From 64ccde41a67451bbaab202684adf6065bb21f0fb Mon Sep 17 00:00:00 2001
From: hshoff <hi@hshoff.com>
Date: Tue, 11 Nov 2025 12:21:29 -0500
Subject: [PATCH] Remove --provenance flag (automatically generated with OIDC)

---
 scripts/performRelease/performLernaRelease.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/performRelease/performLernaRelease.ts b/scripts/performRelease/performLernaRelease.ts
index 251d34640..d191a52f4 100644
--- a/scripts/performRelease/performLernaRelease.ts
+++ b/scripts/performRelease/performLernaRelease.ts
@@ -45,8 +45,8 @@ export default async function performLernaRelease(prsSinceLastTag: PR[]) {
 
     const { stdout, stderr } = await exec(
       // --no-verify-access is needed because the CI token isn't valid for that endpoint
-      // --provenance generates build attestation when using OIDC in GitHub Actions
-      `npx lerna publish ${version} --exact --yes --dist-tag ${distTag} --provenance`,
+      // provenance is automatically generated when using OIDC Trusted Publishers
+      `npx lerna publish ${version} --exact --yes --dist-tag ${distTag}`,
     );
     if (stdout) {
       console.log('Lerna output', stdout);