Remove --provenance flag to test basic OIDC auth first

Author: jkebinger

.github/workflows/release.yml

@@ -85,9 +85,9 @@ jobs:
           echo "Yarn version: $(yarn --version)"
           # Yarn 4.11.0 with OIDC trusted publishing
           if [ "${{ needs.check-version.outputs.is-prerelease }}" == "true" ]; then
-            yarn npm publish --provenance --access public --tag ${{ needs.check-version.outputs.npm-tag }}
+            yarn npm publish --access public --tag ${{ needs.check-version.outputs.npm-tag }}
           else
-            yarn npm publish --provenance --access public
+            yarn npm publish --access public
           fi
 
   create-release:

.yarnrc.yml

@@ -1,4 +1,7 @@
 nodeLinker: node-modules
+
+npmPublishProvenance: true
+
 npmRegistryServer: 'https://registry.npmjs.org'
 npmPublishRegistry: "https://registry.npmjs.org"