chore: automate version bump from release tag in publish workflow

.github/workflows/release.yml

@@ -1,6 +1,3 @@
-# This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
-# For more information see: https://help.github.com/actions/language-and-framework-guides/publishing-nodejs-packages
-
 name: NPM Publish
 
 on:
@@ -9,7 +6,7 @@ on:
 
 permissions:
   id-token: write # Required for OIDC
-  contents: read
+  contents: write # Required for pushing version bump commit
 
 jobs:
   publish-npm:
@@ -21,7 +18,16 @@ jobs:
           node-version: 22
           registry-url: https://registry.npmjs.org/
       - run: npm install -g npm@latest
-      - run: npm ci --ignore-scripts --no-fund --no-audit
+      - run: npm install --ignore-scripts --no-audit --no-fund
+      - name: Bump version from release tag
+        run: |
+          VERSION=${GITHUB_REF_NAME#v}
+          npm version $VERSION --no-git-tag-version
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add package.json package-lock.json
+          git commit -m "chore: bump version to $VERSION"
+          git push origin HEAD:${{ github.event.repository.default_branch }}
       - run: npm test
       - run: npm run build
       - run: npm publish --access public