Update provenance (#2568)

Author: blittle

Diff for: .changeset/curvy-kids-joke.md

@@ -0,0 +1,5 @@
+---
+'eslint-plugin-hydrogen': patch
+---
+
+Update provenance

Diff for: .github/workflows/changesets.yml

@@ -15,6 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'shopify'
     name: Changelog PR or Release
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
     outputs:
       published: ${{ steps.changesets.outputs.published }}
       latest: ${{ steps.flags.outputs.latest }}
@@ -50,7 +54,8 @@ jobs:
         uses: changesets/action@v1
         with:
           version: yarn run version
-          publish: yarn changeset publish --tag h1
+          # publish: yarn changeset publish --tag h1
+          publish: yarn changeset publish
           commit: '[ci] release ${{ github.ref_name }}'
           title: '[ci] release ${{ github.ref_name }}'
         env:

Diff for: .github/workflows/changesets_snapshot.yml

@@ -11,6 +11,10 @@ jobs:
   changelog:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'shopify' && github.ref_name != 'latest'
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
     name: Changelog Snapshot Release
     steps:
       - name: Checkout the code