chore: setup package provenance (#12567)

sveltejs · Aug 9, 2024 · 4930a84 · 4930a84
1 parent 65931f2
commit 4930a84
Show file tree

Hide file tree

Showing 15 changed files with 58 additions and 1 deletion.
diff --git a/.changeset/neat-stingrays-reply.md b/.changeset/neat-stingrays-reply.md
@@ -0,0 +1,17 @@
+---
+'@sveltejs/adapter-cloudflare-workers': patch
+'@sveltejs/adapter-cloudflare': patch
+'@sveltejs/adapter-netlify': patch
+'@sveltejs/adapter-static': patch
+'@sveltejs/adapter-vercel': patch
+'create-svelte': patch
+'@sveltejs/adapter-auto': patch
+'@sveltejs/adapter-node': patch
+'@sveltejs/enhanced-img': patch
+'svelte-migrate': patch
+'@sveltejs/package': patch
+'@sveltejs/amp': patch
+'@sveltejs/kit': patch
+---
+
+chore: package provenance
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
     if: github.repository == 'sveltejs/kit'
     permissions:
       contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
       pull-requests: write # to create pull request (changesets/action)
     name: Release
     runs-on: ubuntu-latest

diff --git a/packages/adapter-auto/package.json b/packages/adapter-auto/package.json
@@ -49,5 +49,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-cloudflare-workers/package.json b/packages/adapter-cloudflare-workers/package.json
@@ -51,5 +51,8 @@
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.0.0",
 		"wrangler": "^3.28.4"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-cloudflare/package.json b/packages/adapter-cloudflare/package.json
@@ -56,5 +56,8 @@
 	},
 	"publishConfig": {
 		"access": "public"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-netlify/package.json b/packages/adapter-netlify/package.json
@@ -60,5 +60,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.4.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-node/package.json b/packages/adapter-node/package.json
@@ -58,5 +58,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.4.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-static/package.json b/packages/adapter-static/package.json
@@ -50,5 +50,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-vercel/package.json b/packages/adapter-vercel/package.json
@@ -51,5 +51,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.4.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/amp/package.json b/packages/amp/package.json
@@ -38,5 +38,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^1.0.0 || ^2.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/create-svelte/package.json b/packages/create-svelte/package.json
@@ -54,5 +54,8 @@
 		"types"
 	],
 	"types": "types/index.d.ts",
-	"type": "module"
+	"type": "module",
+	"publishConfig": {
+		"provenance": true
+	}
 }
diff --git a/packages/enhanced-img/package.json b/packages/enhanced-img/package.json
@@ -53,5 +53,8 @@
 	"peerDependencies": {
 		"svelte": "^4.0.0 || ^5.0.0-next.0",
 		"vite": ">= 5.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/kit/package.json b/packages/kit/package.json
@@ -103,5 +103,8 @@
 	"types": "types/index.d.ts",
 	"engines": {
 		"node": ">=18.13"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/migrate/package.json b/packages/migrate/package.json
@@ -54,5 +54,8 @@
 		"check": "tsc",
 		"lint": "prettier --check .",
 		"format": "pnpm lint --write"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/package/package.json b/packages/package/package.json
@@ -61,5 +61,8 @@
 	"types": "types/index.d.ts",
 	"engines": {
 		"node": "^16.14 || >=18"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }