chore: publish package provenance info (#12779)

5 months ago · 9f28503bef
parent 37020384ca
commit 9f28503bef
3 changed files with 9 additions and 0 deletions
--- a/.changeset/fluffy-kings-complain.md
+++ b/.changeset/fluffy-kings-complain.md
@ -0,0 +1,5 @@
+---
+'svelte': patch
+---
+
+chore: publish package provenance info
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -12,6 +12,7 @@ jobs:
    if: github.repository == 'sveltejs/svelte'
    permissions:
      contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
      pull-requests: write # to create pull request (changesets/action)
    name: Release
    runs-on: ubuntu-latest
--- a/packages/svelte/package.json
+++ b/packages/svelte/package.json
@ -154,5 +154,8 @@
    "project": [
      "src/**"
    ]
+  },
+  "publishConfig": {
+    "provenance": true
  }
 }