fix: update changesets to publish with NPM OIDC

Author: fraxken

.github/workflows/changesets.yml

@@ -10,6 +10,10 @@ jobs:
   version:
     timeout-minutes: 15
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for OIDC publishing
+      contents: write # Required for changesets to push version commit
+      pull-requests: write # Required for changesets to create PRs
     steps:
       - name: Checkout code repository
         uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
@@ -19,7 +23,11 @@ jobs:
       - name: Setup node.js
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 22
+          node-version: 24
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install latest npm
+        run: npm install -g npm@latest
 
       - name: Install dependencies
         run: npm install --ignore-scripts
@@ -36,4 +44,5 @@ jobs:
           publish: npm run ci:publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: ""
+          NPM_CONFIG_PROVENANCE: true

workspaces/conformance/package.json

@@ -16,6 +16,16 @@
     "test": "c8 -r html npm run test-only && npm run test-types",
     "spdx:refresh": "node ./scripts/fetchSpdxLicenses.js"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/conformance"
+  },
   "files": [
     "dist"
   ],
@@ -26,10 +36,6 @@
   ],
   "author": "GENTILHOMME Thomas <gentilhomme.thomas@gmail.com>",
   "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
-  },
   "bugs": {
     "url": "https://github.com/NodeSecure/scanner/issues"
   },

workspaces/contact/package.json

@@ -15,6 +15,16 @@
     "test-types": "npm run build && tsd && attw --pack . --profile esm-only",
     "test": "c8 -r html npm run test-only && npm run test-types"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/contact"
+  },
   "files": [
     "dist"
   ],
@@ -25,10 +35,6 @@
   ],
   "author": "GENTILHOMME Thomas <gentilhomme.thomas@gmail.com>",
   "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
-  },
   "bugs": {
     "url": "https://github.com/NodeSecure/scanner/issues"
   },

workspaces/flags/package.json

@@ -10,6 +10,16 @@
     "test": "c8 -r html npm run test-only && npm run test-types",
     "generateFlags": "node scripts/generateFlags.ts"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/flags"
+  },
   "keywords": [
     "nodesecure",
     "flags",
@@ -34,10 +44,6 @@
     "dist"
   ],
   "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
-  },
   "bugs": {
     "url": "https://github.com/NodeSecure/scanner/issues"
   },

workspaces/fs-walk/package.json

@@ -15,9 +15,15 @@
     "test-types": "attw --pack . --profile esm-only",
     "test": "c8 -r html npm run test-only && npm run test-types"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/fs-walk"
   },
   "bugs": {
     "url": "https://github.com/NodeSecure/scanner/issues"

workspaces/github/package.json

@@ -12,9 +12,15 @@
     "test-types": "attw --pack . --profile esm-only",
     "test": "c8 -r html npm run test-only && npm run test-types"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/github"
   },
   "keywords": [
     "NodeSecure",

workspaces/gitlab/package.json

@@ -12,6 +12,16 @@
     "test-types": "attw --pack . --profile esm-only",
     "test": "c8 -r html npm run test-only && npm run test-types"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/gitlab"
+  },
   "keywords": [
     "NodeSecure",
     "gitlab"
@@ -21,10 +31,6 @@
   ],
   "author": "GENTILHOMME Thomas <gentilhomme.thomas@gmail.com>",
   "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
-  },
   "bugs": {
     "url": "https://github.com/NodeSecure/scanner/issues"
   },

workspaces/i18n/package.json

@@ -12,9 +12,15 @@
     "test": "c8 -r html npm run test-only && npm run test-types",
     "build:documentation": "node ./scripts/buildDocumentation.ts"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/i18n"
   },
   "keywords": [
     "i18n",

workspaces/mama/package.json

@@ -12,6 +12,16 @@
     "test-types": "npm run build && tsd && attw --pack . --profile esm-only",
     "test": "c8 -r html npm run test-only && npm run test-types"
   },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/mama"
+  },
   "files": [
     "dist"
   ],
@@ -23,10 +33,6 @@
   ],
   "author": "GENTILHOMME Thomas <gentilhomme.thomas@gmail.com>",
   "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
-  },
   "bugs": {
     "url": "https://github.com/NodeSecure/scanner/issues"
   },

workspaces/npm-types/package.json

@@ -7,9 +7,15 @@
   "files": [
     "src"
   ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/NodeSecure/scanner.git"
+    "url": "https://github.com/NodeSecure/scanner",
+    "directory": "workspaces/npm-types"
   },
   "keywords": [
     "npm registry",