thednp / rpc / 30767342109

100%

push

github

release: drop --provenance to match vite-style publish

Remove publishConfig.provenance and the release script's --provenance /
auth-type=legacy flags. @vitejs/release-scripts publishes vite itself with a
plain `npm publish --access public` over OIDC; its released packages carry
no sigstore attestation. Provenance was flipping npm onto the registry's
web-auth 'OIDC publish authorize' route (E403 masked from 401), so the
vite-style plain publish (with raw-PUT break-glass kept last) is our path.

Reference: vitejs/release-scripts .github/workflows/publish.yml + publish.ts.

325 of 325 branches covered (100.0%)

Branch coverage included in aggregate %.

631 of 631 relevant lines covered (100.0%)

10.45 hits per line