@hexonet/semantic-release-whmcs 5.0.5 → 5.0.7

package/.github/workflows/auto-merge-dependabot-pr.yml

@@ -0,0 +1,36 @@
+name: Dependabot auto-merge
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+
+jobs:
+  tests:
+    uses: ./.github/workflows/test.yml
+    secrets: inherit
+    permissions:
+      contents: read
+      security-events: write
+
+  dependabot:
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    name: Auto-merge Dependabot PR
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
+    needs: tests
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: Enable auto-merge for Dependabot PRs
+        # (fixes, features but not major upgrades!)
+        if: ${{steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'}}
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

package/.github/workflows/release.yml

@@ -6,8 +6,12 @@ on:
 
 jobs:
   release:
-    name: Release @ ubuntu-latest
-    runs-on: ubuntu-latest
+    name: Release
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
+    permissions:
+      contents: write
+      issues: write
+      deployments: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -15,7 +19,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup NodeJS ${{ vars.RTLDEV_MW_CI_NODE_VERSION }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: "${{ vars.RTLDEV_MW_CI_NODE_VERSION }}"
           check-latest: true
@@ -24,8 +28,8 @@ jobs:
         run: npm ci
       - name: Release
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
-          GITHUB_REPO: ${{ secrets.GH_REPO }}
+          GITHUB_TOKEN: ${{ secrets.RTLDEV_MW_CI_TOKEN }}
+          GITHUB_REPO: ${{ vars.GH_REPO }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          RTLDEV_MW_NOTIFICATION_URI: ${{ secrets.RTLDEV_MW_NOTIFICATION_URI }}
+          RTLDEV_MW_NOTIFICATION_URI: ${{ secrets.RTLDEV_MW_CI_NOTIFICATION_URI }}
         run: npx semantic-release

package/.github/workflows/test.yml

@@ -1,18 +1,13 @@
 name: Lint codebase & Execute tests
 on:
-  push:
-    branches:
-      - dependabot/** #branches are generated by https://github.com/dependabot
-
-  pull_request:
-    types:
-      - opened
-      - synchronize
+  workflow_call:
 
 jobs:
   test:
-    name: Test @ ubuntu-latest
-    runs-on: ubuntu-latest
+    name: 🧪 Testing & Testing
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: ${{ fromJson(vars.RTLDEV_MW_CI_NODE_MATRIX) }}
@@ -21,7 +16,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup NodeJS ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           cache: npm
@@ -41,16 +36,19 @@ jobs:
         run: npm run test
 
   perform_codeql_analysis:
-    name: Perform CodeQL Analysis
-    runs-on: ubuntu-latest
+    name: 🧪 CodeQL Analysis
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
     needs: test
+    permissions:
+      contents: read
+      security-events: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-      - name: Setup NodeJS ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+      - name: Setup NodeJS ${{ vars.RTLDEV_MW_CI_NODE_VERSION }}
+        uses: actions/setup-node@v4
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version: ${{ vars.RTLDEV_MW_CI_NODE_VERSION }}
           cache: npm
       - name: Install dependencies
         run: npm ci

package/HISTORY.md

@@ -1,3 +1,18 @@
+## [5.0.7](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/compare/v5.0.6...v5.0.7) (2023-11-10)
+
+
+### Bug Fixes
+
+* **deps:** bump puppeteer from 21.4.1 to 21.5.0 ([ae157a2](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/commit/ae157a2799f644cd80769b6b8f703dcf8cc3e65c))
+* **deps:** bump puppeteer from 21.5.0 to 21.5.1 ([f2df862](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/commit/f2df86223c1e208ed43d6028354852fe47ae95f2))
+
+## [5.0.6](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/compare/v5.0.5...v5.0.6) (2023-10-31)
+
+
+### Bug Fixes
+
+* **deps:** bump puppeteer from 21.4.0 to 21.4.1 ([8f29e2c](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/commit/8f29e2cd9ab2673b56d41b14ab7d1eafa48d25eb))
+
 ## [5.0.5](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/compare/v5.0.4...v5.0.5) (2023-10-23)
 
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hexonet/semantic-release-whmcs",
   "description": "`semantic-release` plugin for auto-publishing on WHMCS marketplace",
-  "version": "5.0.5",
+  "version": "5.0.7",
   "private": false,
   "type": "module",
   "publishConfig": {