From 28687e16e42019d3d9f7fb1d5d6180a87a2b3324 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=A9bastien=20Vanvelthem?= Date: Sat, 6 Jan 2024 16:28:18 +0100 Subject: [PATCH] feat: add npm provenance to releases --- .changeset/lemon-tools-sit.md | 9 +++++++++ .github/workflows/release-or-version-pr.yml | 1 + 2 files changed, 10 insertions(+) create mode 100644 .changeset/lemon-tools-sit.md diff --git a/.changeset/lemon-tools-sit.md b/.changeset/lemon-tools-sit.md new file mode 100644 index 000000000..2d21da667 --- /dev/null +++ b/.changeset/lemon-tools-sit.md @@ -0,0 +1,9 @@ +--- +"prisma-exception": patch +"@httpx/assert": patch +"@httpx/dsn-parser": patch +"@httpx/exception": patch +"@httpx/json-api": patch +--- + +Release with npm provenance diff --git a/.github/workflows/release-or-version-pr.yml b/.github/workflows/release-or-version-pr.yml index 528ba201d..077551e44 100644 --- a/.github/workflows/release-or-version-pr.yml +++ b/.github/workflows/release-or-version-pr.yml @@ -15,6 +15,7 @@ jobs: permissions: contents: write # to create release (changesets/action) pull-requests: write + id-token: write # to allow npm provenance runs-on: ubuntu-latest env: NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}