chore: add --provenance to allow trusted publishing to npm

2026-03-02 14:04:47 +01:00 · 2026-03-02 14:04:47 +01:00 · 4f67cbeb4d
parent 20d7897070
commit 4f67cbeb4d
1 changed files with 1 additions and 1 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@ -46,7 +46,7 @@ jobs:
      - name: Set package version
        run: yarn version --new-version "${{ steps.get_version.outputs.VERSION }}" --no-git-tag-version
      - name: Publish package
-        run: npm publish --access public --tag ${{ steps.extract_tag.outputs.NPM_TAG }}
+        run: npm publish --provenance --access public --tag ${{ steps.extract_tag.outputs.NPM_TAG }}
      - name: Push version bump
        uses: stefanzweifel/git-auto-commit-action@v4
        with: