fix: ensure tags are signed (#70)

.github/workflows/release-and-publish.yml

@@ -48,15 +48,17 @@ jobs:
           set -e
 
           if [[ ${{ inputs.prerelease }} ]]; then
+            echo "creating prerelease version"
             # save the value would be created, then remove all changes
             current_version=$(npm pkg get version | sed 's/"//g')
             if [[ current_version == *${PREID}* ]]; then
-              echo "creating prerelease version"
+              echo "first prerelease version"
               # if the current version is a prerelease, we can just bump the prerelease number
-              new_version=$(npm version prerelease)
+              new_version=$(npm version prerelease --sign-git-tag)
             else
+              echo "subsequent prerelease version"
               # if the current version is not a prerelease, we need to add a prerelease number
-              new_version=$(npm version --preid=${PREID} pre${{ inputs.semver_type }})
+              new_version=$(npm version --preid=${PREID} pre${{ inputs.semver_type }} --sign-git-tag)
             fi
           else
             echo "creating new release"