fix: ensure provenance flag is in workflow file

Author: Sefina-DS

.github/workflows/test-and-release.yml

@@ -38,9 +38,12 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - name: Use Node.js 20.x
+      - name: Use Node.js 24.x
         uses: actions/setup-node@v4
         with:
           node-version: 24.x
@@ -51,8 +54,8 @@ jobs:
         run: cd src-widgets && npm ci
       - name: Build widgets
         run: npm run build
-      - name: Publish to npm
-        run: npm publish --access public
+      - name: Publish to npm with provenance
+        run: npm publish --access public --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create GitHub Release