From 5836529f765c3a973309a370ed5545b62b8fdd48 Mon Sep 17 00:00:00 2001
From: LingyuCoder <lingyucoder@gmail.com>
Date: Thu, 8 Aug 2024 15:49:14 +0800
Subject: [PATCH] ci: add provenance back

---
 package.json        | 3 ++-
 scripts/release.mjs | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 2282fb7..6e7c9ad 100644
--- a/package.json
+++ b/package.json
@@ -70,6 +70,7 @@
   "packageManager": "pnpm@9.6.0",
   "publishConfig": {
     "access": "public",
-    "registry": "https://registry.npmjs.org/"
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
   }
 }
diff --git a/scripts/release.mjs b/scripts/release.mjs
index d461bda..7382d31 100644
--- a/scripts/release.mjs
+++ b/scripts/release.mjs
@@ -39,7 +39,7 @@ fs.writeFileSync(
 console.info(`Publishing to npm with tag ${RELEASE_TAG}`);
 const dryRun = RELEASE_DRY_RUN === 'true' ? ['--dry-run'] : [];
 try {
-  await $`pnpm publish ${dryRun} --tag ${RELEASE_TAG} --no-git-checks`;
+  await $`pnpm publish ${dryRun} --tag ${RELEASE_TAG} --no-git-checks --provenance`;
   console.info(`Published successfully`);
 } catch (e) {
   console.error(`Publish failed: ${e.message}`);