Merge pull request #1684 from no23reason/provenance

feat: publish with provenance

Author: no23reason

.github/workflows/release.yml

@@ -7,6 +7,11 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -15,7 +20,7 @@ jobs:
         with:
           node-version-file: .nvmrc
       - name: Install dependencies
-        run: npm install
+        run: npm clean-install
       - name: Build
         run: npm run dist
       - name: Release

package.json

@@ -23,6 +23,9 @@
     "main": "dist-modules",
     "typings": "./dist-modules/index.d.ts",
     "sideEffects": false,
+    "publishConfig": {
+        "provenance": true
+    },
     "scripts": {
         "dist": "rimraf ./dist-modules && tsc -p .",
         "prepublishOnly": "npm run dist",