@vidavidorra/create-project 4.0.45 → 4.1.0-beta.2

package/.github/workflows/ci-cd.yml

@@ -6,6 +6,11 @@ on:
       - beta
       - renovate/**
   pull_request: null
+permissions:
+  contents: write
+  id-token: write
+  issues: write
+  pull-requests: write
 jobs:
   lint-commit-messages:
     uses: vidavidorra/.github/.github/workflows/lint-commit-messages.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
@@ -16,13 +21,11 @@ jobs:
   test:
     uses: vidavidorra/.github/.github/workflows/node-test.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
   code-coverage:
-    uses: vidavidorra/.github/.github/workflows/node-test-coverage.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
+    uses: vidavidorra/.github/.github/workflows/node-test-coverage.yml@660c2c3981334f4690d43df8555eac326705bd13 # v8.0.0-beta.1
     needs:
       - lint
       - build
       - test
-    secrets:
-      codecovToken: ${{ secrets.CODECOV_TOKEN }}
   release:
     uses: vidavidorra/.github/.github/workflows/release.yml@24ea160cd3be95b9bbfb4853d71124d2046d0d0e # v7.0.0
     needs:
@@ -33,4 +36,3 @@ jobs:
       - code-coverage
     secrets:
       privateKey: ${{ secrets.RELEASE_PRIVATE_KEY }}
-      npmToken: ${{ secrets.NPM_PUBLISH_TOKEN }}

package/dist/content/ci-cd.d.ts

@@ -9,6 +9,12 @@ declare const schema: z.ZodObject<{
         }, z.core.$strip>;
         pull_request: z.ZodNull;
     }, z.core.$strip>;
+    permissions: z.ZodObject<{
+        contents: z.ZodLiteral<"write">;
+        'id-token': z.ZodLiteral<"write">;
+        issues: z.ZodLiteral<"write">;
+        'pull-requests': z.ZodLiteral<"write">;
+    }, z.core.$strict>;
     jobs: z.ZodObject<{
         'lint-commit-messages': z.ZodObject<{
             uses: z.ZodString;
@@ -25,17 +31,13 @@ declare const schema: z.ZodObject<{
         'code-coverage': z.ZodObject<{
             uses: z.ZodString;
             needs: z.ZodTuple<[z.ZodLiteral<"lint">, z.ZodLiteral<"build">, z.ZodLiteral<"test">], null>;
-            secrets: z.ZodObject<{
-                codecovToken: z.ZodString;
-            }, z.core.$strip>;
         }, z.core.$strip>;
         release: z.ZodObject<{
             uses: z.ZodString;
             needs: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"lint-commit-messages">, z.ZodLiteral<"lint">, z.ZodLiteral<"build">, z.ZodLiteral<"test">, z.ZodLiteral<"code-coverage">]>>;
             secrets: z.ZodObject<{
                 privateKey: z.ZodString;
-                npmToken: z.ZodString;
-            }, z.core.$strip>;
+            }, z.core.$strict>;
         }, z.core.$strip>;
     }, z.core.$strict>;
 }, z.core.$strict>;

package/dist/content/ci-cd.js

@@ -20,6 +20,12 @@ const schema = z.strictObject({
         // eslint-disable-next-line @typescript-eslint/naming-convention
         pull_request: z.null(),
     }),
+    permissions: z.strictObject({
+        contents: z.literal('write'),
+        'id-token': z.literal('write'),
+        issues: z.literal('write'),
+        'pull-requests': z.literal('write'),
+    }),
     jobs: z.strictObject({
         'lint-commit-messages': job('lint-commit-messages.yml'),
         lint: job('node-lint.yml'),
@@ -31,7 +37,6 @@ const schema = z.strictObject({
                 z.literal('build'),
                 z.literal('test'),
             ]),
-            secrets: z.object({ codecovToken: z.string() }),
         }),
         release: job('release.yml').extend({
             needs: z
@@ -43,9 +48,8 @@ const schema = z.strictObject({
                 z.literal('code-coverage'),
             ]))
                 .length(5),
-            secrets: z.object({
+            secrets: z.strictObject({
                 privateKey: z.string(),
-                npmToken: z.string(),
             }),
         }),
     }),
@@ -76,8 +80,8 @@ class CiCd extends File {
         if (data.jobs?.release?.needs !== undefined) {
             data.jobs.release.needs = data.jobs.release.needs.filter((action) => !removeFromRelease.includes(action));
         }
-        if (!this._options.public) {
-            delete data.jobs?.release?.secrets?.npmToken;
+        if (!this._options.public && !this._options.reportCodeCoverage) {
+            delete data.permissions?.['id-token'];
         }
         const { sha, version } = this;
         this._content = stringify(data).replaceAll(sha, `${sha}${version}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vidavidorra/create-project",
-  "version": "4.0.45",
+  "version": "4.1.0-beta.2",
   "private": false,
   "description": "Interactively create a GitHub project",
   "keywords": [
@@ -213,7 +213,7 @@
     "@semantic-release/changelog": "6.0.3",
     "@semantic-release/exec": "7.1.0",
     "@semantic-release/git": "10.0.1",
-    "@types/node": "24.9.1",
+    "@types/node": "24.9.2",
     "@types/sinon": "17.0.4",
     "@types/validate-npm-package-name": "4.0.2",
     "@vidavidorra/commitlint-config": "7.1.2",