Merge pull request #140 from yanokwa/tweak-release

Update to current practice

.github/workflows/npmjs.yml

@@ -5,16 +5,19 @@ on: [push, pull_request, release]
 jobs:
   build:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node: [ '14', '16' ]
     steps:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with:
-          node-version: 14
+          node-version: ${{ matrix.node }}
           registry-url: https://registry.npmjs.org/
       - run: npm ci
       - run: npm test
-      - name: publish
-        if: github.event_name == 'release' && github.event.action == 'created'
+      - name: Run npm publish
+        if: github.event_name == 'release' && github.event.action == 'created' && matrix.node == '16'
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}

README.md

@@ -102,11 +102,16 @@ The following XPath/ODK/OpenRosa functions are not implemented in this library,
 1. Create release PR
 1. Check [Dependabot](https://github.com/enketo/openrosa-xpath-evaluator/security/dependabot) for alerts
 1. Run `npm update`
-1. Run `npm audit fix --production`
+1. Run `npm audit`
+    - Run `npm audit fix --production` to apply most important fixes
+1. Run `npm ci`
+1. Run `npm test`
 1. Update `CHANGELOG.md`
 1. Update version in `package.json`
-1. Merge PR all changes
+1. Merge PR with all changes
+1. Create GitHub release
 1. Tag and publish the release
+    - GitHub action will publish it to npm public repository
 
 # Acknowledgement