Use NPM_CONFIG_PROVENANCE envvar instead of arg

Author: dex4er

.github/workflows/release.yaml

@@ -71,9 +71,10 @@ jobs:
             *) dist_tag=latest;;
           esac
           pnpm --color=always publish -r \
-            --provenance \
             --no-git-checks \
             --tag ${dist_tag}
+        env:
+          NPM_CONFIG_PROVENANCE: "true"
         continue-on-error: true
 
       - name: Publish npm packages (retry)
@@ -85,9 +86,10 @@ jobs:
             *) dist_tag=latest;;
           esac
           pnpm --color=always publish -r \
-            --provenance \
             --no-git-checks \
             --tag ${dist_tag}
+        env:
+          NPM_CONFIG_PROVENANCE: "true"
         continue-on-error: true
 
       - name: Publish npm packages (retry 2)
@@ -98,9 +100,10 @@ jobs:
             *) dist_tag=latest;;
           esac
           pnpm --color=always publish -r \
-            --provenance \
             --no-git-checks \
             --tag ${dist_tag}
+        env:
+          NPM_CONFIG_PROVENANCE: "true"
 
       - name: Create release
         uses: softprops/action-gh-release@v2