ADD publish the npm package with the [provenance statements](https://…

…docs.npmjs.com/generating-provenance-statements)

.github/workflows/release.yml

@@ -21,6 +21,9 @@ jobs:
     # The type of runner that the job will run on
     runs-on: ubuntu-22.04
 
+    permissions:
+      # @link https://docs.npmjs.com/generating-provenance-statements#about-npm-provenance
+      id-token: write
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
@@ -93,7 +96,7 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
-      - run: npm publish
+      - run: npm publish --provenance --access public
         if: steps.vars.outputs.prerelease == 'false'
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

CHANGELOG.md

@@ -2,6 +2,7 @@
 # RxDB Changelog
 
 <!-- CHANGELOG NEWEST -->
+- ADD publish the npm package with the [provenance statements](https://docs.npmjs.com/generating-provenance-statements)
 
 <!-- ADD new changes here! -->