@rtorcato/js-tooling 2.19.1 → 2.19.2

package/dist/cli/commands/fix.js

@@ -210,17 +210,17 @@ const FIXERS = [
     },
     {
         target: 'semantic-release',
-        description: 'Scaffold release.config.mjs (skipped on private packages)',
+        description: 'Scaffold release.config.mjs + install preset plugins (skipped on private packages)',
         appliesTo: ['semantic-release'],
-        outputs: ['release.config.mjs'],
+        outputs: ['release.config.mjs', 'package.json'],
         canFixDrift: true,
         async run({ targetDir, pkg }) {
             if (pkg?.private === true) {
                 console.log(chalk.gray('   skipping — package is private'));
                 return { filesWritten: [] };
             }
-            await generateSemanticReleaseConfig(targetDir);
-            return { filesWritten: ['release.config.mjs'] };
+            const filesWritten = await generateSemanticReleaseConfig(targetDir);
+            return { filesWritten };
         },
     },
     {

package/dist/cli/generators/build.js

@@ -71,11 +71,41 @@ export default mergeConfig(preset, defineConfig({ plugins: [react()] }))
 `;
     await fs.writeFile(viteConfigPath, viteConfig);
 }
+// Plugins the github/gitlab preset activates that semantic-release core does
+// NOT bundle (core bundles only commit-analyzer, release-notes-generator, npm,
+// github). Without these in the consumer's deps, `semantic-release` crashes
+// with "Cannot find module '@semantic-release/changelog'" on first run.
+const RELEASE_PLUGIN_DEPS = {
+    '@semantic-release/changelog': '^6.0.0',
+    '@semantic-release/git': '^10.0.0',
+};
 export async function generateSemanticReleaseConfig(targetDir) {
     const releaseConfigPath = path.join(targetDir, 'release.config.mjs');
     const releaseConfig = `export { default } from '@rtorcato/js-tooling/semantic-release/github'
 `;
     await fs.writeFile(releaseConfigPath, releaseConfig);
+    const written = ['release.config.mjs'];
+    // Ensure the preset's non-bundled plugins are installed; otherwise the
+    // scaffolded release.config.mjs references modules the consumer lacks.
+    const pkgPath = path.join(targetDir, 'package.json');
+    if (await fs.pathExists(pkgPath)) {
+        const pkg = (await fs.readJson(pkgPath));
+        const devDeps = (pkg.devDependencies ?? {});
+        const deps = (pkg.dependencies ?? {});
+        let changed = false;
+        for (const [name, version] of Object.entries(RELEASE_PLUGIN_DEPS)) {
+            if (!devDeps[name] && !deps[name]) {
+                devDeps[name] = version;
+                changed = true;
+            }
+        }
+        if (changed) {
+            pkg.devDependencies = devDeps;
+            await fs.writeJson(pkgPath, pkg, { spaces: 2 });
+            written.push('package.json');
+        }
+    }
+    return written;
 }
 export async function generateChangesetsConfig(targetDir) {
     // Drop the canonical Changesets config into .changeset/config.json. The user

package/dist/cli/generators/github-actions.js

@@ -48,15 +48,15 @@ jobs:
       cache-key: \${{ steps.cache-key.outputs.key }}
     steps:
       - name: 📦 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
 
       - name: 📦 Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           version: latest
 
@@ -65,7 +65,7 @@ jobs:
         run: echo "key=\${{ runner.os }}-pnpm-\${{ hashFiles('**/pnpm-lock.yaml') }}" >> $GITHUB_OUTPUT
 
       - name: 📦 Cache dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.pnpm-store
@@ -83,20 +83,20 @@ jobs:
     if: needs.check-skip.outputs.should-skip != 'true'
     steps:
       - name: 📦 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
 
       - name: 📦 Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           version: latest
 
       - name: 📦 Restore dependencies cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.pnpm-store
@@ -113,20 +113,20 @@ ${hasTypeScript
     if: needs.check-skip.outputs.should-skip != 'true'
     steps:
       - name: 📦 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
 
       - name: 📦 Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           version: latest
 
       - name: 📦 Restore dependencies cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.pnpm-store
@@ -144,20 +144,20 @@ ${hasTests
     if: needs.check-skip.outputs.should-skip != 'true'
     steps:
       - name: 📦 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
 
       - name: 📦 Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           version: latest
 
       - name: 📦 Restore dependencies cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.pnpm-store
@@ -175,20 +175,20 @@ ${hasBuild
     if: needs.check-skip.outputs.should-skip != 'true'
     steps:
       - name: 📦 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
 
