Investigating release actions, part 2

.github/workflows/release.yml

@@ -1,17 +1,22 @@
 name: Deploy to NPM
 
 on:
+  release:
+    types: [published]
   push:
     branches:
       - main
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
-
+    permissions:
+      id-token: write
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+      with:
+        fetch-depth: 1
 
     - name: Setup Node.js
       uses: actions/setup-node@v4
@@ -20,13 +25,8 @@ jobs:
         registry-url: 'https://registry.npmjs.org'
         cache: 'npm'
 
-    - name: Install dependencies
-      run: npm ci
-
-    # - name: Update package version
-    #   run: npm version ${{ github.event.release.tag_name }} --no-git-tag-version
-
-    - name: Publish to NPM
-      run: npm publish --provenance --access public
+    - run: npm ci
+    - run: npm version ${{ github.event.release.tag_name }} --no-git-tag-version
+    - run: npm publish --provenance --access public
       env:
         NODE_AUTH_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}