fix: enabled provenance for npm

.github/workflows/release.yml

@@ -140,8 +140,10 @@ jobs:
     runs-on: ubuntu-20.04
 
     permissions:
-      contents: write
-      id-token: write # The OIDC ID token is used for authentication with JSR.
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
 
     needs:
       - test_node

README.md

@@ -3,7 +3,7 @@
 A dependency-free WebAssembly build of [Rust Regex](https://docs.rs/regex/latest/regex/) for Javascript
 
 ![GitHub Actions Workflow Status](https://img.shields.io/github/actions/workflow/status/2fd/rregex/release.yml?branch=master) ![GitHub Release](https://img.shields.io/github/v/release/2fd/rregex) ![NPM Version](https://img.shields.io/npm/v/rregex)
-![JSR Version](https://img.shields.io/jsr/v/%40rregex/rregex)
+ [![JSR](https://jsr.io/badges/@rregex/rregex)](https://jsr.io/@rregex/rregex)
 
 > Note: this project is not intended to be used in production jet
 

jsr.json

@@ -1,6 +1,7 @@
 {
   "name": "@rregex/rregex",
   "version": "0.0.0-development",
+  "description": "A dependency-free WebAssembly build of Rust Regex for Javascript",
   "exports": "./lib/esm.mjs",
   "publish": {
     "include": [

package.json

@@ -1,13 +1,16 @@
 {
   "name": "rregex",
   "version": "0.0.0-development",
-  "description": "Rust Regex binding for Javascript",
+  "description": "A dependency-free WebAssembly build of Rust Regex for Javascript",
   "private": false,
   "type": "module",
   "main": "./lib/commonjs.cjs",
   "module": "./lib/esm.mjs",
   "browser": "./lib/web.js",
   "types": "./lib/types.d.ts",
+  "publishConfig": {
+    "provenance": true
+  },
   "devDependencies": {
     "@semantic-release/exec": "^6.0.3",
     "concurrently": "^8.2.2",