chore: enable publishing with provenance

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

.github/workflows/release.yml

@@ -95,10 +95,10 @@ jobs:
           NPMJS_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: publish to NPMJS as "latest"
         if: ${{ github.event.inputs.prerelease != 'true' }}
-        run: npm publish --access public --tag 'latest'
+        run: npm publish --provenance --access public --tag 'latest'
       - name: publish to NPMJS as "unstable-prerelease"
         if: ${{ github.event.inputs.prerelease == 'true' }}
-        run: npm publish --access public --tag 'unstable-prerelease'
+        run: npm publish --provenance --access public --tag 'unstable-prerelease'
   release-GH:
     needs:
       - "bump"