From 1f01484c62952d6bbdedf20e767bee1182e90a79 Mon Sep 17 00:00:00 2001
From: Joel Arvidsson <joel@oblador.se>
Date: Tue, 27 Aug 2024 22:08:18 +0200
Subject: [PATCH] Generate npm provenance statements

---
 .github/workflows/deploy.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index f89a786..52c8ace 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v2
       - name: Use Node.js
@@ -15,6 +17,8 @@ jobs:
         with:
           node-version-file: '.node-version'
       - name: Publish
-        uses: JS-DevTools/npm-publish@v1
+        id: publish
+        uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_PUBLISH_TOKEN }}
+          provenance: true