fix: upd npm publish workflows (#1667)

* fix: upd npm publish workflows

* chore: add changeset

Author: vrcprl

.changeset/true-lizards-cough.md

@@ -0,0 +1,11 @@
+---
+"@lingo.dev/_compiler": patch
+"@lingo.dev/_locales": patch
+"@lingo.dev/_logging": patch
+"@lingo.dev/_react": patch
+"@lingo.dev/_spec": patch
+"lingo.dev": patch
+"@lingo.dev/_sdk": patch
+---
+
+Upd NPM workflows

.github/workflows/release.yml

@@ -17,6 +17,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -93,4 +94,4 @@ jobs:
           commit: "chore: bump package version"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true

packages/cli/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev CLI",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "type": "module",
   "sideEffects": false,

packages/compiler/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev Compiler",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "sideEffects": false,
   "type": "module",

packages/locales/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev locales",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "type": "module",
   "sideEffects": false,

packages/logging/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev logging utilities with Pino",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "type": "module",
   "sideEffects": false,

packages/react/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev React Kit",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "sideEffects": false,
   "type": "module",

packages/sdk/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev JS SDK",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "type": "module",
   "sideEffects": false,

packages/spec/package.json

@@ -4,7 +4,8 @@
   "description": "Lingo.dev open specification",
   "private": false,
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "type": "module",
   "sideEffects": false,