@codfish/actions 0.0.0-PR-92--d5c21f1 → 0.0.0-PR-90--2cf8276

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.md +1 -1
  2. package/comment/action.yml +3 -3
  3. package/npm-publish-pr/action.yml +3 -3
  4. package/package.json +8 -8
  5. package/setup-node-and-install/README.md +1 -1
  6. package/setup-node-and-install/action.yml +3 -3
package/README.md CHANGED
@@ -119,7 +119,7 @@ intelligent caching, and version detection via input, .node-version, .nvmrc, or
119
119
  | `install-options` | Extra command-line options to pass to npm/pnpm/yarn install. | No | - |
120
120
  | `working-directory` | Directory containing package.json and lockfile. | No | `.` |
121
121
  | `registry-url` | Optional registry URL to configure for publishing (e.g. "https://registry.npmjs.org/"). Creates .npmrc with NODE_AUTH_TOKEN placeholder. NOT recommended if using semantic-release (it handles auth independently). Only needed for publishing with manual npm publish or other non-semantic-release workflows. | No | - |
122
- | `upgrade-npm` | Whether to upgrade npm to v11.5.1. This is required for OIDC trusted publishing but can be disabled if you want to shave off some run time and you are still using token-based authentication. | No | - |
122
+ | `upgrade-npm` | Whether to upgrade npm to v11.5.1. This is required for OIDC trusted publishing but can be disabled if you want to shave off some run time and you are still using token-based authentication. | No | `true` |
123
123
 
124
124
  **Outputs:**
125
125
 
package/comment/action.yml CHANGED
@@ -46,7 +46,7 @@ runs:
46
46
  - name: Check existing comments
47
47
  id: check-comments
48
48
  if: inputs.upsert == 'true'
49
- uses: actions/github-script@v8
49
+ uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
50
50
  with:
51
51
  script: |
52
52
  try {
@@ -69,7 +69,7 @@ runs:
69
69
 
70
70
  - name: Update existing comment
71
71
  if: steps.check-comments.outputs.comment-id != null
72
- uses: actions/github-script@v8
72
+ uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
73
73
  with:
74
74
  script: |
75
75
  try {
@@ -86,7 +86,7 @@ runs:
86
86
 
87
87
  - name: Create new comment
88
88
  if: steps.check-comments.outputs.comment-id == null
89
- uses: actions/github-script@v8
89
+ uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
90
90
  with:
91
91
  script: |
92
92
  try {
package/npm-publish-pr/action.yml CHANGED
@@ -42,7 +42,7 @@ runs:
42
42
  using: composite
43
43
 
44
44
  steps:
45
- - uses: codfish/actions/comment@v3
45
+ - uses: codfish/actions/comment@a5d670e3eacf83aa1e1f906b86b04b8215c17e99 # v3
46
46
  if: inputs.comment == 'true'
47
47
  with:
48
48
  message: ⏳ Publishing PR version...
@@ -332,7 +332,7 @@ runs:
332
332
  PR: ${{ github.event.number }}
333
333
  SHA: ${{ github.event.pull_request.head.sha }}
334
334
 
335
- - uses: codfish/actions/comment@v3
335
+ - uses: codfish/actions/comment@a5d670e3eacf83aa1e1f906b86b04b8215c17e99 # v3
336
336
  if: failure() && inputs.comment == 'true'
337
337
  with:
338
338
  message: |
@@ -344,7 +344,7 @@ runs:
344
344
  upsert: true
345
345
  tag: ${{ inputs.comment-tag }}
346
346
 
347
- - uses: codfish/actions/comment@v3
347
+ - uses: codfish/actions/comment@a5d670e3eacf83aa1e1f906b86b04b8215c17e99 # v3
348
348
  if: success() && inputs.comment == 'true'
349
349
  with:
350
350
  message: |
package/package.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "description": "Composite GitHub Actions for my projects.",
5
5
  "author": "Chris O'Donnell <chris@codfish.dev>",
6
6
  "license": "MIT",
7
- "version": "0.0.0-PR-92--d5c21f1",
7
+ "version": "0.0.0-PR-90--2cf8276",
8
8
  "repository": {
9
9
  "type": "git",
10
10
  "url": "https://github.com/codfish/actions.git"
@@ -21,13 +21,13 @@
21
21
  ],
22
22
  "devDependencies": {
23
23
  "@codfish/eslint-config": "13.1.2",
24
- "bats": "^1.13.0",
25
- "doctoc": "^2.3.0",
26
- "eslint": "^10.0.3",
27
- "husky": "^9.1.7",
28
- "js-yaml": "^4.1.0",
29
- "lint-staged": "^16.3.2",
30
- "prettier": "^3.8.1"
24
+ "bats": "1.13.0",
25
+ "doctoc": "2.3.0",
26
+ "eslint": "10.1.0",
27
+ "husky": "9.1.7",
28
+ "js-yaml": "4.1.1",
29
+ "lint-staged": "16.4.0",
30
+ "prettier": "3.8.1"
31
31
  },
32
32
  "commitlint": {
33
33
  "extends": [
package/setup-node-and-install/README.md CHANGED
@@ -91,7 +91,7 @@ When multiple version specification methods are present, the action uses this pr
91
91
  | `install-options` | Extra command-line options to pass to npm/pnpm/yarn install. | No | - |
92
92
  | `working-directory` | Directory containing package.json and lockfile. | No | `.` |
93
93
  | `registry-url` | Optional registry URL to configure for publishing (e.g. "https://registry.npmjs.org/"). Creates .npmrc with NODE_AUTH_TOKEN placeholder. NOT recommended if using semantic-release (it handles auth independently). Only needed for publishing with manual npm publish or other non-semantic-release workflows. | No | - |
94
- | `upgrade-npm` | Whether to upgrade npm to v11.5.1. This is required for OIDC trusted publishing but can be disabled if you want to shave off some run time and you are still using token-based authentication. | No | - |
94
+ | `upgrade-npm` | Whether to upgrade npm to v11.5.1. This is required for OIDC trusted publishing but can be disabled if you want to shave off some run time and you are still using token-based authentication. | No | `true` |
95
95
 
96
96
  <!-- end inputs -->
97
97
 
package/setup-node-and-install/action.yml CHANGED
@@ -83,7 +83,7 @@ runs:
83
83
 
84
84
  - name: Install pnpm
85
85
  if: steps.detect-package-manager.outputs.package-manager == 'pnpm'
86
- uses: pnpm/action-setup@v5
86
+ uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
87
87
  id: pnpm-setup
88
88
  with:
89
89
  run_install: false
@@ -128,7 +128,7 @@ runs:
128
128
  INPUT_NODE_VERSION: ${{ inputs.node-version }}
129
129
 
130
130
  - name: Setup Node.js
131
- uses: actions/setup-node@v6
131
+ uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
132
132
  id: setup-node
133
133
  with:
134
134
  # use detected package manager cache
@@ -156,7 +156,7 @@ runs:
156
156
  if:
157
157
  steps.detect-package-manager.outputs.lockfile-exists == 'true' &&
158
158
  steps.detect-package-manager.outputs.package-manager == 'npm'
159
- uses: actions/cache@v5
159
+ uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
160
160
  id: cache
161
161
  with:
162
162
  path: ${{ inputs.working-directory }}/node_modules