chore: Bump MetaMask/action-npm-publish from 6 to 7

[dependabot]

Bumps MetaMask/action-npm-publish from 6 to 7.

Release notes

Sourced from MetaMask/action-npm-publish's releases.

7.0.0

Added

• BREAKING: Sanitize Yarn configuration before publishing (#138)
  • Lifecycle scripts related to publishing (prepublish, prepack) are no longer run.
  • This action now assumes the following Yarn options:
    • nodeLinker: node-modules
    • npmPublishRegistry: "https://registry.npmjs.org" and/or publishConfig.registry set to https://registry.npmjs.org in package.json.
      • Publishing to 3rd party registries was never officially supported by this action, but is now not allowed anymore.
• BREAKING: Unset Yarn environment variables before running Yarn (#139)
  • YARN_* environment variables that are set outside of the action are no longer forwarded to Yarn.
• Print checksum and integrity in dry-run report (#141)
  • The dry-run now includes a SHA-1 checksum and SHA-512 integrity hash.

Changed

• Add names to all composite action steps (#136)

6.5.0

Added

• Log pull request link in publish workflow (#132)

Changed

• Bump slackapi/slack-github-action to v3 (#133)

6.4.0

Changed

• Skip workspaces that don't need publishing (#127, #128)
  • This can improve performance and reduce logging in larger monorepos.

6.3.0

Added

• Add dry-run option (#122)
  • If omitted, it defaults to true if required credentials are missing, false otherwise. This matches current behavior.
  • When set to false, this will abort when authorization is missing (rather than assuming a dry run was intended, as it does today)

6.2.1

Fixed

• Unset NPM token when package is already published (#123)
  • This avoids an issue where Yarn may try to use the NPM token even when OIDC is available.

6.2.0

Added

• Add option to disable provenance (#120)

Fixed

• Disable provenance for private repositories (#120)
  • Provenance is not supported for private repositories.

6.1.0

Changed

• Update the Slack message to include a link to the staged publishing instructions (#118)

Changelog

Sourced from MetaMask/action-npm-publish's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[7.0.0]

Added

• BREAKING: Sanitize Yarn configuration before publishing (#138)
  • Lifecycle scripts related to publishing (prepublish, prepack) are no longer run.
  • This action now assumes the following Yarn options:
    • nodeLinker: node-modules
    • npmPublishRegistry: "https://registry.npmjs.org" and/or publishConfig.registry set to https://registry.npmjs.org in package.json.
      • Publishing to 3rd party registries was never officially supported by this action, but is now not allowed anymore.
• BREAKING: Unset Yarn environment variables before running Yarn (#139)
  • YARN_* environment variables that are set outside of the action are no longer forwarded to Yarn.
• Print checksum and integrity in dry-run report (#141)
  • The dry-run now includes a SHA-1 checksum and SHA-512 integrity hash.

Changed

• Add names to all composite action steps (#136)

[6.5.0]

Added

• Log pull request link in publish workflow (#132)

Changed

• Bump slackapi/slack-github-action to v3 (#133)

[6.4.0]

Changed

• Skip workspaces that don't need publishing (#127, #128)
  • This can improve performance and reduce logging in larger monorepos.

[6.3.0]

Added

• Add dry-run option (#122)

... (truncated)

Commits

• 640617d 7.0.0 (#142)
• 003ee31 feat: print checksum and integrity in dry-run report (#141)
• 275e620 feat: unset Yarn environment variables before running Yarn (#139)
• 27708c3 feat: sanitise Yarn configuration before publishing (#138)
• dec9557 chore: add names to all composite action steps (#136)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)