Fix publish: remove --provenance flag (repo is private) #6

	name: Publish

	on:
	push:
	branches: [main]

	jobs:
	publish:
	if: "!contains(github.event.head_commit.message, '[skip ci]')"
	runs-on: ubuntu-latest
	permissions:
	contents: write
	id-token: write
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	- name: Setup pnpm
	uses: pnpm/action-setup@v4

	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: pnpm
	registry-url: https://registry.npmjs.org

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Lint
	run: pnpm lint

	- name: Build
	run: pnpm build

	- name: Test
	run: pnpm test

	- name: Bump patch version
	run: npm version patch --no-git-tag-version

	- name: Commit and push version bump
	run: \|
	VERSION=$(node -p "require('./package.json').version")
	git config user.name "github-actions[bot]"
	git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
	git add package.json
	git commit -m "chore: bump version to ${VERSION} [skip ci]"
	git pull --rebase
	git push

	- name: Publish to npm
	run: npm publish --access public
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback