Merge branch 'main' into release-please--branches--main

.kokoro/release/publish.cfg

@@ -25,3 +25,15 @@ env_vars: {
   key: "TRAMPOLINE_BUILD_FILE"
   value: "github/google-cloud-node/.kokoro/release/publish.sh"
 }
+
+# Store the packages we uploaded to npmjs.org and their corresponding
+# package-lock.jsons in Placer.  That way, we have a record of exactly
+# what we published, and which version of which tools we used to publish
+# it, which we can use to generate SBOMs and attestations.
+action {
+  define_artifacts {
+    regex: "github/google-cloud-node/**/*.tgz"
+    regex: "github/google-cloud-node/**/package-lock.json"
+    strip_prefix: "github/google-cloud-node"
+  }
+}