feat(release): add provenance for GitHub Actions (#2)

* feat(release): add provenance for GitHub Actions

* fix: use correct version to setup bun

Author: DaxServer

.github/workflows/release.yml

@@ -9,6 +9,9 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4
@@ -17,7 +20,7 @@ jobs:
         run: echo "VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v1
+        uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
 

package.json

@@ -10,6 +10,7 @@
   "private": false,
   "publishConfig": {
     "access": "public",
+    "provenance": true,
     "tag": "latest"
   },
   "scripts": {