Update publish.yml

Author: davidbuzinski

.github/workflows/publish.yml

@@ -1,8 +1,9 @@
 name: Publish
-
 on:
   release:
-    types: [published, edited]
+    types: published
+permissions:
+  contents: write
 
 jobs:
   build:
@@ -11,18 +12,15 @@ jobs:
     outputs:
       tag: ${{ steps.update-package-version.outputs.version }}
     steps:
-      # Configure runner with the right stuff
-      - uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/checkout@v5
       - name: Configure git
         run: |
           git config user.name 'Release Action'
           git config user.email '<>'
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
-          node-version: "20"
-          
+          node-version: 20
+
       # Call `npm version`. It increments the version and commits the changes.
       # We'll save the output (new version string) for use in the following
       # steps
@@ -31,7 +29,6 @@ jobs:
         run: |
           git tag -d "${{ github.event.release.tag_name }}"
           VERSION=$(npm version "${{ github.event.release.tag_name }}" --no-git-tag-version)
-          echo "::set-output name=version::$VERSION"
           git add package.json package-lock.json
           git commit -m "[skip ci] Bump $VERSION"
           git push origin HEAD:main
@@ -47,18 +44,21 @@ jobs:
         id: release_info
         run: |
           # Check for semantic versioning
-          echo "Preparing release for version $longVersion"
           longVersion="${{github.event.release.tag_name}}"
+          echo "Preparing release for version $longVersion"
           [[ $longVersion == v[0-9]*.[0-9]*.[0-9]* ]]  || (echo "must follow semantic versioning" && exit 1)
           majorVersion=$(echo ${longVersion%.*.*})
           minorVersion=$(echo ${longVersion%.*})
+
           # Add the built artifacts. Using --force because dist/lib should be in
           # .gitignore
           git add --force dist lib
+
           # Make the commit
           MESSAGE="Build for $(git rev-parse --short HEAD)"
           git commit --allow-empty -m "$MESSAGE"
           git tag -f -a -m "Release $longVersion" $longVersion
+
           # Get the commit of the tag you just released
           commitHash=$(git rev-list -n 1 $longVersion)