Enable provenance and GitHub releases

Author: GeKorm

.github/workflows/release.yml

@@ -21,6 +21,9 @@ jobs:
     if: github.repository_owner == 'GeKorm'
     environment: production
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4

.github/workflows/snapshot-release.yml

@@ -35,6 +35,7 @@ jobs:
     environment: production
     permissions:
       id-token: write
+      attestations: write
       contents: write
       pull-requests: write
     if: |

package.json

@@ -19,7 +19,7 @@
     "lint:root": "CHECK_REDOS=true eslint .",
     "emit-types": "turbo run emit-types --concurrency=100% --cache-dir=.turbo",
     "typecheck": "turbo run typecheck --concurrency=100% --cache-dir=.turbo",
-    "release": "turbo run build --cache-dir=.turbo && yarn workspaces foreach -A -p -j unlimited --no-private npm publish --tolerate-republish",
+    "release": "turbo run build --cache-dir=.turbo && yarn workspaces foreach -A -p -j unlimited --no-private npm publish --tolerate-republish && changeset tag",
     "format": "prettier --write \"**/*.{cjs,js,mjs,ts,tsx,md,json}\""
   },
   "devDependencies": {

packages/plugins/package.json

@@ -30,6 +30,10 @@
   "bugs": {
     "url": "https://github.com/gekorm/better-auth-harmony/issues"
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "exports": {