👷 Add Provenance to npm Release

Signed-off-by: Pascal Marco Caversaccio <pascal.caversaccio@hotmail.ch>

Author: pcaversaccio

.github/workflows/publish-npm.yml

@@ -8,6 +8,11 @@ on:
 jobs:
   publish:
     runs-on: ${{ matrix.os }}
+    environment:
+      name: npm
+      url: https://npmjs.com/package/xdeployer
+    permissions:
+      id-token: write
     strategy:
       matrix:
         os:
@@ -50,3 +55,4 @@ jobs:
         run: pnpm publish --no-git-checks
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true

package.json

@@ -1,6 +1,6 @@
 {
   "name": "xdeployer",
-  "version": "3.1.12",
+  "version": "3.1.13",
   "description": "Hardhat plugin to deploy your smart contracts across multiple EVM chains with the same deterministic address.",
   "author": "Pascal Marco Caversaccio <pascal.caversaccio@hotmail.ch>",
   "license": "MIT",