fix: use npm publish in CI for scoped package auth

.github/workflows/publish.yml

@@ -7,6 +7,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     name: Publish to NPM
@@ -19,6 +22,12 @@ jobs:
       - name: Set up Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
 
+      - name: Set up Node for npm publish
+        uses: actions/setup-node@499817a2b6e7a2fbd6490d5d6b1c9634a3c6613 # v4.4.0
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
@@ -35,12 +44,12 @@ jobs:
           if echo "$VERSION" | grep -q "-"; then
             TAG=$(echo "$VERSION" | sed 's/.*-\([a-zA-Z]*\).*/\1/')
             echo "Publishing @runwayml/avatars prerelease with --tag $TAG"
-            bun publish --access public --tag "$TAG"
+            npm publish --access public --tag "$TAG"
           else
-            bun publish --access public
+            npm publish --access public
           fi
         env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Publish react
         working-directory: packages/react
@@ -49,9 +58,9 @@ jobs:
           if echo "$VERSION" | grep -q "-"; then
             TAG=$(echo "$VERSION" | sed 's/.*-\([a-zA-Z]*\).*/\1/')
             echo "Publishing @runwayml/avatars-react prerelease with --tag $TAG"
-            bun publish --access public --tag "$TAG"
+            npm publish --access public --tag "$TAG"
           else
-            bun publish --access public
+            npm publish --access public
           fi
         env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

packages/core/package.json

@@ -57,6 +57,9 @@
   ],
   "author": "RunwayML",
   "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
   "dependencies": {
     "livekit-client": "^2.18.2"
   }

packages/react/package.json

@@ -64,6 +64,9 @@
   ],
   "author": "RunwayML",
   "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
   "peerDependencies": {
     "react": ">=18",
     "react-dom": ">=18"