Add permissions and update npm publish command

Author: avivkeller

.github/workflows/bump-version.yml

@@ -6,6 +6,10 @@ on:
     # Run once a month at midnight on the first day
     - cron: "0 0 1 * *"
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   compare-and-bump:
     runs-on: ubuntu-latest
@@ -54,7 +58,7 @@ jobs:
 
           # Get current version and bump patch
           npm version patch -m "Bump version to %s"
-          npm publish
+          npm publish --provenance
 
           # Push changes back to the repository
           git push