Merge pull request #16 from inversify/chore/fix-publish-action

Fix publish action

.github/workflows/publish.yaml

@@ -6,7 +6,12 @@ on:
   workflow_dispatch:
     secrets:
       NPM_TOKEN:
-        required: false
+        required: true
+permissions:
+  actions: read
+  contents: write
+  issues: write
+  pull-requests: write
 jobs:
   publish:
     name: Bump package versions and publish to npm.
@@ -20,18 +25,12 @@ jobs:
 
       - uses: ./.github/actions/setup
 
-      - id: create_token
-        uses: tibdex/github-app-token@v2
-        with:
-          app_id: ${{ vars.GH_APP_ID }}
-          private_key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Create Release Pull or publish changes
         uses: changesets/action@v1
         with:
           commit: "chore: bump package versions"
           publish: pnpm run release
           title: "[Changesets] Bump package versions"
         env:
-          GITHUB_TOKEN: ${{ steps.create_token.outputs.token }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}