@daiyam/artifact-npm 0.7.0 → 0.7.1

package/configs/.github/workflows/publish.yml

@@ -1,12 +1,15 @@
 name: Publish Package
+
 on:
-  workflow_dispatch: null
+  workflow_dispatch: {}
   push:
     tags:
       - v*
+
 permissions:
   id-token: write   # NPM
   contents: write   # Release
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -16,6 +19,7 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
+
       - name: Get Version
         run: |
           # Get the latest tag
@@ -26,10 +30,11 @@ jobs:
           fi
           echo "VERSION=$LATEST_TAG" >> $GITHUB_ENV
           echo "Using version: $LATEST_TAG"
+
       - name: Check Existing Release
         run: |
           # Try to get the release information
-          RELEASE_INFO=$(gh release view ${{ env.VERSION }} --json assets,url 2>/dev/null || echo "")
+          RELEASE_INFO=$(gh release view ${VERSION} --json assets,url 2>/dev/null || echo "")
           if [ ! -z "$RELEASE_INFO" ]; then
             echo "Release exists"
             echo "RELEASE_EXISTS=yes" >> $GITHUB_ENV
@@ -45,20 +50,23 @@ jobs:
           fi
         env:
           GH_TOKEN: ${{ github.token }}
+
       - name: Download Existing TGZ
         if: env.RELEASE_EXISTS == 'yes' && env.TGZ_URL != ''
         run: |
-          gh api ${{ env.TGZ_URL }} --header 'Accept: application/octet-stream' > ${{ env.TGZ_NAME }}
-          echo "CHECKSUM=$(sha256sum ${{ env.TGZ_NAME }} | cut -d ' ' -f 1)" >> $GITHUB_ENV
+          gh api ${TGZ_URL} --header 'Accept: application/octet-stream' > ${TGZ_NAME}
+          echo "CHECKSUM=$(sha256sum ${TGZ_NAME} | cut -d ' ' -f 1)" >> $GITHUB_ENV
         env:
           GH_TOKEN: ${{ github.token }}
+
       - name: Setup Node.js
         if: env.RELEASE_EXISTS == 'no'
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version: "24"
+          node-version: latest
           registry-url: https://registry.npmjs.org
           package-manager-cache: false
+
       - name: Build
         if: env.RELEASE_EXISTS == 'no'
         run: |
@@ -69,15 +77,17 @@ jobs:
           echo "TGZ_NAME=$TGZ_NAME" >> $GITHUB_ENV
           echo "CHECKSUM=$CHECKSUM" >> $GITHUB_ENV
           echo "$CHECKSUM" > "$TGZ_NAME.sha256"
+
       - name: Get Changelog
         if: env.RELEASE_EXISTS == 'no'
         run: |
-          CHANGELOG_ENTRY=$(node .github/scripts/get-changelog.js ${{ env.VERSION }})
+          CHANGELOG_ENTRY=$(node .github/scripts/get-changelog.js ${VERSION})
           # Properly handle multiline output in GitHub Actions
           EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
           echo "CHANGELOG_ENTRY<<$EOF" >> $GITHUB_ENV
           echo "$CHANGELOG_ENTRY" >> $GITHUB_ENV
           echo "$EOF" >> $GITHUB_ENV
+
       - name: Release
         if: env.RELEASE_EXISTS == 'no'
         uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
@@ -97,5 +107,6 @@ jobs:
             ```
             ${{ env.CHECKSUM }}
             ```
+
       - name: Publish to NPM Registry
-        run: npm publish --access=public
+        run: npm publish --provenance --access=public

package/configs/.github/zizmor.yml

@@ -2,4 +2,4 @@ rules:
   superfluous-actions:
     ignore:
       # allows `softprops/action-gh-release` action
-      - publish.yml:83
+      - publish.yml:93

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@daiyam/artifact-npm",
-	"version": "0.7.0",
+	"version": "0.7.1",
 	"description": "The configuration to create node modules and publish them on npm.",
 	"author": {
 		"name": "Baptiste Augrain",
@@ -31,5 +31,5 @@
 		"project-template",
 		"scaffold"
 	],
-	"gitHead": "0ca975f24ab580f624d50e16041de3e48014f5cf"
+	"gitHead": "6c3e6970d79755e6a60f51a0653fc66702973eb2"
 }