fix: add repository fields for OIDC provenance verification #16

	name: Release

	on:
	push:
	branches:
	- main

	concurrency: ${{ github.workflow }}-${{ github.ref }}

	permissions:
	contents: write
	pull-requests: write
	id-token: write # Required for npm provenance

	jobs:
	release:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	registry-url: 'https://registry.npmjs.org'

	- name: Setup pnpm
	uses: pnpm/action-setup@v2
	with:
	version: latest

	- name: Update npm for OIDC support
	run: npm install -g npm@latest

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Build all packages
	run: pnpm build

	- name: Run tests
	run: pnpm test

	- name: Create Release Pull Request or Publish to npm
	id: changesets
	uses: changesets/action@v1
	with:
	publish: pnpm release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback