fix(ci): set up OIDC machine, avoid pushing incomplete version commits

tools/publish

@@ -68,29 +68,36 @@ echo ""
 echo "-----> BUMP VERSION"
 echo ""
 
-npm version $VERSION_ARGS
-
-git push && git push --tags
+npm version $VERSION_ARGS --no-git-tag-version
 
 NEW_VERSION=$(cat package.json | jq -r .version)
 echo "New Version: $NEW_VERSION"
 
+echo ""
+echo "-----> GENERATE DOCS"
+echo ""
+
 npm install
 
 npm run generate-docs
 
-git add .
-
-git commit -am "chore(${NEW_VERSION}): generate docs"
-
-git push
-
 echo ""
 echo "-----> PUSH TO NPM"
 echo ""
 
 npm publish --tag $DIST_TAG
 
+echo ""
+echo "-----> PUSH TO GIT"
+echo ""
+
+git add .
+
+git commit -am "chore(v${NEW_VERSION}): bump version and generate docs"
+
+git tag "v${NEW_VERSION}"
+
+git push && git push --tags
 
 echo ""
 echo "-----> Done!"