ci: publish with provenance (#408)

* chore: update to yarn 4.9.0

Signed-off-by: Seren_Modz 21 <seren@kings-world.net>

* ci: publish with provenance

Signed-off-by: Seren_Modz 21 <seren@kings-world.net>

* ci: replace the npmPublishProvenance config option with the --provenance flag

Signed-off-by: Seren_Modz 21 <seren@kings-world.net>

---------

Signed-off-by: Seren_Modz 21 <seren@kings-world.net>

Author: SerenModz21

.github/workflows/continuous-delivery.yml

@@ -10,6 +10,8 @@ jobs:
     name: Publish Next to npm
     runs-on: ubuntu-latest
     if: github.repository_owner == 'skyra-project'
+    permissions:
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -50,7 +52,7 @@ jobs:
 
           yarn bump --preid "next.$(git rev-parse --verify --short HEAD)" --skip-changelog
 
-          yarn npm publish --tag next
+          yarn npm publish --tag next --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/publish.yml

@@ -12,6 +12,8 @@ jobs:
     name: Publish @skyra/${{ github.event.inputs.package}}
     runs-on: ubuntu-latest
     if: github.repository_owner == 'skyra-project'
+    permissions:
+      id-token: write
     steps:
       - name: Checkout Project
         uses: actions/checkout@v4
@@ -46,6 +48,6 @@ jobs:
         run: |
           yarn config set npmAuthToken ${NODE_AUTH_TOKEN}
           yarn config set npmPublishRegistry "https://registry.yarnpkg.com"
-          yarn npm publish
+          yarn npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}

.yarn/releases/yarn-4.5.3.cjs

@@ -10,4 +10,4 @@ plugins:
   - path: .yarn/plugins/@yarnpkg/plugin-git-hooks.cjs
     spec: 'https://raw.githubusercontent.com/trufflehq/yarn-plugin-git-hooks/main/bundles/%40yarnpkg/plugin-git-hooks.js'
 
-yarnPath: .yarn/releases/yarn-4.5.3.cjs
+yarnPath: .yarn/releases/yarn-4.9.0.cjs

.yarn/releases/yarn-4.9.0.cjs

@@ -67,5 +67,5 @@
 			"path": "./node_modules/cz-conventional-changelog"
 		}
 	},
-	"packageManager": "yarn@4.5.3"
+	"packageManager": "yarn@4.9.0"
 }