@npmcli/template-oss 4.24.1 → 4.24.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/lib/content/audit-yml.hbs +3 -0
  2. package/lib/content/ci-release-yml.hbs +4 -0
  3. package/lib/content/ci-yml.hbs +3 -0
  4. package/lib/content/codeql-analysis-yml.hbs +3 -0
  5. package/lib/content/pull-request-yml.hbs +3 -0
  6. package/lib/content/release-integration-yml.hbs +4 -0
  7. package/lib/content/release-yml.hbs +1 -0
  8. package/package.json +1 -1
package/lib/content/audit-yml.hbs CHANGED
@@ -6,6 +6,9 @@ on:
6
6
  # "At 08:00 UTC (01:00 PT) on Monday" https://crontab.guru/#0_8_*_*_1
7
7
  - cron: "0 8 * * 1"
8
8
 
9
+ permissions:
10
+ contents: read
11
+
9
12
  jobs:
10
13
  audit:
11
14
  {{> jobYml jobName="Audit Dependencies" jobDepFlags="--package-lock" }}
package/lib/content/ci-release-yml.hbs CHANGED
@@ -17,6 +17,10 @@ on:
17
17
  required: true
18
18
  type: string
19
19
 
20
+ permissions:
21
+ contents: read
22
+ checks: write
23
+
20
24
  jobs:
21
25
  lint-all:
22
26
  {{> jobYml
package/lib/content/ci-yml.hbs CHANGED
@@ -3,6 +3,9 @@ name: CI {{~#if isWorkspace}} - {{ pkgName }}{{/if}}
3
3
  on:
4
4
  {{> onCiYml }}
5
5
 
6
+ permissions:
7
+ contents: read
8
+
6
9
  jobs:
7
10
  lint:
8
11
  {{> jobYml jobName="Lint" }}
package/lib/content/codeql-analysis-yml.hbs CHANGED
@@ -15,6 +15,9 @@ on:
15
15
  # "At 10:00 UTC (03:00 PT) on Monday" https://crontab.guru/#0_10_*_*_1
16
16
  - cron: "0 10 * * 1"
17
17
 
18
+ permissions:
19
+ contents: read
20
+
18
21
  jobs:
19
22
  analyze:
20
23
  name: Analyze
package/lib/content/pull-request-yml.hbs CHANGED
@@ -8,6 +8,9 @@ on:
8
8
  - edited
9
9
  - synchronize
10
10
 
11
+ permissions:
12
+ contents: read
13
+
11
14
  jobs:
12
15
  commitlint:
13
16
  {{> jobYml jobName="Lint Commits" jobCheckout=(obj fetch-depth=0) }}
package/lib/content/release-integration-yml.hbs CHANGED
@@ -19,6 +19,10 @@ on:
19
19
  required: true
20
20
  {{/if}}
21
21
 
22
+ permissions:
23
+ contents: read
24
+ id-token: write
25
+
22
26
  jobs:
23
27
  publish:
24
28
  {{> jobReleaseIntegrationYml }}
package/lib/content/release-yml.hbs CHANGED
@@ -186,6 +186,7 @@ jobs:
186
186
  uses: ./.github/workflows/release-integration.yml
187
187
  {{#if publish}}
188
188
  permissions:
189
+ contents: read
189
190
  id-token: write
190
191
  secrets:
191
192
  PUBLISH_TOKEN: $\{{ secrets.PUBLISH_TOKEN }}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@npmcli/template-oss",
3
- "version": "4.24.1",
3
+ "version": "4.24.2",
4
4
  "description": "templated files used in npm CLI team oss projects",
5
5
  "main": "lib/content/index.js",
6
6
  "bin": {