Update FinCLI 1.8.4

Author: Suryadharmaa

.github/workflows/publish.yml

@@ -1,78 +1,32 @@
-name: Publish
+name: Publish to npm
 
 on:
-  push:
-    tags:
-      - 'v*'
+  release:
+    types: [published] # Berjalan otomatis saat Anda membuat Release baru di GitHub
+  # Atau jika ingin dijalankan manual lewat tab Actions:
+  workflow_dispatch: 
 
 jobs:
-  test:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        os: [ubuntu-latest, windows-latest, macos-latest]
-        python-version: ["3.11", "3.12"]
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
-        with:
-          python-version: ${{ matrix.python-version }}
-
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          python -m pip install -e ".[dev]"
-
-      - name: Compile check
-        run: python -m compileall fincli -q
-
-      - name: Run tests
-        run: pytest -q
-
-      - name: Prepublish scan
-        run: python scripts/prepublish_check.py --skip-pack
-
-  publish-npm:
-    needs: test
+  publish:
     runs-on: ubuntu-latest
+    # PENTING: Permission ini wajib ada untuk menggunakan OIDC Trusted Publisher
+    permissions:
+      contents: read
+      id-token: write 
+      
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
-      - name: Set up Node.js
+      - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
-          registry-url: "https://registry.npmjs.org"
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
 
-      - name: npm pack dry-run
-        run: npm pack --dry-run
+      - name: Install dependencies
+        run: npm ci
 
+      # Langkah publish menggunakan OIDC (tanpa token)
       - name: Publish to npm
-        run: npm publish --access=public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-  publish-pypi:
-    needs: test
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.12"
-
-      - name: Install build tools
-        run: python -m pip install --upgrade pip build twine
-
-      - name: Build package
-        run: python -m build
-
-      - name: Publish to PyPI
-        run: python -m twine upload dist/*
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
+        run: npm publish --provenance