@codfish/actions 0.0.0-PR-89--65fc512 → 0.0.0-PR-58--24ced07

package/README.md

@@ -73,7 +73,6 @@ OIDC trusted publishing, and automatically comments on PR
 | `tarball`     | Path to pre-built tarball to publish (e.g., '\*.tgz'). When provided, publishes the tarball with --ignore-scripts for security. Recommended for pull_request_target workflows to prevent execution of malicious lifecycle scripts. | No       | -                |
 | `comment`     | Whether to comment on the PR with the published version (true/false)                                                                                                                                                               | No       | `true`           |
 | `comment-tag` | Tag to use for PR comments (for comment identification and updates)                                                                                                                                                                | No       | `npm-publish-pr` |
-| `dev`         | If true, use dev dependency install syntax in the PR comment (e.g. npm install -D, pnpm add -D).                                                                                                                                   | No       | `false`          |
 
 **Outputs:**
 

package/comment/action.yml

@@ -46,7 +46,7 @@ runs:
     - name: Check existing comments
       id: check-comments
       if: inputs.upsert == 'true'
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+      uses: actions/github-script@v8
       with:
         script: |
           try {
@@ -69,7 +69,7 @@ runs:
 
     - name: Update existing comment
       if: steps.check-comments.outputs.comment-id != null
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+      uses: actions/github-script@v8
       with:
         script: |
           try {
@@ -86,7 +86,7 @@ runs:
 
     - name: Create new comment
       if: steps.check-comments.outputs.comment-id == null
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+      uses: actions/github-script@v8
       with:
         script: |
           try {

package/npm-publish-pr/README.md

@@ -267,7 +267,6 @@ The package is published under the `pr` tag, so it won't interfere with your reg
 | `tarball`     | Path to pre-built tarball to publish (e.g., '\*.tgz'). When provided, publishes the tarball with --ignore-scripts for security. Recommended for pull_request_target workflows to prevent execution of malicious lifecycle scripts. | No       | -                |
 | `comment`     | Whether to comment on the PR with the published version (true/false)                                                                                                                                                               | No       | `true`           |
 | `comment-tag` | Tag to use for PR comments (for comment identification and updates)                                                                                                                                                                | No       | `npm-publish-pr` |
-| `dev`         | If true, use dev dependency install syntax in the PR comment (e.g. npm install -D, pnpm add -D).                                                                                                                                   | No       | `false`          |
 
 <!-- end inputs -->
 

package/npm-publish-pr/action.yml

@@ -42,7 +42,7 @@ runs:
   using: composite
 
   steps:
-    - uses: codfish/actions/comment@a5d670e3eacf83aa1e1f906b86b04b8215c17e99 # v3
+    - uses: codfish/actions/comment@v3
       if: inputs.comment == 'true'
       with:
         message: ⏳ Publishing PR version...
@@ -332,7 +332,7 @@ runs:
         PR: ${{ github.event.number }}
         SHA: ${{ github.event.pull_request.head.sha }}
 
-    - uses: codfish/actions/comment@a5d670e3eacf83aa1e1f906b86b04b8215c17e99 # v3
+    - uses: codfish/actions/comment@v3
       if: failure() && inputs.comment == 'true'
       with:
         message: |
@@ -344,7 +344,7 @@ runs:
         upsert: true
         tag: ${{ inputs.comment-tag }}
 
-    - uses: codfish/actions/comment@a5d670e3eacf83aa1e1f906b86b04b8215c17e99 # v3
+    - uses: codfish/actions/comment@v3
       if: success() && inputs.comment == 'true'
       with:
         message: |

package/package.json

@@ -4,7 +4,7 @@
   "description": "Composite GitHub Actions for my projects.",
   "author": "Chris O'Donnell <chris@codfish.dev>",
   "license": "MIT",
-  "version": "0.0.0-PR-89--65fc512",
+  "version": "0.0.0-PR-58--24ced07",
   "repository": {
     "type": "git",
     "url": "https://github.com/codfish/actions.git"
@@ -19,16 +19,27 @@
     "bin",
     "README.md"
   ],
+  "scripts": {
+    "lint": "eslint .",
+    "fix": "eslint . --fix",
+    "format": "prettier --write \"**/*.{json,css,md,yml}\" --config ./node_modules/@codfish/eslint-config/prettier.js",
+    "test": "bash tests/scripts/test-runner.sh",
+    "test:integration": "bash tests/scripts/test-runner.sh integration",
+    "test:unit": "bash tests/scripts/test-runner.sh unit",
+    "docs:generate": "node bin/generate-docs.js",
+    "prepare": "husky"
+  },
   "devDependencies": {
-    "@codfish/eslint-config": "13.1.2",
-    "bats": "1.13.0",
-    "doctoc": "2.3.0",
-    "eslint": "10.1.0",
-    "husky": "9.1.7",
-    "js-yaml": "4.1.1",
-    "lint-staged": "16.4.0",
-    "prettier": "3.8.1"
+    "@codfish/eslint-config": "12.3.0",
+    "bats": "^1.13.0",
+    "doctoc": "^2.2.1",
+    "eslint": "^9.39.2",
+    "husky": "^9.1.7",
+    "js-yaml": "^4.1.0",
+    "lint-staged": "^16.2.7",
+    "prettier": "^3.8.1"
   },
+  "packageManager": "pnpm@10.29.3",
   "commitlint": {
     "extends": [
       "./node_modules/@codfish/eslint-config/commitlint.js"
@@ -42,13 +53,5 @@
       "prettier --write --config ./node_modules/@codfish/eslint-config/prettier.js",
       "doctoc --title '## Table of Contents'"
     ]
-  },
-  "scripts": {
-    "lint": "eslint",
-    "format": "eslint --fix",
-    "test": "bash tests/scripts/test-runner.sh",
-    "test:integration": "bash tests/scripts/test-runner.sh integration",
-    "test:unit": "bash tests/scripts/test-runner.sh unit",
-    "docs:generate": "node bin/generate-docs.js"
   }
 }

package/setup-node-and-install/action.yml

@@ -26,7 +26,7 @@ inputs:
     description:
       Whether to upgrade npm to v11.5.1. This is required for OIDC trusted publishing but can be disabled if you want to
       shave off some run time and you are still using token-based authentication.
-    default: false
+    default: true
 
 outputs:
   node-version:
@@ -83,7 +83,7 @@ runs:
 
     - name: Install pnpm
       if: steps.detect-package-manager.outputs.package-manager == 'pnpm'
-      uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
+      uses: pnpm/action-setup@v4
       id: pnpm-setup
       with:
         run_install: false
@@ -128,7 +128,7 @@ runs:
         INPUT_NODE_VERSION: ${{ inputs.node-version }}
 
     - name: Setup Node.js
-      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      uses: actions/setup-node@v6
       id: setup-node
       with:
         # use detected package manager cache
@@ -156,7 +156,7 @@ runs:
       if:
         steps.detect-package-manager.outputs.lockfile-exists == 'true' &&
         steps.detect-package-manager.outputs.package-manager == 'npm'
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+      uses: actions/cache@v5
       id: cache
       with:
         path: ${{ inputs.working-directory }}/node_modules