Remove npm depency

Rely exclusively on `yarn`.

Dockerfile

@@ -10,7 +10,6 @@ RUN apk update && apk add --no-cache \
   git \
   make \
   nodejs \
-  npm \
   yarn
 
 # Do not download a Chrome build as part of installing the "puppeteer" package,

Jenkinsfile

@@ -189,11 +189,7 @@ stage('Publish') {
                     """
                     sh "scripts/create-github-release.js"
 
-                    // Publish the updated package to the npm registry.
-                    // Use `npm` rather than `yarn` for publishing.
-                    // See https://github.com/yarnpkg/yarn/pull/3391.
-                    sh "echo '//registry.npmjs.org/:_authToken=${env.NPM_TOKEN}' >> \$HOME/.npmrc"
-                    sh "npm publish --tag ${npmTag}"
+                    sh "NPM_TOKEN=${env.NPM_TOKEN} yarn publish --no-interactive --tag ${npmTag} --new-version=${newPkgVersion}"
                     sh "scripts/wait-for-npm-release.sh ${npmTag}"
 
                     // Deploy the client to cdn.hypothes.is, where the embedded

scripts/wait-for-npm-release.sh

@@ -19,7 +19,7 @@ fi
 expected_version=$(node -p "require('./package.json').version")
 while [ true ]
 do
-  released_version=$(npm show hypothesis dist-tags.$dist_tag)
+  released_version=$(yarn info -s hypothesis dist-tags.$dist_tag)
   if [ "$released_version" = "$expected_version" ]; then
     break
   fi