chore: Set up publish with npm provenance (#12)

* chore: Set up publish with npm provenance

* Update lockfile

Author: kitten

.changeset/slimy-trains-wink.md

@@ -0,0 +1,5 @@
+---
+'@0no-co/graphql.web': patch
+---
+
+Publish with npm provenance

.github/workflows/release.yml

@@ -8,6 +8,14 @@ jobs:
     name: Release
     runs-on: ubuntu-20.04
     timeout-minutes: 20
+    permissions:
+      contents: write
+      id-token: write
+      issues: write
+      repository-projects: write
+      deployments: write
+      packages: write
+      pull-requests: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v3
@@ -22,7 +30,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v2.2.2
         with:
-          version: 7
+          version: 8
           run_install: false
 
       - name: Get pnpm store directory

package.json

@@ -103,6 +103,7 @@
     "vitest": "^0.29.7"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }