@natlibfi/melinda-rest-api-commons 2.3.0-alpha.1 → 2.3.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
# With this line @NatLibFi/melinda-js-lead owns any files in the /.github/
|
|
2
|
+
# directory at the root of the repository and any of its
|
|
3
|
+
# subdirectories.
|
|
4
|
+
/.github/ @NatLibFi/melinda-js-lead
|
|
5
|
+
|
|
6
|
+
|
|
7
|
+
# With this line @NatLibFi/melinda-js-lead owns any files in the /src/
|
|
8
|
+
# directory at the root of the repository and any of its
|
|
9
|
+
# subdirectories.
|
|
10
|
+
/src/ @NatLibFi/melinda-js-lead
|
|
11
|
+
|
|
12
|
+
# With this line @NatLibFi/melinda-js-lead owns package.json file
|
|
13
|
+
# at the root of the repository
|
|
14
|
+
/package.json @NatLibFi/melinda-js-lead
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
# NatLibFi/Melinda maintenance strategy
|
|
2
|
+
# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
|
|
3
|
+
|
|
4
|
+
version: 2
|
|
5
|
+
updates:
|
|
6
|
+
# Maintain dependencies for GitHub Actions
|
|
7
|
+
- package-ecosystem: "github-actions"
|
|
8
|
+
directory: "/"
|
|
9
|
+
schedule:
|
|
10
|
+
interval: "daily"
|
|
11
|
+
time: "06:30"
|
|
12
|
+
timezone: "Europe/Helsinki"
|
|
13
|
+
|
|
14
|
+
# Minor updates to npm production dependencies daily
|
|
15
|
+
- package-ecosystem: "npm"
|
|
16
|
+
directory: "/"
|
|
17
|
+
schedule:
|
|
18
|
+
interval: "daily"
|
|
19
|
+
time: "06:45"
|
|
20
|
+
timezone: "Europe/Helsinki"
|
|
21
|
+
versioning-strategy: lockfile-only
|
|
22
|
+
labels:
|
|
23
|
+
- "npm minor dependencies"
|
|
24
|
+
allow:
|
|
25
|
+
- dependency-type: "production"
|
|
26
|
+
|
|
27
|
+
# Major updates to npm dependencies weekly @tuesday
|
|
28
|
+
# Not possible yet https://github.com/dependabot/dependabot-core/issues/1778
|
|
29
|
+
# - package-ecosystem: "npm"
|
|
30
|
+
# directory: "/"
|
|
31
|
+
# schedule:
|
|
32
|
+
# interval: "weekly"
|
|
33
|
+
# day: "tuesday"
|
|
34
|
+
# time: "07:00"
|
|
35
|
+
# timezone: "Europe/Helsinki"
|
|
36
|
+
# versioning-strategy: increase-if-necessary
|
|
37
|
+
# labels:
|
|
38
|
+
# - "npm major dependencies"
|
|
39
|
+
# reviewers:
|
|
40
|
+
# - "natlibfi/melinda-js-lead"
|
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
# Melinda node tests
|
|
2
|
+
|
|
3
|
+
name: Melinda node tests
|
|
4
|
+
|
|
5
|
+
on: push
|
|
6
|
+
|
|
7
|
+
jobs:
|
|
8
|
+
build-node-versions:
|
|
9
|
+
name: Node version matrix
|
|
10
|
+
runs-on: ubuntu-latest
|
|
11
|
+
|
|
12
|
+
strategy:
|
|
13
|
+
matrix:
|
|
14
|
+
node-version: [12.x, 14.x, 16.x, 18.x]
|
|
15
|
+
# See supported Node.js release schedule at https://nodejs.org/en/about/releases/
|
|
16
|
+
|
|
17
|
+
steps:
|
|
18
|
+
- name: Checkout the code
|
|
19
|
+
uses: actions/checkout@v3
|
|
20
|
+
- name: Use Node.js ${{ matrix.node-version }}
|
|
21
|
+
uses: actions/setup-node@v3
|
|
22
|
+
with:
|
|
23
|
+
node-version: ${{ matrix.node-version }}
|
|
24
|
+
cache: 'npm'
|
|
25
|
+
env:
|
|
26
|
+
NPM_CONFIG_IGNORE_SCRIPTS: true
|
|
27
|
+
- run: npm update
|
|
28
|
+
- run: npm audit --package-lock-only --production --audit-level=high
|
|
29
|
+
- run: npm ci
|
|
30
|
+
- run: npm test
|
|
31
|
+
- run: npm run build --if-present
|
|
32
|
+
|
|
33
|
+
license-scan:
|
|
34
|
+
name: License compliance check
|
|
35
|
+
runs-on: ubuntu-latest
|
|
36
|
+
|
|
37
|
+
steps:
|
|
38
|
+
- uses: actions/checkout@v3
|
|
39
|
+
- uses: mikaelvesavuori/license-compliance-action@v1.0.0
|
|
40
|
+
with:
|
|
41
|
+
exclude_pattern: /^@natlibfi/
|
|
42
|
+
|
|
43
|
+
njsscan:
|
|
44
|
+
name: Njsscan check
|
|
45
|
+
runs-on: ubuntu-latest
|
|
46
|
+
|
|
47
|
+
steps:
|
|
48
|
+
- name: Checkout the code
|
|
49
|
+
uses: actions/checkout@v3
|
|
50
|
+
- name: nodejsscan scan
|
|
51
|
+
id: njsscan
|
|
52
|
+
uses: ajinabraham/njsscan-action@master
|
|
53
|
+
with:
|
|
54
|
+
args: '.'
|
|
55
|
+
|
|
56
|
+
publish:
|
|
57
|
+
runs-on: ubuntu-latest
|
|
58
|
+
needs: [build-node-versions, njsscan]
|
|
59
|
+
if: contains(github.ref, 'refs/tags/')
|
|
60
|
+
|
|
61
|
+
steps:
|
|
62
|
+
- uses: actions/checkout@v3
|
|
63
|
+
# Setup .npmrc file to publish to npm
|
|
64
|
+
- uses: actions/setup-node@v3
|
|
65
|
+
with:
|
|
66
|
+
node-version: '14.x'
|
|
67
|
+
registry-url: 'https://registry.npmjs.org'
|
|
68
|
+
- run: npm ci
|
|
69
|
+
- run: npm publish
|
|
70
|
+
env:
|
|
71
|
+
NODE_AUTH_TOKEN: ${{ secrets.MELINDA_REST_API_COMMONS_NPM_TOKEN }}
|