fix: npm provenance configuration

hotaydev · Jan 28, 2024 · e3cc1b1 · e3cc1b1
1 parent d3b797f
commit e3cc1b1
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 14 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -7,9 +7,11 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # to enable use of OIDC for npm provenance
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: 20
           registry-url: https://registry.npmjs.org/

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,15 +2,6 @@
 
 All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines.
 
-## [1.0.7](https://github.com/hotaydev/audit-export/compare/v1.0.6...v1.0.7) (2024-01-28)
-
-
-### Enhancements
-
-* changed git hooks use ([9c26a0f](https://github.com/hotaydev/audit-export/commit/9c26a0fd3c866757c51265927cc4ddb31191bd24))
-* removed a dependency ([d30d529](https://github.com/hotaydev/audit-export/commit/d30d5298be348565ef3adba0a2397a88fb685392))
-* upgraded husky dependency ([a5187cd](https://github.com/hotaydev/audit-export/commit/a5187cd23546381ef83d335b31d9af98406db9cb))
-
 ## [1.0.6](https://github.com/hotaydev/audit-export/compare/v1.0.5...v1.0.6) (2024-01-21)
 
 

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "audit-export",
-  "version": "1.0.7",
+  "version": "1.0.6",
   "description": "Pretty export your npm audit output as an offline accessible html page",
   "main": "src/index.js",
   "bin": {