Enable provenance during publish

Author: Leroy Korterink

.github/workflows/bump-version-and-publish.yml

@@ -62,9 +62,10 @@ jobs:
           git tag $(npm pkg get version | tr -d '"') -m "v$(npm pkg get version | tr -d '"')"
 
       - name: Publish to NPM
-        uses: JS-DevTools/npm-publish@v2
+        uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_TOKEN }}
+          provenance: true
           ignore-scripts: false
 
       - name: Push latest version