npm provenance

Author: vladkens

.github/workflows/ci.yml

@@ -27,6 +27,7 @@ jobs:
     needs: test
     permissions:
       contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
@@ -37,7 +38,7 @@ jobs:
       - run: yarn install --frozen-lockfile
       - run: yarn ci
 
-      - run: npm publish
+      - run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 

package.json

@@ -1,11 +1,11 @@
 {
   "type": "module",
   "name": "url-normalize",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "license": "MIT",
   "scripts": {
     "build": "rm -rf dist && pkgroll --minify && ls -lah dist",
-    "test": "tsc --noEmit && uvu -r tsm tests/",
+    "test": "uvu -r tsm tests/",
     "test-cov": "c8 --include=src yarn test",
     "test-watch": "watchexec -e ts 'clear && yarn test'",
     "bench": "node --loader tsm --no-warnings benchmark.ts",