ci(workflows): remove private package registry config for @dependabot

- the required `.npmrc` file clashes with `.npmrc` files created in `publish` workflow - private registry is not required, so a more verbose workaround is not required either Signed-off-by: Lexus Drumgold <unicornware@flexdevelopment.llc>

Author: unicornware

.github/dependabot.yml

@@ -6,12 +6,6 @@
 
 ---
 version: 2
-registries:
- github:
- replaces-base: true
- token: ${{ secrets.GH_TOKEN }}
- type: npm-registry
- url: https://npm.pkg.github.com/flex-development
 updates:
  - package-ecosystem: github-actions
  commit-message:
@@ -40,8 +34,6 @@ updates:
  labels:
  - scope:dependencies
  - type:build
- registries:
- - github
  reviewers:
  - flex-development/dependabot-review
  - flexdevelopment

.github/workflows/publish.yml

@@ -55,14 +55,14 @@ jobs:
  target: ${{ steps.version.outputs.result }}
  gpr:
  needs: metadata
+ permissions:
+ packages: write
  runs-on: ubuntu-latest
  environment:
  name: gpr
  url: |
  ${{ format('{0}/{1}/pkgs/npm/{2}', github.server_url, github.repository,
  github.event.repository.name) }}
- env:
- GITHUB_TOKEN: ${{ secrets.PAT_REPO }}
  steps:
  - id: checkout
  name: Checkout ${{ env.TAG }}
@@ -81,7 +81,7 @@ jobs:
  name: Publish package
  run: npm publish $ARTIFACT ${{ needs.metadata.outputs.dist-tag }}
  env:
- NODE_AUTH_TOKEN: ${{ env.GITHUB_TOKEN }}
+ NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  npm:
  needs: [metadata, gpr]
  runs-on: ubuntu-latest