chore(github/publish-npm): enable provenance

.github/workflows/build-lint-test.yaml

@@ -10,14 +10,13 @@ on:
   push:
     branches:
       - next
-      - main
 
 env:
   NODE_VERSION: lts/*
 
 jobs:
-  build-lint-ts:
-    name: Build & Lint Typescript
+  main:
+    name: Build & Lint & Test
     runs-on: ubuntu-latest
 
     permissions:
@@ -50,6 +49,9 @@ jobs:
       - name: 🏗 Install dependencies
         run: yarn install --immutable
 
+      - name: 🏗 Cache Wireit
+        uses: google/wireit@setup-github-actions-caching/v2
+
       - name: 🚀 Build Typescript
         run: yarn build
         env:

.github/workflows/release.yaml

@@ -22,6 +22,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.BOT_TOKEN }}
 
       - name: 🙂‍↔️ Import GPG key
         run: |
@@ -32,8 +33,8 @@ jobs:
 
       - name: 🫡 Setup Git
         run: |
-          git config --global user.name "njfamirm-bot"
-          git config --global user.email "bot@njfamirm.ir"
+          git config --global user.name "Nexim Bot"
+          git config --global user.email "bot@thenexim.com"
           git config --global user.signingkey ${{ env.GPG_KEY_ID }}
           git config --global commit.gpgsign true
 
@@ -60,9 +61,6 @@ jobs:
       - name: 🏗 Install dependencies
         run: yarn install --immutable
 
-      - name: 🗃️ Cache Wireit
-        uses: google/wireit@setup-github-actions-caching/v2
-
       - name: 🚀 Build Typescript
         run: yarn build
         env:
@@ -79,7 +77,7 @@ jobs:
           WIREIT_LOGGER: metrics
 
       - name: 🤖 Get Release
-        run: yarn release -y
+        run: yarn lerna version --yes
         env:
           GITHUB_TOKEN: ${{ secrets.BOT_TOKEN }}
           WIREIT_LOGGER: metrics

.github/workflows/sync-labels.yml

@@ -6,7 +6,6 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - main
       - next
     paths:
       - .github/labels.yml