ci: update release workflow

Author: twlite

.github/workflows/code-quality.yaml

@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: pnpm/action-setup@v4
         with:
-          version: '10.15.0'
+          version: '10.30.3'
 
       - uses: actions/checkout@v4
 
@@ -36,7 +36,7 @@ jobs:
     steps:
       - uses: pnpm/action-setup@v4
         with:
-          version: '10.15.0'
+          version: '10.30.3'
 
       - uses: actions/checkout@v4
 

.github/workflows/publish-dev.yaml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: pnpm/action-setup@v4
         with:
-          version: '10.15.0'
+          version: '10.30.3'
 
       - uses: actions/checkout@v4
 
@@ -49,6 +49,7 @@ jobs:
       - name: Publish packages
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: |
           PACKAGES=(
             "commandkit:packages/commandkit"

.github/workflows/publish-latest.yaml

@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: pnpm/action-setup@v4
         with:
-          version: '10.15.0'
+          version: '10.30.3'
 
       - uses: actions/checkout@v4
 

.github/workflows/publish-rc.yaml

@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: pnpm/action-setup@v4
         with:
-          version: '10.15.0'
+          version: '10.30.3'
 
       - uses: actions/checkout@v4
 
@@ -59,6 +59,7 @@ jobs:
       - name: Publish packages
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: |
           PACKAGES=(
             "commandkit:packages/commandkit"

package.json

@@ -21,7 +21,7 @@
     "tsx": "^4.21.0",
     "turbo": "^2.8.12"
   },
-  "packageManager": "pnpm@10.15.0",
+  "packageManager": "pnpm@10.30.3",
   "pnpm": {
     "onlyBuiltDependencies": [
       "@swc/core",
@@ -72,4 +72,4 @@
     "typescript": "catalog:build",
     "yaml": "^2.8.2"
   }
-}
+}