Bump node/npm-publish actions and enable provenance (#14)

klarna-incubator · Oct 25, 2023 · 24d7717 · 24d7717
1 parent f018e45
commit 24d7717
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml
@@ -10,21 +10,22 @@ jobs:
     if: github.repository_owner == 'klarna-incubator'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: '16'
+          node-version: '20'
       - name: Install dependencies
         run: yarn --frozen-lockfile --non-interactive --silent --ignore-scripts
       - name: Publish to NPM
         id: publish
-        uses: JS-DevTools/npm-publish@v1
+        uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_PUBLISH_TOKEN }}
           access: public
+          provenance: true
       - name: Create release
-        if: steps.publish.outputs.type != 'none'
+        if: steps.publish.outputs.type
         id: create_release
         uses: actions/create-release@v1
         env: