feat: switch npm publishing to OIDC trusted publishers

.github/workflows/package-publish.yml

@@ -1,26 +1,28 @@
 name: NPM Package Publish
 
-on: 
+on:
   workflow_dispatch:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
-          
+
       - name: Install dependencies
         run: npm ci
-        
+
       - name: Publish to NPM
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npm publish --access public

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onekeyfe/coinselect",
-  "version": "3.1.17",
+  "version": "3.1.18",
   "description": "A transaction input selection module for bitcoin.",
   "keywords": [
     "coinselect",
@@ -16,9 +16,9 @@
     "optimizing",
     "bitcoin"
   ],
-  "homepage": "https://github.com/bitcoinjs/coinselect",
+  "homepage": "https://github.com/OneKeyHQ/coinselect",
   "bugs": {
-    "url": "https://github.com/bitcoinjs/coinselect/issues"
+    "url": "https://github.com/OneKeyHQ/coinselect/issues"
   },
   "license": "MIT",
   "author": "Daniel Cousens",
@@ -37,7 +37,7 @@
   "types": "index.d.ts",
   "repository": {
     "type": "git",
-    "url": "https://github.com/bitcoinjs/coinselect.git"
+    "url": "https://github.com/OneKeyHQ/coinselect.git"
   },
   "scripts": {
     "coverage": "nyc --exclude='third-party/**' --check-coverage --branches 90 --functions 95 tape test/*.js",