Merge pull request #402 from sass/provenance

Pass --provenance to npm publish

Author: nex3

.github/workflows/ci.yml

@@ -124,10 +124,8 @@ jobs:
         working-directory: sass-spec
 
   deploy_npm:
-    name: Deploy npm
-    runs-on: ubuntu-latest
-    if: "github.ref_type == 'tag' && github.event.repository.fork == false"
     needs: [static_analysis, tests, sass_spec]
+    if: "github.ref_type == 'tag' && github.event.repository.fork == false"
     permissions:
       attestations: write
       contents: write

.github/workflows/release.yml

@@ -28,6 +28,6 @@ jobs:
 
       - name: Publish optional dependencies
         run: |
-          find ./npm -mindepth 1 -maxdepth 1 -print0 | xargs -0 -n 1 -- sh -xc 'npx ts-node ./tool/prepare-optional-release.ts --package=$(basename $1) && npm publish $1' --
+          find ./npm -mindepth 1 -maxdepth 1 -print0 | xargs -0 -n 1 -- sh -xc 'npx ts-node ./tool/prepare-optional-release.ts --package=$(basename $1) && npm publish --provenance $1' --
 
-      - run: npm publish
+      - run: npm publish --provenance