chore: publish to npm with --provenance (#520)

Co-authored-by: Antoine du Hamel <duhamelantoine1995@gmail.com>

Author: wojtekmaj

.github/workflows/publish.yml

@@ -44,14 +44,15 @@ jobs:
           restore-keys: |
             ${{runner.os}}-yarn-
 
+      - run: corepack yarn install --immutable
+
+      - run: corepack yarn pack --out corepack.tgz
+
       - name: Publish to the npm registry
-        run: |
-          corepack yarn install --immutable
-          corepack yarn npm publish
+        run: npm publish corepack.tgz --provenance
         env:
-          YARN_NPM_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
 
-      - run: corepack yarn pack --out corepack.tgz
       - name: Add Corepack package archive to GitHub release
         run: gh release upload ${{ needs.release-please.outputs.release_tag }} corepack.tgz
         env: