ci(release): update npm settings and workflow for registry and provenance handling

Author: atldays

.github/workflows/release.yml

@@ -48,6 +48,11 @@ jobs:
           node-version: 22
           cache: 'npm'
 
+      - name: Update npm
+        run: |
+          npm install -g npm@latest
+          npm -v
+
       - name: Install dependencies
         run: npm ci
 
@@ -61,8 +66,6 @@ jobs:
           DEBUG: release-it:*,@release-it/*
           HUSKY: 0
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_CONFIG_PROVENANCE: true
-          NPM_CONFIG_REGISTRY: https://registry.npmjs.org
         run: |
           VERSION_ARG=""
           if [ -n "${{ inputs.version }}" ]; then

.gitignore

@@ -16,3 +16,4 @@ stats.html
 .tool-versions
 .cache
 *-stats.txt
+.npmrc

.release-it.cjs

@@ -137,6 +137,7 @@ module.exports = () => {
             skipChecks: true,
             provenance: true,
             access: "public",
+            registry: "https://registry.npmjs.org/",
             versionArgs: ["--no-git-tag-version"],
         },
 

package.json

@@ -10,7 +10,8 @@
     "url": "git+https://github.com/addon-stack/addon-bone.git"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "bugs": {
     "url": "https://github.com/addon-stack/addon-bone/issues"