       - name: 📦 Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           version: latest
 
       - name: 📦 Restore dependencies cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.pnpm-store
@@ -199,7 +199,7 @@ ${hasBuild
         run: pnpm build
 
       - name: 📦 Upload build artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: build-artifacts
           path: |
@@ -221,24 +221,24 @@ ${isLibrary && config.semanticRelease
       id-token: write
     steps:
       - name: 📦 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: \${{ secrets.GITHUB_TOKEN }}
 
       - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
           registry-url: 'https://registry.npmjs.org'
 
       - name: 📦 Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           version: latest
 
       - name: 📦 Restore dependencies cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.pnpm-store

package/dist/cli/generators/gitlab-ci.js

@@ -59,7 +59,7 @@ function renderGitLabCI(config) {
     return `# .gitlab-ci.yml — generated by @rtorcato/js-tooling
 # Customize stages and jobs to fit your pipeline.
 
-image: node:20
+image: node:22
 
 stages:
 ${stages.map((s) => `  - ${s}`).join('\n')}

package/dist/cli/generators/linting.js

@@ -32,7 +32,7 @@ export async function generateBiomeConfig(targetDir) {
     // keys here forced consumers to run `biome migrate` before `biome check`
     // would run at all.
     const biomeConfig = {
-        $schema: 'https://biomejs.dev/schemas/2.3.0/schema.json',
+        $schema: 'https://biomejs.dev/schemas/2.5.0/schema.json',
         extends: ['@rtorcato/js-tooling/biome'],
     };
     await fs.writeJson(biomeConfigPath, biomeConfig, { spaces: 2 });

package/dist/cli/generators/security.js

@@ -75,7 +75,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3

package/dist/cli/generators/typedoc.js

@@ -10,9 +10,9 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: pnpm

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rtorcato/js-tooling",
-	"version": "2.19.1",
+	"version": "2.19.2",
 	"description": "JavaScript and TypeScript tooling for Node.js, React, Next.js, and Vitest.",
 	"type": "module",
 	"keywords": [
@@ -175,7 +175,8 @@
 		"./tests/ssr-safety": {
 			"types": "./tooling/tests/ssr-safety.d.mts",
 			"import": "./tooling/tests/ssr-safety.mjs"
-		}
+		},
+		"./package.json": "./package.json"
 	},
 	"dependencies": {
 		"chalk": "^5.6.2",

package/tooling/biome/biome.json

@@ -1,5 +1,5 @@
 {
-	"$schema": "https://biomejs.dev/schemas/2.3.0/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.5.0/schema.json",
 	"vcs": {
 		"enabled": false,
 		"clientKind": "git",
@@ -27,7 +27,7 @@
 	"linter": {
 		"enabled": true,
 		"rules": {
-			"recommended": true,
+			"preset": "recommended",
 			"style": {
 				"noInferrableTypes": "off"
 			},

package/tooling/semantic-release/github.mjs

@@ -51,8 +51,11 @@ export default {
 				changelogFile: 'CHANGELOG.md',
 			},
 		],
-		['@semantic-release/npm', { npmPublish: true, pkgRoot: '.' }],
-		// NPM plugin to publish the package
+		// npm publishing is opt-in via NPM_TOKEN: a repo that provides the token
+		// (e.g. js-tooling's own CI) publishes; one that doesn't (GitHub-releases
+		// only) gets a green release instead of an EINVALIDNPMTOKEN failure. The
+		// version in package.json is still bumped either way.
+		['@semantic-release/npm', { npmPublish: Boolean(process.env.NPM_TOKEN), pkgRoot: '.' }],
 		[
 			'@semantic-release/git',
 			{

package/tooling/semantic-release/index.mjs

@@ -52,8 +52,11 @@ export default {
 				changelogFile: 'CHANGELOG.md',
 			},
 		],
-		['@semantic-release/npm', { npmPublish: true, pkgRoot: '.' }],
-		// NPM plugin to publish the package
+		// npm publishing is opt-in via NPM_TOKEN: a repo that provides the token
+		// publishes; one that doesn't (GitLab releases only) gets a green release
+		// instead of an EINVALIDNPMTOKEN failure. The version in package.json is
+		// still bumped either way.
+		['@semantic-release/npm', { npmPublish: Boolean(process.env.NPM_TOKEN), pkgRoot: '.' }],
 		[
 			'@semantic-release/git',
 			{