Add provenance to all shipit files

Author: amcaplan

shipit.experimental.yml

@@ -24,4 +24,4 @@ deploy:
     - bash -i -c "npm_config_loglevel=verbose pnpm changeset-build-no-docs"
     - bash -i -c "npm_config_loglevel=verbose NODE_ENV=production pnpm bundle"
     - bash -i -c "npm_config_loglevel=verbose node bin/create-cli-duplicate-package.js"
-    - bash -i -c "npm_config_loglevel=verbose pnpm changeset publish --tag experimental"
+    - bash -i -c "npm_config_loglevel=verbose NPM_CONFIG_PROVENANCE=true pnpm changeset publish --tag experimental"

shipit.nightly.yml

@@ -24,5 +24,5 @@ deploy:
     - bash -i -c "npm_config_loglevel=verbose pnpm changeset-manifests"
     - bash -i -c "npm_config_loglevel=verbose NODE_ENV=production pnpm bundle-for-release"
     - bash -i -c "npm_config_loglevel=verbose node bin/create-cli-duplicate-package.js"
-    - bash -i -c "npm_config_loglevel=verbose pnpm changeset publish --tag nightly"
+    - bash -i -c "npm_config_loglevel=verbose NPM_CONFIG_PROVENANCE=true pnpm changeset publish --tag nightly"
     - bash -i -c "./bin/package.js"

shipit.production.yml

@@ -14,6 +14,6 @@ deploy:
     - bash -i -c "npm_config_loglevel=verbose pnpm clean"
     - bash -i -c "npm_config_loglevel=verbose NODE_ENV=production pnpm bundle-for-release"
     - bash -i -c "npm_config_loglevel=verbose node bin/create-cli-duplicate-package.js"
-    - bash -i -c "npm_config_loglevel=verbose pnpm changeset publish"
+    - bash -i -c "npm_config_loglevel=verbose NPM_CONFIG_PROVENANCE=true pnpm changeset publish"
     - bash -i -c "./bin/package.js"
     - bash -i -c "./bin/create-doc-pr.js"

shipit.stable.yml.sample

@@ -14,7 +14,7 @@ deploy:
     - bash -i -c "npm_config_loglevel=verbose pnpm clean"
     - bash -i -c "npm_config_loglevel=verbose NODE_ENV=production pnpm bundle-for-release"
     - bash -i -c "npm_config_loglevel=verbose node bin/create-cli-duplicate-package.js"
-    - bash -i -c "npm_config_loglevel=verbose pnpm changeset publish"
+    - bash -i -c "npm_config_loglevel=verbose NPM_CONFIG_PROVENANCE=true pnpm changeset publish"
     # When this is no longer the latest stable version, do 2 things:
     # 1. Replace the previous line with this, replacing 3.x with the actual version:
     #    - bash -i -c "npm_config_loglevel=verbose pnpm changeset publish --tag stable-3.x"