@hexonet/semantic-release-whmcs 5.0.6 → 5.0.8

package/.github/workflows/auto-merge-dependabot-pr.yml

@@ -1,19 +1,26 @@
 name: Dependabot auto-merge
-on: pull_request
-
-permissions:
-  contents: write
-  pull-requests: write
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
 
 jobs:
   tests:
     uses: ./.github/workflows/test.yml
     secrets: inherit
+    permissions:
+      contents: read
+      security-events: write
+
   dependabot:
-    name: "Auto-merge Dependabot PR"
-    runs-on: ubuntu-latest
-    needs: tests
     if: ${{ github.actor == 'dependabot[bot]' }}
+    name: Auto-merge Dependabot PR
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
+    needs: tests
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: Dependabot metadata
         id: metadata

package/.github/workflows/release.yml

@@ -6,8 +6,12 @@ on:
 
 jobs:
   release:
-    name: Release @ ubuntu-latest
-    runs-on: ubuntu-latest
+    name: Release
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
+    permissions:
+      contents: write
+      issues: write
+      deployments: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -24,8 +28,8 @@ jobs:
         run: npm ci
       - name: Release
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
-          GITHUB_REPO: ${{ secrets.GH_REPO }}
+          GITHUB_TOKEN: ${{ secrets.RTLDEV_MW_CI_TOKEN }}
+          GITHUB_REPO: ${{ vars.GH_REPO }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          RTLDEV_MW_NOTIFICATION_URI: ${{ secrets.RTLDEV_MW_NOTIFICATION_URI }}
+          RTLDEV_MW_NOTIFICATION_URI: ${{ secrets.RTLDEV_MW_CI_NOTIFICATION_URI }}
         run: npx semantic-release

package/.github/workflows/test.yml

@@ -1,15 +1,13 @@
 name: Lint codebase & Execute tests
 on:
   workflow_call:
-  pull_request:
-    types:
-      - opened
-      - synchronize
 
 jobs:
   test:
     name: 🧪 Testing & Testing
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: ${{ fromJson(vars.RTLDEV_MW_CI_NODE_MATRIX) }}
@@ -39,8 +37,11 @@ jobs:
 
   perform_codeql_analysis:
     name: 🧪 CodeQL Analysis
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.RTLDEV_MW_CI_OS }}
     needs: test
+    permissions:
+      contents: read
+      security-events: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4

package/CONTRIBUTING.md

@@ -7,7 +7,7 @@ Please note we have a code of conduct, please follow it in all your interactions
 
 ## Pull Request Process
 
-Read [here](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/wiki/Development-Guide#pull-request-pr-procedure).
+Please fork the repository and address your PR finally to us. Thanks so much for contributing!
 
 ## Code of Conduct
 

package/HISTORY.md

@@ -1,3 +1,18 @@
+## [5.0.8](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/compare/v5.0.7...v5.0.8) (2023-11-10)
+
+
+### Bug Fixes
+
+* **security fix:** for axios ([2aba46f](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/commit/2aba46fd8419008fe04295acc08fc2e3a1664c83))
+
+## [5.0.7](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/compare/v5.0.6...v5.0.7) (2023-11-10)
+
+
+### Bug Fixes
+
+* **deps:** bump puppeteer from 21.4.1 to 21.5.0 ([ae157a2](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/commit/ae157a2799f644cd80769b6b8f703dcf8cc3e65c))
+* **deps:** bump puppeteer from 21.5.0 to 21.5.1 ([f2df862](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/commit/f2df86223c1e208ed43d6028354852fe47ae95f2))
+
 ## [5.0.6](https://github.com/centralnicgroup-opensource/rtldev-middleware-semantic-release-whmcs/compare/v5.0.5...v5.0.6) (2023-10-31)
 
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hexonet/semantic-release-whmcs",
   "description": "`semantic-release` plugin for auto-publishing on WHMCS marketplace",
-  "version": "5.0.6",
+  "version": "5.0.8",
   "private": false,
   "type": "module",
   "publishConfig": {
@@ -67,7 +67,9 @@
   },
   "overrides": {
     "http-cache-semantics": "^4.1.1",
-    "word-wrap": "npm:@aashutoshrathi/word-wrap@1.2.6"
+    "word-wrap": "npm:@aashutoshrathi/word-wrap@1.2.6",
+    "axios": "^1.6.0",
+    "glob-parent": "^5.1.2"
   },
   "devDependencies": {
     "@semantic-release/changelog": "^6.0.3",