chore(ci): bump lerna & add provenance config (#1541)

Author: dreamorosi

.github/workflows/make-release.yml

@@ -8,6 +8,10 @@ jobs:
     uses: ./.github/workflows/reusable-run-linting-check-and-unit-tests.yml
   publish-npm:
     needs: run-unit-tests
+    # Needed as recommended by npm docs on publishing with provenance https://docs.npmjs.com/generating-provenance-statements
+    permissions:
+      id-token: write
+      contents: write
     runs-on: ubuntu-latest
     outputs:
       RELEASE_VERSION: ${{ steps.set-release-version.outputs.RELEASE_VERSION }}
@@ -37,7 +41,7 @@ jobs:
           npx lerna version --conventional-commits --force-publish --no-commit-hooks --yes
       - name: Publish to npm
         run: |
-          npx lerna publish from-git --yes
+          NPM_CONFIG_PROVENANCE=true npx lerna publish from-git --yes
       - name: Set release version
         id: set-release-version
         run: |