From b07fd9c927daf5d365cd64559b6f952e795ad493 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Iv=C3=A1n=20Pereira?= <elchininet@gmail.com>
Date: Tue, 19 Dec 2023 22:34:25 +0100
Subject: [PATCH] Publich the package using the provenance flag (#26)

---
 .github/workflows/deploy.yaml | 5 ++++-
 CHANGELOG.md                  | 4 ++++
 package.json                  | 4 ++++
 3 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 6483b15..47bcf36 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -8,6 +8,9 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-20.04
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -26,7 +29,7 @@ jobs:
       - name: Publish
         run: |
           yarn install --frozen-lockfile
-          npm publish
+          npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build Changelog
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c43e68c..26c9881 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## [2.1.5] - 2023-12-19
+
+- Publish the package using npm provenance
+
 ## [2.1.4] - 2023-12-16
 
 - Update the `shadow-dom-selector` package to the latest version
diff --git a/package.json b/package.json
index 698db33..06504e9 100644
--- a/package.json
+++ b/package.json
@@ -31,6 +31,10 @@
   ],
   "author": "ElChiniNet",
   "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/elchininet/home-assistant-query-selector"
+  },
   "scripts": {
     "clean": "rm -rf dist .nyc_output coverage",
     "build": "yarn clean && rollup --config rollup.config.js --bundleConfigAsCjs",