Update to yarn 4.12.0, Node 22, and add provenance to npm publish

- Run yarn set version 4.12.0
- Update all CI jobs to use Node.js 22.x instead of 14.x
- Add --provenance flag to npm publish for attestation
- GitHub packages publish remains without provenance flag

Co-authored-by: dmattia <8922077+dmattia@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: Use Node.js 14.x
+      - name: Use Node.js 22.x
         uses: actions/setup-node@v6
         with:
-          node-version: 14.x
+          node-version: 22.x
       - run: yarn install --immutable
       - run: yarn depcheck
 
@@ -25,10 +25,10 @@ jobs:
         with:
           fetch-depth: 100 # need the history to do a changed files check below (source, origin)
       - uses: actions/setup-python@v2
-      - name: Use Node.js 14.x
+      - name: Use Node.js 22.x
         uses: actions/setup-node@v6
         with:
-          node-version: 14.x
+          node-version: 22.x
       - run: yarn install --immutable
       - uses: pre-commit/action@v3.0.0
         with:
@@ -38,10 +38,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: Use Node.js 14.x
+      - name: Use Node.js 22.x
         uses: actions/setup-node@v6
         with:
-          node-version: 14.x
+          node-version: 22.x
       - run: yarn install --immutable
       - name: Build the typescript code
         run: cd typescript && yarn && yarn build
@@ -62,15 +62,15 @@ jobs:
         uses: actions/checkout@v2
       - uses: actions/setup-node@v6
         with:
-          node-version: '14.x'
+          node-version: '22.x'
           registry-url: 'https://registry.npmjs.org'
       # See: https://docs.npmjs.com/trusted-publishers
       # See: https://github.com/actions/setup-node/issues/1445
       - name: Set npm to version that supports trusted publishers
         run: npm install -g npm@11.5.1
         shell: bash
       - name: Publish to yarn/npm
-        run: yarn && cd typescript && yarn npm publish
+        run: yarn && cd typescript && yarn npm publish --provenance
 
   build-to-github-packages:
     if: github.ref == 'refs/heads/main'
@@ -84,7 +84,7 @@ jobs:
         uses: actions/checkout@v2
       - uses: actions/setup-node@v6
         with:
-          node-version: '14.x'
+          node-version: '22.x'
       - name: Install dependencies
         run: yarn
       - name: Configure Github Packages authentication