update publish flow

Author: RubenHalman

.github/workflows/publish.yml

@@ -8,25 +8,30 @@ on:
 permissions:
   contents: read
   id-token: write
-  security-events: write # Added for Snyk SARIF upload
+  security-events: write
 
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 0 # Needed for Snyk
+          fetch-depth: 0
 
       - uses: actions/setup-node@v4
         with:
           node-version: "20"
           registry-url: "https://registry.npmjs.org"
+          cache: "npm"
 
       - name: Update npm
         run: npm install -g npm@latest
 
-      - run: npm ci
-      - run: npm run build
+      - name: Install dependencies
+        run: npm ci
 
-      - run: cd out && npm publish --access public --provenance
+      - name: Build
+        run: npm run build
+
+      - name: Publish to npm (trusted publishing)
+        run: cd out && npm publish --access public --provenance