@daiyam/artifact-npm 0.6.3 → 0.7.1

package/configs/.github/workflows/publish.yml

@@ -1,20 +1,25 @@
 name: Publish Package
+
 on:
-  workflow_dispatch: null
+  workflow_dispatch: {}
   push:
     tags:
       - v*
+
 permissions:
   id-token: write   # NPM
   contents: write   # Release
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
+          persist-credentials: false
+
       - name: Get Version
         run: |
           # Get the latest tag
@@ -25,10 +30,11 @@ jobs:
           fi
           echo "VERSION=$LATEST_TAG" >> $GITHUB_ENV
           echo "Using version: $LATEST_TAG"
+
       - name: Check Existing Release
         run: |
           # Try to get the release information
-          RELEASE_INFO=$(gh release view ${{ env.VERSION }} --json assets,url 2>/dev/null || echo "")
+          RELEASE_INFO=$(gh release view ${VERSION} --json assets,url 2>/dev/null || echo "")
           if [ ! -z "$RELEASE_INFO" ]; then
             echo "Release exists"
             echo "RELEASE_EXISTS=yes" >> $GITHUB_ENV
@@ -44,19 +50,23 @@ jobs:
           fi
         env:
           GH_TOKEN: ${{ github.token }}
+
       - name: Download Existing TGZ
         if: env.RELEASE_EXISTS == 'yes' && env.TGZ_URL != ''
         run: |
-          gh api ${{ env.TGZ_URL }} --header 'Accept: application/octet-stream' > ${{ env.TGZ_NAME }}
-          echo "CHECKSUM=$(sha256sum ${{ env.TGZ_NAME }} | cut -d ' ' -f 1)" >> $GITHUB_ENV
+          gh api ${TGZ_URL} --header 'Accept: application/octet-stream' > ${TGZ_NAME}
+          echo "CHECKSUM=$(sha256sum ${TGZ_NAME} | cut -d ' ' -f 1)" >> $GITHUB_ENV
         env:
           GH_TOKEN: ${{ github.token }}
+
       - name: Setup Node.js
         if: env.RELEASE_EXISTS == 'no'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version: "24"
+          node-version: latest
           registry-url: https://registry.npmjs.org
+          package-manager-cache: false
+
       - name: Build
         if: env.RELEASE_EXISTS == 'no'
         run: |
@@ -67,18 +77,20 @@ jobs:
           echo "TGZ_NAME=$TGZ_NAME" >> $GITHUB_ENV
           echo "CHECKSUM=$CHECKSUM" >> $GITHUB_ENV
           echo "$CHECKSUM" > "$TGZ_NAME.sha256"
+
       - name: Get Changelog
         if: env.RELEASE_EXISTS == 'no'
         run: |
-          CHANGELOG_ENTRY=$(node .github/scripts/get-changelog.js ${{ env.VERSION }})
+          CHANGELOG_ENTRY=$(node .github/scripts/get-changelog.js ${VERSION})
           # Properly handle multiline output in GitHub Actions
           EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
           echo "CHANGELOG_ENTRY<<$EOF" >> $GITHUB_ENV
           echo "$CHANGELOG_ENTRY" >> $GITHUB_ENV
           echo "$EOF" >> $GITHUB_ENV
+
       - name: Release
         if: env.RELEASE_EXISTS == 'no'
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
         with:
           files: |
             ${{ env.TGZ_NAME }}
@@ -95,5 +107,6 @@ jobs:
             ```
             ${{ env.CHECKSUM }}
             ```
+
       - name: Publish to NPM Registry
-        run: npm publish --access=public
+        run: npm publish --provenance --access=public

package/configs/.github/zizmor.yml

@@ -0,0 +1,5 @@
+rules:
+  superfluous-actions:
+    ignore:
+      # allows `softprops/action-gh-release` action
+      - publish.yml:93

package/configs/package.json

@@ -3,11 +3,6 @@
 		"release": "release-it"
 	},
 	"devDependencies": {
-		"release-it": "^19.2.4"
-	},
-	"overrides": {
-		"release-it": {
-			"undici": "^6.24.1"
-		}
+		"release-it": "20.0.0-1"
 	}
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@daiyam/artifact-npm",
-	"version": "0.6.3",
+	"version": "0.7.1",
 	"description": "The configuration to create node modules and publish them on npm.",
 	"author": {
 		"name": "Baptiste Augrain",
@@ -31,5 +31,5 @@
 		"project-template",
 		"scaffold"
 	],
-	"gitHead": "0e08b728d3788009c0c81f21b0e06d8682964c82"
+	"gitHead": "6c3e6970d79755e6a60f51a0653fc66702973eb2"
 }