Generate provenance statements

Author: mathiasbynens

bootstrap.sh

@@ -11,8 +11,9 @@ for dir in $(find unicode-* -maxdepth 0 -type d | sort -r); do
 	cd "${dir}";
 	echo "Taking care of ${dir}…";
 	git add -A;
-	git commit -m 'Release v1.6.9';
-	git tag v1.6.9;
+	git commit -m 'Generate provenance statements';
+	#git commit -m 'Release v1.6.10';
+	#git tag v1.6.10;
 	git push;
 	git push --tags;
 	cd ..;

static/.github/workflows/publish-on-tag.yml

@@ -3,11 +3,14 @@ name: publish-on-tag
 on:
   push:
     tags:
-    - '*'
+      - '*'
 
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -18,4 +21,4 @@ jobs:
           npm config set access public
           npm config set registry 'https://wombat-dressing-room.appspot.com/'
           npm config set '//wombat-dressing-room.appspot.com/:_authToken' '${NPM_TOKEN}'
-          npm publish
+          npm publish --provenance --access public

templates/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@unicode/unicode-<%= version %>",
-	"version": "1.6.9",
+	"version": "1.6.10",
 	"description": "JavaScript-compatible Unicode data. Arrays of code points, arrays of symbols, and regular expressions for Unicode v<%= version %>’s categories, scripts, blocks, bidi, and other properties.",
 	"homepage": "https://github.com/node-unicode/unicode-<%= version %>",
 	"main": "index.js",