Update yarn publish command with --provenance flag (#13)

* Update yarn publish command with --provenance flag

* Add provenance flag to publishConfig in package.json

Author: ImBIOS

.github/workflows/ci-cd.yml

@@ -32,6 +32,6 @@ jobs:
           VERSION=$(node -p "require('./package.json').version")-canary.$(date +%s)
 
           yarn version --new-version $VERSION --no-git-tag-version
-          yarn publish --tag canary
+          yarn publish --tag canary --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/stable-release.yml

@@ -52,7 +52,7 @@ jobs:
           git push origin $VERSION
 
           yarn version --new-version $VERSION
-          yarn publish --tag latest
+          yarn publish --tag latest --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create GitHub Release

library/package.json

@@ -41,7 +41,8 @@
     "dist"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "playground": "bun ./playground.js",