Work around yarn not yet supporting provenance

Author: nbudin

.github/workflows/release.yml

@@ -22,6 +22,7 @@ jobs:
           node-version: ${{ steps.node-version.outputs.node-version }}
           registry-url: 'https://registry.npmjs.org'
       - run: yarn
-      - run: yarn npm publish --provenance --access public
+      - run: yarn pack
+      - run: npm publish package.tgz --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -14,3 +14,4 @@
 /coverage
 /test/html_reports
 /test/reports
+/package.tgz