fix(ci): update pnpm to publish with provenance (#125)

Author: andogq

.changes/config.json

@@ -10,7 +10,7 @@
         }
       },
       "prepublish": ["pnpm i", "pnpm build"],
-      "publish": ["pnpm publish --access public --no-git-checks"],
+      "publish": ["pnpm publish --access public --no-git-checks --provenance"],
       "postversion": ["pnpm i --lockfile-only"],
       "postpublish": [
         "git tag ${ pkg.pkg }-v${ pkgFile.versionMajor } -f",

.github/workflows/covector-version-or-publish.yml

@@ -42,7 +42,6 @@ jobs:
         uses: jbolda/covector/packages/action@covector-v0
         id: covector
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           CARGO_AUDIT_OPTIONS: ${{ secrets.CARGO_AUDIT_OPTIONS }}
         with:
           token: ${{ secrets.GITHUB_TOKEN }}

package.json

@@ -9,5 +9,5 @@
   "dependencies": {
     "@biomejs/biome": "^1.9.4"
   },
-  "packageManager": "pnpm@9.1.4+sha512.9df9cf27c91715646c7d675d1c9c8e41f6fce88246f1318c1aa6a1ed1aeb3c4f032fcdf4ba63cc69c4fe6d634279176b5358727d8f2cc1e65b65f43ce2f8bfb0"
+  "packageManager": "pnpm@10.33.0"
 }