Adding provenance flag to github workflow for npm trusted publisher

Author: pdohogne-magento

.github/workflows/publish-to-npm.yml

@@ -64,8 +64,9 @@ jobs:
 
       - name: Publish to npm
         if: ${{ steps.verify_version.outputs.version_tag != '' }}
-        uses: JS-DevTools/npm-publish@v1
+        uses: JS-DevTools/npm-publish@v4
         with:
           token: ${{ secrets.ADOBE_BOT_NPM_TOKEN }}
           access: 'public'
           tag: ${{ steps.verify_version.outputs.version_tag }}
+          provenance: true