@npmcli/template-oss 2.6.0 → 2.8.0

package/lib/content/ci.yml

@@ -9,7 +9,7 @@ on:
       - main
       - latest
   schedule:
-    # "At 02:00 on Monday" https://crontab.guru/#0_1_*_*_1
+    # "At 02:00 on Monday" https://crontab.guru/#0_2_*_*_1
     - cron: "0 2 * * 1"
 
 jobs:

package/lib/content/codeql-analysis.yml

@@ -0,0 +1,38 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ main ]
+  schedule:
+    # "At 03:00 on Monday" https://crontab.guru/#0_3_*_*_1
+    - cron: "0 3 * * 1"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

package/lib/content/commitlintrc.js

@@ -6,6 +6,6 @@ module.exports = {
   rules: {
     'type-enum': [2, 'always', ['feat', 'fix', 'docs', 'chore', 'deps']],
     'header-max-length': [2, 'always', 80],
-    'subject-case': [2, 'always', ['lower-case', 'sentence-case', 'start-case']],
+    'subject-case': [0, 'always', ['lower-case', 'sentence-case', 'start-case']],
   },
 }

package/lib/content/dependabot.yml

@@ -8,9 +8,9 @@ updates:
     interval: daily
   allow:
     - dependency-type: direct
-  versioning-strategy: increase-if-necessary
+  versioning-strategy: increase
   commit-message:
     prefix: deps
     prefix-development: chore
   labels:
-    - "dependencies"
+    - "Dependencies"

package/lib/content/post-dependabot.yml

@@ -0,0 +1,31 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "Post Dependabot Actions"
+on: pull_request
+
+jobs:
+  Install:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1.1.1
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: npm install and commit
+        if: ${{contains(steps.metadata.outputs.dependency-names, '@npmcli/template-oss')}}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config --local user.email "ops+npm-cli@npmjs.com"
+          git config --local user.name "npm cli ops bot"
+          gh pr checkout ${{ github.event.pull_request.number }}
+          npm install
+          git add .
+          git commit -am "chore: postinstall for dependabot template-oss PR"
+          git push origin ${{github.ref_name}}

package/lib/content/release-please.yml

@@ -21,5 +21,5 @@ jobs:
             [{"type":"feat","section":"Features","hidden":false},
             {"type":"fix","section":"Bug Fixes","hidden":false},
             {"type":"docs","section":"Documentation","hidden":false},
-            {"type":"deps","section":"dependencies","hidden":false},
+            {"type":"deps","section":"Dependencies","hidden":false},
             {"type":"chore","hidden":true}]

package/lib/postinstall/copy-content.js

@@ -21,6 +21,8 @@ const repoFiles = {
   '.github/CODEOWNERS': './CODEOWNERS',
   '.github/dependabot.yml': './dependabot.yml',
   '.github/workflows/audit.yml': './audit.yml',
+  '.github/workflows/codeql-analysis.yml': './codeql-analysis.yml',
+  '.github/workflows/post-dependabot.yml': './post-dependabot.yml',
   '.github/workflows/pull-request.yml': './pull-request.yml',
   '.github/workflows/release-please.yml': './release-please.yml',
 }

package/lib/postinstall/update-package.js

@@ -79,6 +79,14 @@ const patchPackage = async (path, root, config) => {
     if (pkg.content.templateVersion) {
       update.templateVersion = undefined
     }
+    if (pkg.content.scripts && pkg.content.scripts['lint:fix']) {
+      // some old packages using standard had a lint:fix script
+      delete update.scripts['lint:fix']
+    }
+    if (pkg.content.standard) {
+      // remove standard configuration if it exists
+      update.standard = undefined
+    }
   }
 
   pkg.update(update)

package/lib/postlint/check-package.js

@@ -6,6 +6,7 @@ const unwantedPackages = [
   'eslint-plugin-promise',
   'eslint-plugin-standard',
   'eslint-plugin-import',
+  'standard',
 ]
 
 const hasOwn = (obj, key) => Object.prototype.hasOwnProperty.call(obj, key)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@npmcli/template-oss",
-  "version": "2.6.0",
+  "version": "2.8.0",
   "description": "templated files used in npm CLI team oss projects",
   "main": "lib/index.js",
   "bin": {
@@ -31,8 +31,8 @@
   "author": "GitHub Inc.",
   "license": "ISC",
   "dependencies": {
-    "@npmcli/fs": "^1.0.0",
-    "@npmcli/map-workspaces": "^2.0.0",
+    "@npmcli/fs": "^1.1.1",
+    "@npmcli/map-workspaces": "^2.0.1",
     "@npmcli/package-json": "^1.0.1",
     "json-parse-even-better-errors": "^2.3.1",
     "which": "^2.0.2"
@@ -45,7 +45,7 @@
     "@npmcli/eslint-config": "*",
     "@npmcli/promise-spawn": "^2.0.0",
     "@npmcli/template-oss": "file:./",
-    "eslint": "^8.1.0",
+    "eslint": "^8.9.0",
     "eslint-plugin-node": "^11.1.0",
     "tap": "*"
   },