry.npmjs.org/:_authToken" "$NPM_TOKEN"
+          npm config set "//registry.npmjs.org/:_authToken" "$NODE_AUTH_TOKEN"
           git reset --hard origin/main
           pnpm clean
           pnpm changeset version --no-git-tag --snapshot canary

packages/core-web/package.json

@@ -27,6 +27,7 @@
     "typescript": "^5.2.2"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "registry": "https://npm.pkg.github.com"
   }
 }