Enable publishing with provenance (changesets#1659)

Andarist · web-flow · commit 5ca6271a779b · 2025-05-07T13:41:18.000+02:00
diff --git a/.github/workflows/changeset-version.yml b/.github/workflows/changeset-version.yml
@@ -14,6 +14,11 @@ jobs:
     if: github.repository == 'changesets/changesets'
     runs-on: ubuntu-latest
     timeout-minutes: 20
+    permissions:
+      contents: write # to create release (changesets/action)
+      issues: write # to post issue comments (changesets/action)
+      pull-requests: write # to create pull request (changesets/action)
+      id-token: write # to use OpenID Connect token for provenance (changesets/action)
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/ci-setup
@@ -28,3 +33,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
