Switch to oidc publish

.github/workflows/npm-publish.yml

@@ -7,24 +7,25 @@ on:
   release:
     types: 
       - published
-      - created
-      - edited
-      - released
+  workflow_dispatch:
 
 permissions:
-  id-token: write
   contents: read
+  id-token: write
 
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org/
+      - run: npm install -g npm@latest
       - run: npm ci
-      - run: npm test
-      - run: unset NODE_AUTH_TOKEN && npm publish --ignore-scripts
+      - run: npm run build
+      - run: |
+          TAG=$(node -p "require('./package.json').version.includes('-') ? 'beta' : 'latest'")
+          npm publish --provenance --ignore-scripts --tag $TAG
 

package.json

@@ -31,7 +31,9 @@
     "test": "nyc mocha test/**/*Test.js",
     "posttest": "nyc report --reporter=html --reporter=lcov",
     "eslint-check": "eslint --print-config .eslintrc.js | eslint-config-prettier-check",
-    "precommit": "lint-staged"
+    "precommit": "lint-staged",
+    "gh:release": "gh release create v$npm_package_version --generate-notes --verify-tag --target master",
+    "gh:prerelease": "gh release create v$npm_package_version --prerelease --generate-notes --verify-tag --target master"
   },
   "lint-staged": {
     "*.js": [