From fc3ae1e445e80b66b4b7843bb5d480d3fcd606ea Mon Sep 17 00:00:00 2001
From: Alexander Khramov <alx.khramov@gmail.com>
Date: Mon, 9 Sep 2024 17:49:36 +0300
Subject: [PATCH] fix: setup .npmrc during deploy workflow

---
 .github/workflows/deploy.yml | 8 ++++++++
 .npmrc                       | 3 ---
 2 files changed, 8 insertions(+), 3 deletions(-)
 delete mode 100644 .npmrc

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 3fefd46..bc1e865 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -29,8 +29,16 @@ jobs:
         run: yarn build
       - name: Run tests
         run: yarn test
+      - name: Setup .npmrc
+        run: |
+          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > .npmrc
+          echo "workspaces-update=false" >> .npmrc
+          echo "provenance=true" >> .npmrc
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Publish to NPM
         env:
+          NPM_CONFIG_PROVENANCE: true
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: yarn multi-semantic-release --deps.bump=override --deps.release=patch --sequential-init
diff --git a/.npmrc b/.npmrc
deleted file mode 100644
index 941c95d..0000000
--- a/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-registry = https://registry.npmjs.org/
-access = public
-workspaces-update = false