chore: support npm trust publisher

[xuefei1313]

[中文版模板 / Chinese template]

🤔 This is a ...

• New feature
• Bug fix
• TypeScript definition update
• Bundle size optimization
• Performance optimization
• Enhancement feature
• Refactoring
• Update dependency
• Code style optimization
• Test Case
• Branch merge
• Release
• Site / documentation update
• Demo update
• Workflow
• Other (about what?)

🔗 Related issue link

🔗 Related PR link

🐞 Bugserver case id

💡 Background and solution

📝 Changelog

Language	Changelog
🇺🇸 English
🇨🇳 Chinese

☑️ Self-Check before Merge

⚠️ Please check all items below before requesting a reviewing. ⚠️

• Doc is updated/provided or not needed
• Demo is updated/provided or not needed
• TypeScript definition is updated/provided or not needed
• Changelog is provided or not needed

---

🚀 Summary

copilot:summary

🔍 Walkthrough

copilot:walkthrough

[Copilot]

Pull request overview

This PR implements support for npm trusted publishing via GitHub Actions OIDC and consolidates the release workflow infrastructure. The changes include upgrading vrender dependencies from 1.0.31 to 1.0.32, expanding Node.js support to version 20.x, and merging multiple release workflows into a single unified workflow file.

Key Changes

• Consolidates pre-release.yml and hotfix-release.yml into the main release.yml workflow with conditional flow execution
• Adds npm provenance support by enabling id-token: write permissions and configuring npm registry URL
• Updates all vrender-related dependencies from version 1.0.31 to 1.0.32 across multiple packages
• Extends Node.js version support to include version 20.x and upgrades GitHub Actions to v4

Reviewed changes

Copilot reviewed 14 out of 15 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
.github/workflows/release.yml	Major refactoring: consolidated release, hotfix, and pre-release flows into conditional branches; updated to Node 20.x and actions@v4; added OIDC provenance support
.github/workflows/pre-release.yml	Deleted workflow - functionality moved to release.yml
.github/workflows/hotfix-release.yml	Deleted workflow - functionality moved to release.yml
.github/workflows/sync-main-to-develop.yml	Added --no-verify flag to git push for bypassing hooks
.github/workflows/release-changelog.yml	Added --no-verify flag and [skip ci] to commit messages
.github/workflows/publish.yml	Added --no-verify flag and [skip ci] to commit messages
rush.json	Extended Node.js version support to include 20.x
packages/vchart/package.json	Updated vrender dependencies from 1.0.31 to 1.0.32
packages/vchart/CHANGELOG.json	Updated changelog to reflect vrender 1.0.32 upgrade
packages/vchart-extension/package.json	Updated vrender dependencies from 1.0.31 to 1.0.32
packages/react-vchart/package.json	Updated vrender dependencies from 1.0.31 to 1.0.32
packages/openinula-vchart/package.json	Updated vrender dependencies from 1.0.31 to 1.0.32
docs/package.json	Updated vrender dependencies from 1.0.31 to 1.0.32
tools/story-player/package.json	Updated vrender dependencies from 1.0.31 to 1.0.32
common/config/rush/pnpm-lock.yaml	Lockfile updates reflecting vrender 1.0.32 across all packages

Files not reviewed (1)

• common/config/rush/pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.