ci: add danielroe/provenance-action

Author: lachlancollins

.github/workflows/pr.yml

@@ -48,3 +48,15 @@ jobs:
         run: pnpm run build:all
       - name: Publish Previews
         run: pnpx pkg-pr-new publish --pnpm './packages/*' --template './examples/*/*'
+  provenance:
+    name: Provenance
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5.0.0
+        with:
+          fetch-depth: 0
+      - name: Check Provenance
+        uses: danielroe/provenance-action@v0.1.1
+        with:
+          fail-on-downgrade: true

.npmrc

@@ -1,3 +1 @@
-link-workspace-packages=true
-prefer-workspace-packages=true
 provenance=true

pnpm-workspace.yaml

@@ -1,15 +1,7 @@
+cleanupUnusedCatalogs: true
+linkWorkspacePackages: true
+preferWorkspacePackages: true
+
 packages:
-  - 'examples/**/*'
-  - 'packages/*'
-catalog:
-  '@tanstack/react-devtools': ^0.7.0
-  '@tanstack/react-query': ^5.90.1
-  '@tanstack/react-query-devtools': ^5.90.1
-  '@tanstack/react-router': ^1.131.50
-  '@tanstack/react-router-devtools': ^1.131.50
-  '@types/react': ^19.1.13
-  '@types/react-dom': ^19.1.9
-  '@vitejs/plugin-react': ^4.7.0
-  react: ^19.1.1
-  react-dom: ^19.1.1
-  vite: ^7.1.7
+  - examples/**/*
+  - packages/*