setup publish with provenance

.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish Package to npm
+on:
+  release:
+    types: [published]
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - name: Enable corepack
+        run: corepack enable pnpm
+
+      - uses: actions/setup-node@v4
+        with:
+          cache: 'pnpm'
+          node-version: 22
+          registry-url: 'https://registry.npmjs.org'
+      - run: pnpm install
+      - run: pnpm build
+      - name: Setup Biome
+        uses: biomejs/setup-biome@v2
+        with:
+          version: latest
+
+      - name: Run Biome
+        run: biome ci .
+      - run: pnpm publish --no-git-checks
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -9,7 +9,7 @@
   "type": "module",
   "keywords": ["body-parser", "express", "http", "body-parsing"],
   "engines": {
-    "node": ">=12.20"
+    "node": ">=18"
   },
   "exports": "./dist/index.js",
   "devDependencies": {
@@ -30,5 +30,8 @@
     "build": "tsc -p tsconfig.build.json",
     "prepublishOnly": "pnpm build && pnpm test"
   },
-  "packageManager": "[email protected]"
+  "packageManager": "[email protected]",
+  "publishConfig": {
+    "provenance": true
+  }
 }