@ykdz/template 0.0.35 → 0.0.36

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-deployment-diagnostics.yml

@@ -47,7 +47,7 @@ jobs:
         with:
           cache: true
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
         if: matrix.requires_docker
       - name: Install dependencies
         run: pnpm install --frozen-lockfile

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.github/workflows/check-deployment.yml

@@ -47,7 +47,7 @@ jobs:
         with:
           cache: true
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
         if: matrix.requires_docker
       - name: Install dependencies
         run: pnpm install --frozen-lockfile

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/.pnpmfile.mjs

@@ -0,0 +1,19 @@
+// @ts-check
+
+/**
+ * @typedef {object} ProjectManifest
+ * @property {Record<string, string>} [devDependencies]
+ * @property {Record<string, string>} [scripts]
+ */
+
+export const hooks = {
+  /**
+   * @param {ProjectManifest} pkg
+   * @returns {ProjectManifest}
+   */
+  beforePacking(pkg) {
+    delete pkg.devDependencies;
+    delete pkg.scripts;
+    return pkg;
+  },
+};

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/tsconfig.packing-hook.json

@@ -0,0 +1,8 @@
+{
+  "compilerOptions": {
+    "allowJs": true,
+    "checkJs": true,
+    "noEmit": true
+  },
+  "include": [".pnpmfile.mjs"]
+}

package/node_modules/@ykdz/template-builtin-presets/templates/ts-cli/publication/CHANGELOG.md.template

@@ -0,0 +1,17 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/2.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [{{PACKAGE_VERSION}}] - {{RELEASE_DATE}}
+
+### Added
+
+- Publish the first stable release.
+
+[Unreleased]: {{REPOSITORY_URL}}/compare/v{{PACKAGE_VERSION}}...HEAD
+[{{PACKAGE_VERSION}}]: {{REPOSITORY_URL}}/releases/tag/v{{PACKAGE_VERSION}}

package/node_modules/@ykdz/template-builtin-presets/templates/ts-cli/publication/RELEASING.md

@@ -0,0 +1,17 @@
+# Releasing
+
+Prepare a normal pull request that changes the public package version and its
+curated `CHANGELOG.md` entry. After that PR is reviewed and merged to the
+protected default branch, run the `release.yml` workflow manually without
+inputs. The workflow verifies and publishes the accepted artifact, then creates
+the matching GitHub Release.
+
+If a release stops after an external write, preserve the observed npm, tag, and
+GitHub Release facts. Use GitHub's failed-job rerun only when it retains the
+accepted artifact; otherwise stop and investigate the incident rather than
+repacking, overwriting, or repairing remote release state.
+
+After the first successful natural OIDC release, open npm account security and
+enable **Require 2FA and disallow tokens**. Revoke each no-longer-needed write
+token individually. This is an account-hardening action; it is not part of the
+daily workflow and should not block ordinary release preparation.