Merge branch 'main' into hd-astro-v5

* main: Fix release workflow permissions (#2665) Publish provenance for public packages (#2664)
withastro · Dec 13, 2024 · 39d6f3b · 39d6f3b
2 parents 13c8796 + cb3cb21
commit 39d6f3b
Show file tree

Hide file tree

Showing 6 changed files with 23 additions and 0 deletions.
diff --git a/.changeset/sweet-poems-smoke.md b/.changeset/sweet-poems-smoke.md
@@ -0,0 +1,8 @@
+---
+'@astrojs/starlight-docsearch': patch
+'@astrojs/starlight': patch
+'@astrojs/starlight-tailwind': patch
+'@astrojs/starlight-markdoc': patch
+---
+
+Publishes provenance containing verifiable data to link a package back to its source repository and the specific build instructions used to publish it.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -10,6 +10,9 @@ jobs:
     name: Release
     if: ${{ github.repository_owner == 'withastro' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4

diff --git a/packages/docsearch/package.json b/packages/docsearch/package.json
@@ -33,5 +33,8 @@
   },
   "devDependencies": {
     "@astrojs/starlight": "workspace:*"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }
diff --git a/packages/markdoc/package.json b/packages/markdoc/package.json
@@ -24,5 +24,8 @@
   "peerDependencies": {
     "@astrojs/markdoc": "^0.12.1",
     "@astrojs/starlight": ">=0.23.0"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }
diff --git a/packages/starlight/package.json b/packages/starlight/package.json
@@ -214,5 +214,8 @@
     "unified": "^11.0.5",
     "unist-util-visit": "^5.0.0",
     "vfile": "^6.0.2"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }
diff --git a/packages/tailwind/package.json b/packages/tailwind/package.json
@@ -32,5 +32,8 @@
     "@astrojs/starlight": ">=0.9.0",
     "@astrojs/tailwind": "^5.1.3",
     "tailwindcss": "^3.3.3"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }