docs: Clarify how to use sri-history in sri-update.js (dequelabs#539)

* docs: Clarify how to use sri-history in sri-update.js

* fix: Run sri-update in npm release script

* fix: allow publishing w/o sri-update --validate

* docs: update comment for sri-history

* fix: Remove sri-update from npm run release

build/sri-update.js

@@ -1,3 +1,13 @@
+/**
+ * SRI Update will update the sri-history.json file
+ * In the project root. The sri-history.json file contains
+ * SRI hashes of each released version. This can be used
+ * to validate that something is a known axe-core source
+ * file.
+ *
+ * When running `npm run release`, this script will execute and
+ * update sri-history.json with the SRIs of axe{.*}.js.
+ */
 var path = require('path');
 var fs = require('fs');
 var sriToolbox = require("sri-toolbox");

package.json

@@ -53,8 +53,8 @@
     "build": "grunt",
     "test": "grunt test",
     "test-fast": "grunt test-fast",
-    "version": "node build/sri-update",
-    "prepublishOnly": "grunt build && node build/sri-update --validate",
+    "version": "echo \"use 'npm run release' to bump axe-core version\" && exit 1",
+    "prepublishOnly": "grunt build",
     "postinstall": "node build/utils/postinstall.js",
     "release": "standard-version"
   },