Test release and fix provenance (#2791)

* Test release and fix provenance

* added changeset

Author: dotansimha

.changeset/eighty-crews-burn.md

@@ -0,0 +1,5 @@
+---
+'graphql-scalars': patch
+---
+
+Enable npm provenance

.github/workflows/pr.yml

@@ -6,13 +6,13 @@ on:
       - master
 
 jobs:
-  dependencies:
-    uses: the-guild-org/shared-config/.github/workflows/changesets-dependencies.yaml@main
-    secrets:
-      githubToken: ${{ secrets.GITHUB_TOKEN }}
-
   canary:
     uses: the-guild-org/shared-config/.github/workflows/release-snapshot.yml@main
+    permissions:
+      contents: write
+      id-token: write
+      actions: write
+      pull-requests: write
     with:
       npmTag: alpha
       buildScript: build

.github/workflows/release.yml

@@ -8,6 +8,11 @@ on:
 jobs:
   stable:
     uses: the-guild-org/shared-config/.github/workflows/release-stable.yml@main
+    permissions:
+      contents: write
+      id-token: write
+      actions: write
+      pull-requests: write
     with:
       releaseScript: release
       nodeVersion: 22

package.json

@@ -90,7 +90,8 @@
   },
   "publishConfig": {
     "directory": "dist",
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "sideEffects": false,
   "lint-staged": {