chore: Add ability to generate provenance statements

Author: jhnns

.github/workflows/test-and-release.yml

@@ -21,6 +21,17 @@ jobs:
       group: ${{ github.ref }}-node-${{ matrix.node-version }}
       cancel-in-progress: true
 
+    permissions:
+      # Necessary for semantic-release
+      contents: write
+      issues: write
+      pull-requests: write
+      # Necessary for npm publish --provenance
+      # See https://docs.npmjs.com/generating-provenance-statements#example-github-actions-workflow
+      id-token: write
+      # packages: write is only necessary if you want to publish to Github
+      packages: write
+
     steps:
       - name: ⬇️ Checkout repo
         uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 # pin@main

package.json

@@ -91,5 +91,9 @@
     "timezone-mock": "^1.3.6",
     "typescript": "^5.7.3",
     "vitest": "^3.0.4"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
   }
 }