diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9402faf1..ea407875 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -85,6 +85,7 @@ jobs: needs: release runs-on: ubuntu-latest permissions: + id-token: write contents: read if: needs.release.outputs.tag_exists != 'true' && needs.release.outputs.latest_commit == github.sha steps: @@ -103,5 +104,6 @@ jobs: env: NPM_DIST_TAG: latest NPM_REGISTRY: registry.npmjs.org + NPM_CONFIG_PROVENANCE: true NPM_TOKEN: ${{ secrets.NPM_TOKEN }} run: npx -p publib@latest publib-npm diff --git a/package.json b/package.json index 3f94e3a9..dfe3846a 100644 --- a/package.json +++ b/package.json @@ -38,7 +38,7 @@ }, "devDependencies": { "@types/adm-zip": "^0.5.5", - "@types/aws-lambda": "^8.10.133", + "@types/aws-lambda": "^8.10.134", "@types/follow-redirects": "^1.14.4", "@types/fs-extra": "^9.0.13", "@types/jest": "^29.5.12", @@ -64,7 +64,7 @@ "JSONStream": "^1.3.5", "minipass": "3.2.1", "node-ical": "0.15.1", - "projen": "^0.79.23", + "projen": "^0.79.24", "rrule": "^2.8.1", "standard-version": "^9", "tar": "^6.2.0", diff --git a/yarn.lock b/yarn.lock index dc1a0af4..a020ac73 100644 --- a/yarn.lock +++ b/yarn.lock @@ -877,10 +877,10 @@ dependencies: "@types/node" "*" -"@types/aws-lambda@^8.10.133": - version "8.10.133" - resolved "https://registry.yarnpkg.com/@types/aws-lambda/-/aws-lambda-8.10.133.tgz#cc21de2edc623f0fd9a5290674c4b9f30971bc58" - integrity sha512-sr852MAL/79rjDelXP6ZuJ6GwOvXIRrFAoC8a+w91mZ5XR71CuzSgo1d0+pG1qgfPhjFgaibu7SWaoC5BA7pyQ== +"@types/aws-lambda@^8.10.134": + version "8.10.134" + resolved "https://registry.yarnpkg.com/@types/aws-lambda/-/aws-lambda-8.10.134.tgz#8f65d86736839889194f7892b7bec6b8a7ec6fc3" + integrity sha512-cfv422ivDMO+EeA3N4YcshbTHBL+5lLXe+Uz+4HXvIcsCuWvqNFpOs28ZprL8NA3qRCzt95ETiNAJDn4IcC/PA== "@types/babel__core@^7.1.14": version "7.20.5" @@ -4237,10 +4237,10 @@ process-nextick-args@~2.0.0: resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.1.tgz#7820d9b16120cc55ca9ae7792680ae7dba6d7fe2" integrity sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag== -projen@^0.79.23: - version "0.79.23" - resolved "https://registry.yarnpkg.com/projen/-/projen-0.79.23.tgz#ae6c22777110f77fd1fb4179d9fcc906df8d4dd0" - integrity sha512-qGonzpqoO81W1TVio5zCAlfSIOLveg9UNZpUgnHfv7cYdV6tiZka2bTeboqrnTivok3vEooOV0I98VMJS+QeYQ== +projen@^0.79.24: + version "0.79.24" + resolved "https://registry.yarnpkg.com/projen/-/projen-0.79.24.tgz#c540d7e5af1d8f35ab5e42a9d8508166b4b916de" + integrity sha512-feRBel2kl/dRsXTUFwYDnhZjQ7ZEdTAgxsAXIgJX4tEZllw4VzsbFX6P6/qxIUg+swPxYcJOU48bPA2IpuJWuQ== dependencies: "@iarna/toml" "^2.2.5" case "^1.6.3"