Just jotting down some notes for later: - [ ] Check on sub workflows like `actions/checkout` and `actions/setup-node` — we may be able to bump versions there. - [ ] Migrate to environment-based tokens. - [ ] Look into using additional authentication factors during publish. - [ ] Look into using the [--provenance](https://docs.npmjs.com/generating-provenance-statements) flag when publishing, I believe that’s the best practice these days.
Just jotting down some notes for later:
actions/checkoutandactions/setup-node— we may be able to bump versions there.