feat: support corepack and provenance

Author: shigma

.github/actions/setup/action.yml

@@ -24,6 +24,10 @@ runs:
       with:
         node-version: ${{ inputs.node-version }}
 
+    - name: Enable Corepack
+      shell: bash
+      run: corepack enable
+
     - name: Check Yarn Version
       id: yarn-version
       shell: bash

.github/workflows/publish.yml

@@ -14,7 +14,7 @@ on:
         required: false
     secrets:
       NPM_TOKEN:
-        required: true
+        required: false
         description: 'NPM token'
 
 jobs:
@@ -33,8 +33,16 @@ jobs:
       - name: Build
         run: yarn build
 
+      - name: Set Publish Config
+        id: set-token
+        if: '!secrets.NPM_TOKEN'
+        run: |
+          yarn config set npmPublishProvenance true
+          yarn config set npmRegistryServer https://registry.npmjs.org/
+
       - name: Set NPM Token
         id: set-token
+        if: secrets.NPM_TOKEN
         # Solution for NPM (as well as Yarn v1)
         run: |
           # Create a temporary directory for putting the .npmrc file