PR feedback

Author: vlj91

.github/workflows/ci.yml

@@ -7,8 +7,8 @@ on:
   push:
     branches:
       - master
-    tags:
-      - 'v*.*.*'
+  release:
+    types: [published]
 
 jobs:
   test:
@@ -96,11 +96,14 @@ jobs:
 
   publish:
     runs-on: ubuntu-latest
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    if: github.event_name == 'release'
     needs:
       - test
       - build
       - lint
+    env:
+      # Used in setup-node and publish steps
+      NODE_AUTH_TOKEN: ${{ secrets.NPMJS_PUBLISH_TOKEN }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -110,14 +113,12 @@ jobs:
         with:
           node-version-file: .nvmrc
           cache: 'yarn'
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
         run: yarn install --frozen-lockfile
 
       - run: yarn build
 
-      - name: Authenticate with npm registry
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPMJS_PUBLISH_TOKEN }}" > ~/.npmrc
-
       - name: Publish to npm registry
-        run: npm publish --access=public
+        run: npm publish --provenance --access public