Merge pull request #369 from oasisprotocol/CedarMist/publish-provenan…

…ce-permissions packaging: permissions necessary for provenance pubishing
oasisprotocol · Aug 28, 2024 · d8246ee · d8246ee
2 parents 77507b2 + 7f0f316
commit d8246ee
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -10,6 +10,12 @@ on:
       - integrations/viem-v2/v[0-9]+.[0-9]+.[0-9]+*
       - integrations/wagmi-v2/v[0-9]+.[0-9]+.[0-9]+*
 
+# See: https://docs.npmjs.com/generating-provenance-statements
+# See: https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds
+permissions:
+  id-token: write # to enable use of OIDC for npm provenance
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest

diff --git a/clients/js/package.json b/clients/js/package.json
@@ -2,7 +2,7 @@
   "type": "module",
   "name": "@oasisprotocol/sapphire-paratime",
   "license": "Apache-2.0",
-  "version": "2.0.0-next.2",
+  "version": "2.0.0-next.3",
   "description": "The Sapphire ParaTime Web3 integration library.",
   "homepage": "https://github.com/oasisprotocol/sapphire-paratime/tree/main/clients/js",
   "repository": {