@natlibfi/issn-verify 1.0.0 → 1.0.1-alpha-2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
# NatLibFi/Melinda maintenance strategy
|
|
2
|
+
# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
|
|
3
|
+
|
|
4
|
+
version: 2
|
|
5
|
+
updates:
|
|
6
|
+
# Maintain dependencies for GitHub Actions
|
|
7
|
+
- package-ecosystem: "github-actions"
|
|
8
|
+
directory: "/"
|
|
9
|
+
schedule:
|
|
10
|
+
interval: "daily"
|
|
11
|
+
time: "06:30"
|
|
12
|
+
timezone: "Europe/Helsinki"
|
|
13
|
+
target-branch: "dependencies"
|
|
14
|
+
|
|
15
|
+
# Minor updates to npm production dependencies daily
|
|
16
|
+
- package-ecosystem: "npm"
|
|
17
|
+
directory: "/"
|
|
18
|
+
schedule:
|
|
19
|
+
interval: "daily"
|
|
20
|
+
time: "06:45"
|
|
21
|
+
timezone: "Europe/Helsinki"
|
|
22
|
+
versioning-strategy: lockfile-only
|
|
23
|
+
allow:
|
|
24
|
+
- dependency-type: "production"
|
|
25
|
+
target-branch: "dependencies"
|
|
26
|
+
|
|
27
|
+
# Major updates to npm dependencies weekly @tuesday
|
|
28
|
+
# Not possible yet https://github.com/dependabot/dependabot-core/issues/1778
|
|
29
|
+
# - package-ecosystem: "npm"
|
|
30
|
+
# directory: "/"
|
|
31
|
+
# schedule:
|
|
32
|
+
# interval: "weekly"
|
|
33
|
+
# day: "tuesday"
|
|
34
|
+
# time: "07:00"
|
|
35
|
+
# timezone: "Europe/Helsinki"
|
|
36
|
+
# versioning-strategy: increase-if-necessary
|
|
37
|
+
# labels:
|
|
38
|
+
# - "npm major dependencies"
|
|
39
|
+
# reviewers:
|
|
40
|
+
# - "natlibfi/melinda-js-lead"
|
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
# Melinda node tests
|
|
2
|
+
|
|
3
|
+
name: Melinda-node-tests
|
|
4
|
+
|
|
5
|
+
on: push
|
|
6
|
+
|
|
7
|
+
jobs:
|
|
8
|
+
build-node-versions:
|
|
9
|
+
name: Node version matrix
|
|
10
|
+
runs-on: ubuntu-latest
|
|
11
|
+
|
|
12
|
+
strategy:
|
|
13
|
+
matrix:
|
|
14
|
+
node-version: [16.x, 18.x, 19.x]
|
|
15
|
+
# See supported Node.js release schedule at https://nodejs.org/en/about/releases/
|
|
16
|
+
|
|
17
|
+
steps:
|
|
18
|
+
- name: Checkout the code
|
|
19
|
+
uses: actions/checkout@v3
|
|
20
|
+
- name: Use Node.js ${{ matrix.node-version }}
|
|
21
|
+
uses: actions/setup-node@v3
|
|
22
|
+
with:
|
|
23
|
+
node-version: ${{ matrix.node-version }}
|
|
24
|
+
cache: 'npm'
|
|
25
|
+
env:
|
|
26
|
+
NPM_CONFIG_IGNORE_SCRIPTS: true
|
|
27
|
+
- run: npm i -g npm@latest
|
|
28
|
+
- run: npm audit --package-lock-only --production --audit-level=high
|
|
29
|
+
- run: npm i
|
|
30
|
+
- run: npm test
|
|
31
|
+
- run: npm run build --if-present
|
|
32
|
+
|
|
33
|
+
njsscan:
|
|
34
|
+
name: Njsscan-check
|
|
35
|
+
runs-on: ubuntu-latest
|
|
36
|
+
|
|
37
|
+
steps:
|
|
38
|
+
- name: Checkout the code
|
|
39
|
+
uses: actions/checkout@v3
|
|
40
|
+
- name: nodejsscan scan
|
|
41
|
+
id: njsscan
|
|
42
|
+
uses: ajinabraham/njsscan-action@master
|
|
43
|
+
with:
|
|
44
|
+
args: '.'
|
|
45
|
+
|
|
46
|
+
license-scan:
|
|
47
|
+
name: License compliance check
|
|
48
|
+
runs-on: ubuntu-latest
|
|
49
|
+
|
|
50
|
+
steps:
|
|
51
|
+
- uses: actions/checkout@v3
|
|
52
|
+
- uses: mikaelvesavuori/license-compliance-action@v1.0.2
|
|
53
|
+
with:
|
|
54
|
+
exclude_pattern: /^@natlibfi/
|
|
55
|
+
|
|
56
|
+
publish:
|
|
57
|
+
runs-on: ubuntu-latest
|
|
58
|
+
needs: [build-node-versions, njsscan]
|
|
59
|
+
if: contains(github.ref, 'refs/tags/')
|
|
60
|
+
|
|
61
|
+
steps:
|
|
62
|
+
- uses: actions/checkout@v3
|
|
63
|
+
# Setup .npmrc file to publish to npm
|
|
64
|
+
- uses: actions/setup-node@v3
|
|
65
|
+
with:
|
|
66
|
+
node-version: '18.x'
|
|
67
|
+
registry-url: 'https://registry.npmjs.org'
|
|
68
|
+
- run: npm ci
|
|
69
|
+
- run: npm publish
|
|
70
|
+
env:
|
|
71
|
+
NODE_AUTH_TOKEN: ${{ secrets.ISSN_VERIFY_NPM_TOKEN }}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@natlibfi/issn-verify",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.1-alpha-2",
|
|
4
4
|
"homepage": "https://github.com/malantonio/issn-verify-js",
|
|
5
5
|
"bugs": {
|
|
6
6
|
"url": "https://github.com/malantonio/issn-verify-js/issues"
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
},
|
|
20
20
|
"dependencies": {},
|
|
21
21
|
"devDependencies": {
|
|
22
|
-
"tape": "^5.
|
|
22
|
+
"tape": "^5.6.6"
|
|
23
23
|
},
|
|
24
24
|
"scripts": {
|
|
25
25
|
"test": "node test/test.js"
|