fix: enable provenance signing during publish

mikehardy · mikehardy · commit 4535f0d5756c · 2025-04-24T20:50:08.000-05:00
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -12,6 +12,8 @@ jobs:
     name: 'NPM'
     timeout-minutes: 30
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # to enable use of OIDC for npm provenance
     steps:
       - uses: actions/checkout@v4
         with:
diff --git a/packages/analytics/package.json b/packages/analytics/package.json
@@ -25,7 +25,8 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "dependencies": {
     "superstruct": "^2.0.2"
diff --git a/packages/app-check/package.json b/packages/app-check/package.json
@@ -37,6 +37,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/app-distribution/package.json b/packages/app-distribution/package.json
@@ -36,6 +36,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/app/package.json b/packages/app/package.json
@@ -69,7 +69,8 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "sdkVersions": {
     "ios": {
diff --git a/packages/auth/package.json b/packages/auth/package.json
@@ -40,6 +40,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/crashlytics/package.json b/packages/crashlytics/package.json
@@ -44,6 +44,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/database/package.json b/packages/database/package.json
@@ -28,6 +28,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/dynamic-links/package.json b/packages/dynamic-links/package.json
@@ -37,6 +37,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/firestore/package.json b/packages/firestore/package.json
@@ -30,6 +30,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/functions/package.json b/packages/functions/package.json
@@ -30,6 +30,7 @@
     "@react-native-firebase/private-tests-firebase-functions": "^0.0.1"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/in-app-messaging/package.json b/packages/in-app-messaging/package.json
@@ -31,6 +31,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/installations/package.json b/packages/installations/package.json
@@ -25,6 +25,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/messaging/package.json b/packages/messaging/package.json
@@ -36,6 +36,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/ml/package.json b/packages/ml/package.json
@@ -29,6 +29,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/perf/package.json b/packages/perf/package.json
@@ -41,6 +41,7 @@
     }
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/remote-config/package.json b/packages/remote-config/package.json
@@ -28,6 +28,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/storage/package.json b/packages/storage/package.json
@@ -32,6 +32,7 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }
diff --git a/packages/vertexai/package.json b/packages/vertexai/package.json
@@ -28,7 +28,8 @@
     "@react-native-firebase/app": "21.14.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "devDependencies": {
     "@types/text-encoding": "^0",
diff --git a/scripts/_TEMPLATE_/package.json b/scripts/_TEMPLATE_/package.json
@@ -25,6 +25,7 @@
     "@react-native-firebase/app": "_VERSION_"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -37,6 +37,7 @@`
`37`	`37`	`}`
`38`	`38`	`},`
`39`	`39`	`"publishConfig": {`
`40`		`- "access": "public"`
	`40`	`+ "access": "public",`
	`41`	`+ "provenance": true`
`41`	`42`	`}`
`42`	`43`	`}`
Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,7 @@`
`36`	`36`	`}`
`37`	`37`	`},`
`38`	`38`	`"publishConfig": {`
`39`		`- "access": "public"`
	`39`	`+ "access": "public",`
	`40`	`+ "provenance": true`
`40`	`41`	`}`
`41`	`42`	`}`
Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,7 @@`
`40`	`40`	`}`
`41`	`41`	`},`
`42`	`42`	`"publishConfig": {`
`43`		`- "access": "public"`
	`43`	`+ "access": "public",`
	`44`	`+ "provenance": true`
`44`	`45`	`}`
`45`	`46`	`}`
Original file line number	Diff line number	Diff line change
`@@ -44,6 +44,7 @@`
`44`	`44`	`}`
`45`	`45`	`},`
`46`	`46`	`"publishConfig": {`
`47`		`- "access": "public"`
	`47`	`+ "access": "public",`
	`48`	`+ "provenance": true`
`48`	`49`	`}`
`49`	`50`	`}`
Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,7 @@`
`28`	`28`	`"@react-native-firebase/app": "21.14.0"`
`29`	`29`	`},`
`30`	`30`	`"publishConfig": {`
`31`		`- "access": "public"`
	`31`	`+ "access": "public",`
	`32`	`+ "provenance": true`
`32`	`33`	`}`
`33`	`34`	`}`
Original file line number	Diff line number	Diff line change
`@@ -30,6 +30,7 @@`
`30`	`30`	`"@react-native-firebase/app": "21.14.0"`
`31`	`31`	`},`
`32`	`32`	`"publishConfig": {`
`33`		`- "access": "public"`
	`33`	`+ "access": "public",`
	`34`	`+ "provenance": true`
`34`	`35`	`}`
`35`	`36`	`}`