ci: fix the release flow through Trusted Publishing

Author: fred-venus

.github/workflows/cd.yaml

@@ -6,6 +6,10 @@ on:
       - main
       - develop
 
+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -19,6 +23,8 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           cache: "yarn"
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
         run: yarn
@@ -27,11 +33,4 @@ jobs:
         run: yarn build
 
       - name: Release
-        env:
-          GITHUB_TOKEN: ${{ secrets.VENUS_TOOLS_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          GIT_AUTHOR_NAME: Venus Tools
-          GIT_AUTHOR_EMAIL: [email protected]
-          GIT_COMMITTER_NAME: Venus Tools
-          GIT_COMMITTER_EMAIL: [email protected]
         run: yarn semantic-release