Update GitHub actions (versions / ergonomics).

.github/workflows/check-branch.yaml

@@ -0,0 +1,6 @@
+# Run tests on pushes to all branches.
+name: Check Branch
+on: [push]
+jobs:
+  test:
+    uses: ./.github/workflows/test.yaml

.github/workflows/publish-to-npm.yaml

@@ -0,0 +1,18 @@
+# Publish package to npm whenever a release is pushed.
+#  See https://docs.github.com/en/actions/publishing-packages/publishing-nodejs-packages
+name: Publish to npm
+on: [workflow_call]
+jobs:
+  main:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '20.x'
+          registry-url: 'https://registry.npmjs.org'
+      - run: npm ci
+      - run: npm publish
+        env:
+          # The secrets should be implicitly passed via “secrets: inherit”.
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/publish.yaml

@@ -0,0 +1,12 @@
+# Run tests and publish to all registries if successful.
+name: Publish
+on:
+  release:
+    types: [published]
+jobs:
+  test:
+    uses: ./.github/workflows/test.yaml
+  publish-to-npm:
+    needs: test
+    uses: ./.github/workflows/publish-to-npm.yaml
+    secrets: inherit

.github/workflows/push.yml → .github/workflows/test.yaml

@@ -1,17 +1,16 @@
-name: Push
-on: [push]
+# Test flow triggered by other workflows.
+name: Test
+on: [workflow_call]
 jobs:
-  test:
+  main:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v3
         with:
-          node-version: '18.x'
+          node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
-      - run: npm install
+      - run: npm ci
       - run: npm run lint
       - run: npm start &
       - run: sleep 2