chore: setup package provenance

benmccann · benmccann · commit 17a2d956b3bc · 2024-08-09T08:34:40.000-07:00
diff --git a/.changeset/neat-stingrays-reply.md b/.changeset/neat-stingrays-reply.md
@@ -0,0 +1,17 @@
+---
+'@sveltejs/adapter-cloudflare-workers': patch
+'@sveltejs/adapter-cloudflare': patch
+'@sveltejs/adapter-netlify': patch
+'@sveltejs/adapter-static': patch
+'@sveltejs/adapter-vercel': patch
+'create-svelte': patch
+'@sveltejs/adapter-auto': patch
+'@sveltejs/adapter-node': patch
+'@sveltejs/enhanced-img': patch
+'svelte-migrate': patch
+'@sveltejs/package': patch
+'@sveltejs/amp': patch
+'@sveltejs/kit': patch
+---
+
+chore: package provenance
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
     if: github.repository == 'sveltejs/kit'
     permissions:
       contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
       pull-requests: write # to create pull request (changesets/action)
     name: Release
     runs-on: ubuntu-latest
diff --git a/packages/adapter-auto/package.json b/packages/adapter-auto/package.json
@@ -49,5 +49,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-cloudflare-workers/package.json b/packages/adapter-cloudflare-workers/package.json
@@ -51,5 +51,8 @@
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.0.0",
 		"wrangler": "^3.28.4"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-cloudflare/package.json b/packages/adapter-cloudflare/package.json
@@ -56,5 +56,8 @@
 	},
 	"publishConfig": {
 		"access": "public"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-netlify/package.json b/packages/adapter-netlify/package.json
@@ -60,5 +60,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.4.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-node/package.json b/packages/adapter-node/package.json
@@ -58,5 +58,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.4.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-static/package.json b/packages/adapter-static/package.json
@@ -50,5 +50,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/adapter-vercel/package.json b/packages/adapter-vercel/package.json
@@ -51,5 +51,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^2.4.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/amp/package.json b/packages/amp/package.json
@@ -38,5 +38,8 @@
 	},
 	"peerDependencies": {
 		"@sveltejs/kit": "^1.0.0 || ^2.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/create-svelte/package.json b/packages/create-svelte/package.json
@@ -54,5 +54,8 @@
 		"types"
 	],
 	"types": "types/index.d.ts",
-	"type": "module"
+	"type": "module",
+	"publishConfig": {
+		"provenance": true
+	}
 }
diff --git a/packages/enhanced-img/package.json b/packages/enhanced-img/package.json
@@ -53,5 +53,8 @@
 	"peerDependencies": {
 		"svelte": "^4.0.0 || ^5.0.0-next.0",
 		"vite": ">= 5.0.0"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/kit/package.json b/packages/kit/package.json
@@ -103,5 +103,8 @@
 	"types": "types/index.d.ts",
 	"engines": {
 		"node": ">=18.13"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/migrate/package.json b/packages/migrate/package.json
@@ -54,5 +54,8 @@
 		"check": "tsc",
 		"lint": "prettier --check .",
 		"format": "pnpm lint --write"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }
diff --git a/packages/package/package.json b/packages/package/package.json
@@ -61,5 +61,8 @@
 	"types": "types/index.d.ts",
 	"engines": {
 		"node": "^16.14 || >=18"
+	},
+	"publishConfig": {
+		"provenance": true
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -49,5 +49,8 @@`
`49`	`49`	`},`
`50`	`50`	`"peerDependencies": {`
`51`	`51`	`"@sveltejs/kit": "^2.0.0"`
	`52`	`+ },`
	`53`	`+ "publishConfig": {`
	`54`	`+ "provenance": true`
`52`	`55`	`}`
`53`	`56`	`}`
Original file line number	Diff line number	Diff line change
`@@ -51,5 +51,8 @@`
`51`	`51`	`"peerDependencies": {`
`52`	`52`	`"@sveltejs/kit": "^2.0.0",`
`53`	`53`	`"wrangler": "^3.28.4"`
	`54`	`+ },`
	`55`	`+ "publishConfig": {`
	`56`	`+ "provenance": true`
`54`	`57`	`}`
`55`	`58`	`}`
Original file line number	Diff line number	Diff line change
`@@ -56,5 +56,8 @@`
`56`	`56`	`},`
`57`	`57`	`"publishConfig": {`
`58`	`58`	`"access": "public"`
	`59`	`+ },`
	`60`	`+ "publishConfig": {`
	`61`	`+ "provenance": true`
`59`	`62`	`}`
`60`	`63`	`}`
Original file line number	Diff line number	Diff line change
`@@ -60,5 +60,8 @@`
`60`	`60`	`},`
`61`	`61`	`"peerDependencies": {`
`62`	`62`	`"@sveltejs/kit": "^2.4.0"`
	`63`	`+ },`
	`64`	`+ "publishConfig": {`
	`65`	`+ "provenance": true`
`63`	`66`	`}`
`64`	`67`	`}`
Original file line number	Diff line number	Diff line change
`@@ -58,5 +58,8 @@`
`58`	`58`	`},`
`59`	`59`	`"peerDependencies": {`
`60`	`60`	`"@sveltejs/kit": "^2.4.0"`
	`61`	`+ },`
	`62`	`+ "publishConfig": {`
	`63`	`+ "provenance": true`
`61`	`64`	`}`
`62`	`65`	`}`
Original file line number	Diff line number	Diff line change
`@@ -50,5 +50,8 @@`
`50`	`50`	`},`
`51`	`51`	`"peerDependencies": {`
`52`	`52`	`"@sveltejs/kit": "^2.0.0"`
	`53`	`+ },`
	`54`	`+ "publishConfig": {`
	`55`	`+ "provenance": true`
`53`	`56`	`}`
`54`	`57`	`}`
Original file line number	Diff line number	Diff line change
`@@ -38,5 +38,8 @@`
`38`	`38`	`},`
`39`	`39`	`"peerDependencies": {`
`40`	`40`	`"@sveltejs/kit": "^1.0.0 \|\| ^2.0.0"`
	`41`	`+ },`
	`42`	`+ "publishConfig": {`
	`43`	`+ "provenance": true`
`41`	`44`	`}`
`42`	`45`	`}`