Publish the package using npm provenance

Author: elchininet

.github/workflows/deploy.yaml

@@ -10,6 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: node:18
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -22,7 +25,7 @@ jobs:
       - name: Publish
         run: |
           yarn install --frozen-lockfile --ignore-scripts --prefer-offline
-          npm publish
+          npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build Changelog