Ensure the releases are using the correct git hash to release from (#75)

.github/workflows/release-and-publish.yml

@@ -22,6 +22,7 @@ jobs:
       contents: write
     outputs:
       npm_package_version: ${{ steps.update_version.outputs.version_number }}
+      release_git_sha: ${{ steps.update_version.outputs.release_git_sha }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -66,6 +67,7 @@ jobs:
           echo "Created version ${new_version}"
           git push && git push --tags
           echo "version_number=$new_version" >> $GITHUB_OUTPUT
+          echo "release_git_sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
 
       - id: pack_tar
         run: |
@@ -86,6 +88,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.create-release.outputs.release_git_sha }}
       # setup .npmrc file to publish to npm
       - uses: actions/setup-node@v4
         with:
@@ -107,6 +111,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.create-release.outputs.release_git_sha }}
       - uses: actions/setup-node@v4
         with:
           registry-url: https://npm.pkg.github.com/