💚 Enhance CI configuration and publishing process by extracting version from tags and updating package.json before publishing to NPM

.github/workflows/CI.yaml

@@ -22,4 +22,3 @@ jobs:
     permissions:
       id-token: write
       contents: read
-    secrets: inherit

.github/workflows/publish.yaml

@@ -29,9 +29,21 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Extract version from tag
+        id: version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Publishing version: $VERSION"
+
+      - name: Update package.json version
+        run: |
+          pnpm version ${{ steps.version.outputs.version }} --no-git-tag-version
+
       - name: Build package
         run: pnpm build
 
-      - uses: simenandre/publish-with-pnpm@v2
+      - name: Publish to NPM
-        with:
+        run: pnpm publish --access public --provenance --no-git-checks
-          npm-auth-token: ${{ secrets.NPM_TOKEN }}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}