From d0be3ac8072dfb6381a943182e6f93bae2aab737 Mon Sep 17 00:00:00 2001
From: JounQin <admin@1stg.me>
Date: Tue, 13 Oct 2026 19:33:46 +0800
Subject: [PATCH] ci: enable npm publish provenance for changesets v3

Changesets v3 publishes Yarn projects through `yarn npm publish`, which
only emits an npm provenance statement when `npmPublishProvenance` (or
`publishConfig.provenance`) asks for it. Declare `publishConfig.provenance`
in package.json rather than in `.yarnrc.yml`, because the Yarn 3.8.7 jobs
on older Node.js reject the `npmPublishProvenance` setting while ignoring
the manifest field, and `clean-pkg-json` keeps `publishConfig`.
---
 package.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/package.json b/package.json
index 9b196faa..e2789e61 100644
--- a/package.json
+++ b/package.json
@@ -108,5 +108,8 @@
   },
   "resolutions": {
     "@yarnpkg/core": "4.9.1"
+  },
+  "publishConfig": {
+    "provenance": true
   }
 }