CI(GitHub Actions): Make publish via pnpm work

Summary:
/shrugs

Signed-off-by: Yongmin Hong <revi@omglol.email>

Test Plan: land and push tag again

Reviewers: O1 revi & automations, revi

Reviewed By: O1 revi & automations, revi

Differential Revision: https://issuetracker.revi.xyz/D634

.github/workflows/npm-pub.yml

@@ -23,14 +23,15 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version-file: '.node-version'
-          cache: npm
+          cache: pnpm
           registry-url: 'https://registry.npmjs.org'
       - name: 'Install dependencies'
-        run: npm ci
+        run: pnpm install
       - name: 'Publish to npm'
-        run: npm publish --provenance --access public
+        run: pnpm publish --provenance --access public
         working-directory: './npm/eslint-config'
         env:
+          NPM_CONFIG_PROVENANCE: true
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   prettier-config:
@@ -48,12 +49,13 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version-file: '.node-version'
-          cache: npm
+          cache: pnpm
           registry-url: 'https://registry.npmjs.org'
       - name: 'Install dependencies'
-        run: npm ci
+        run: pnpm install
       - name: 'Publish to npm'
-        run: npm publish --provenance --access public
+        run: pnpm publish --provenance --access public
         working-directory: './npm/prettier-config'
         env:
+          NPM_CONFIG_PROVENANCE: true
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

npm/eslint-config/package.json

@@ -44,6 +44,10 @@
     "email": "package-admin@revi.dev"
   },
   "packageManager": "pnpm@9.6.0",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "type": "module",
   "license": "Apache-2.0"
 }

npm/prettier-config/package.json

@@ -37,6 +37,10 @@
     "prettier"
   ],
   "packageManager": "pnpm@9.6.0",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "type": "module",
   "funding": "https://github.com/sponsors/revi",
   "license": "Apache-2.0"