chore: setup provenance

.github/workflows/publish.yaml

@@ -0,0 +1,24 @@
+name: Publish
+
+on:
+ push:
+ tags: ['v*']
+
+jobs:
+ publish:
+ if: github.repository == 'brc-dd/iron-webcrypto'
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ id-token: write
+ steps:
+ - uses: actions/checkout@v3
+ - uses: pnpm/action-setup@v2
+ - uses: actions/setup-node@v3
+ with:
+ node-version: 20
+ cache: pnpm
+ - run: pnpm prerelease
+ - run: pnpm publish
+ env:
+ NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.release-it.yaml

@@ -1,8 +1,7 @@
 git:
  commitMessage: 'chore: release v${version}'
-github:
- release: true
- releaseName: v${version}
+npm:
+ publish: false
 plugins:
  '@release-it/conventional-changelog':
  preset: conventionalcommits

lefthook.yaml

@@ -12,11 +12,6 @@ post-commit:
  status:
  run: git status
 
-post-checkout:
- commands:
- install:
- run: pnpm i
-
 pre-commit:
  piped: true
  commands:

package.json

@@ -44,7 +44,7 @@
  "test:node": "NODE_OPTIONS='--loader tsx' node--test tests/node/index.test.ts"
  },
  "devDependencies": {
- "@arethetypeswrong/cli": "^0.6.0",
+ "@arethetypeswrong/cli": "^0.7.0",
  "@aws-sdk/util-base64": "^3.310.0",
  "@commitlint/cli": "^17.6.6",
  "@commitlint/config-conventional": "^17.6.6",
@@ -54,7 +54,7 @@
  "@typescript-eslint/eslint-plugin": "^6.0.0",
  "@typescript-eslint/parser": "^6.0.0",
  "bun-types": "^0.6.14",
- "eslint": "^8.44.0",
+ "eslint": "^8.45.0",
  "eslint-config-airbnb-base": "^15.0.0",
  "eslint-config-airbnb-typescript": "^17.1.0",
  "eslint-config-prettier": "^8.8.0",
@@ -67,15 +67,16 @@
  "prettier": "^3.0.0",
  "prettier-plugin-packagejson": "^2.4.5",
  "publint": "^0.1.16",
- "release-it": "^16.1.0",
+ "release-it": "^16.1.2",
  "replace": "^1.2.2",
  "test": "^3.3.0",
  "tsup": "^7.1.0",
  "tsx": "^3.12.7",
  "typescript": "^5.1.6"
  },
- "packageManager": "[email protected].7",
+ "packageManager": "[email protected].8",
  "publishConfig": {
+ "provenance": true,
  "registry": "https://registry.npmjs.org"
  }
 }