fix: pnpm provenance support

Author: alexanderniebuhr

.github/workflows/release.yml

@@ -5,6 +5,21 @@ on:
     tags:
       - "v*.*.*"
 
+permissions:
+  actions: write
+  checks: write
+  contents: write
+  deployments: write
+  id-token: write
+  issues: write
+  discussions: write
+  packages: write
+  pages: write
+  pull-requests: write
+  repository-projects: write
+  security-events: write
+  statuses: write
+
 jobs:
   build:
     strategy:
@@ -24,27 +39,14 @@ jobs:
             target: x86_64-pc-windows-msvc
             folder: win32-x64-msvc
     runs-on: ${{ matrix.host }}
-    permissions:
-      actions: write
-      checks: write
-      contents: write
-      deployments: write
-      id-token: write
-      issues: write
-      discussions: write
-      packages: write
-      pages: write
-      pull-requests: write
-      repository-projects: write
-      security-events: write
-      statuses: write
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version-file: .node-version
           cache: "pnpm"
+      - run: npm install -g npm@latest
       - uses: dtolnay/rust-toolchain@stable
         with:
           targets: ${{ matrix.target }}
@@ -61,40 +63,26 @@ jobs:
   publish:
     needs: build
     runs-on: ubuntu-latest
-    permissions:
-      actions: write
-      checks: write
-      contents: write
-      deployments: write
-      id-token: write
-      issues: write
-      discussions: write
-      packages: write
-      pages: write
-      pull-requests: write
-      repository-projects: write
-      security-events: write
-      statuses: write
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           pattern: nodes-*
           merge-multiple: true
       - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version-file: .node-version
           cache: "pnpm"
-          registry-url: https://registry.npmjs.org
-
+      - run: npm install -g npm@latest
       - run: pnpm install
       - run: pnpm napi create-npm-dirs
       - run: pnpm napi artifacts -o .
       - run: node scripts/binaries.mjs
-      - run: pnpm publish --access public --no-git-checks
+      - run: pnpm publish --no-git-checks
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true

package.json

@@ -1,6 +1,10 @@
 {
   "name": "@craftlions/pdfium-rs",
   "version": "0.0.7",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/craftlions/rs"
+  },
   "type": "module",
   "description": "My napi-rs addon",
   "main": "index.js",
@@ -18,7 +22,8 @@
   ],
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "napi": {
     "binaryName": "pdfium",