Publish the package using npm provenance (#18)

elchininet · Dec 19, 2023 · 661ac4c · 661ac4c
1 parent 146c3df
commit 661ac4c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -8,6 +8,8 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     container:
       image: cypress/browsers
     steps:
@@ -28,7 +30,7 @@ jobs:
       - name: Publish
         run: |
           yarn install --frozen-lockfile
-          npm publish
+          npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build Changelog

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## [4.1.1] - 2023-12-19
+
+- Publish the package using npm provenance
+
 ## [4.1.0] - 2023-12-16
 
 - Refactor the whole library to reduce repetitive and unnecessary code