docs: Mention gh publishing and provenance tracking in changelog #28

	# This workflow will do a clean installation of node dependencies, cache/restore them, build the source code and run tests across different versions of node
	# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

	name: Node.js CI

	on: [push, pull_request]

	jobs:
	test:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	node-version: [lts/*, latest]
	# See supported Node.js release schedule at https://nodejs.org/en/about/releases/
	steps:
	- uses: actions/checkout@v4
	- name: Use Node.js ${{ matrix.node-version }}
	uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node-version }}
	cache: 'npm'
	- run: npm ci
	- run: npm run build --if-present
	- run: npm test
	publish:
	name: Publish
	needs: [test]
	if: startsWith(github.ref, 'refs/tags/v')
	runs-on: ubuntu-latest
	permissions:
	contents: write
	id-token: write
	steps:
	- name: Checkout the repository
	uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: lts/*
	registry-url: https://registry.npmjs.org/
	- name: Install dependencies
	run: npm ci
	- name: Publish package to NPM
	run: npm publish --provenance
	env:
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback