diff --git a/.changeset/fluffy-kings-complain.md b/.changeset/fluffy-kings-complain.md
new file mode 100644
index 0000000000..9eed7768d7
--- /dev/null
+++ b/.changeset/fluffy-kings-complain.md
@@ -0,0 +1,5 @@
+---
+'svelte': patch
+---
+
+chore: publish package provenance info
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d97642601f..e474e60e2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
     if: github.repository == 'sveltejs/svelte'
     permissions:
       contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
       pull-requests: write # to create pull request (changesets/action)
     name: Release
     runs-on: ubuntu-latest
diff --git a/packages/svelte/package.json b/packages/svelte/package.json
index 7eef44f29f..c35a6e6af8 100644
--- a/packages/svelte/package.json
+++ b/packages/svelte/package.json
@@ -154,5 +154,8 @@
     "project": [
       "src/**"
     ]
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }