From 91bb6b57aa70cb7537c03b7db54800fecfbcdcc3 Mon Sep 17 00:00:00 2001 From: Lars Mikkelsen Date: Tue, 27 Jun 2023 17:08:33 +0200 Subject: [PATCH] chore(ci): restore npm package provenance (#27711) Issue number: # --------- ## What is the current behavior? Package provenance was disabled in #27656. ## What is the new behavior? - Package provenance is enabled. ## Does this introduce a breaking change? - [ ] Yes - [x] No ## Other information --- .github/workflows/actions/publish-npm/action.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/actions/publish-npm/action.yml b/.github/workflows/actions/publish-npm/action.yml index 4022753792..22baf5210b 100644 --- a/.github/workflows/actions/publish-npm/action.yml +++ b/.github/workflows/actions/publish-npm/action.yml @@ -22,6 +22,9 @@ runs: - uses: actions/setup-node@v3 with: node-version: 16.x + # Provenance requires npm 9.5.0+ + - name: Install latest npm + run: npm install -g npm@latest # This ensures the local version of Lerna is installed # and that we do not use the global Lerna version - name: Install root dependencies