@zairakai/js-dev-tools 3.5.0 → 3.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -60,6 +60,15 @@ stages:
60
60
  - publish
61
61
  - release
62
62
 
63
+ # ================================
64
+ # RUNNERS
65
+ # ================================
66
+ # Every job runs on the self-hosted runner of the group, whatever the shared runners enabled on the project.
67
+ # Only js:publish leaves it: npm trusted publishing does not accept a self-hosted runner.
68
+ default:
69
+ tags:
70
+ - zairakai-ci
71
+
63
72
  # ================================
64
73
  # DEFAULT VARIABLES
65
74
  # ================================
@@ -376,18 +385,19 @@ js:publish:
376
385
  <<: [*base_job, *cache_node]
377
386
  stage: publish
378
387
  image: ${NODE_IMAGE}
388
+ # Trusted publishing: npm trusts this project and this job, and the OIDC token below authenticates the publication.
389
+ # No npm token is stored anywhere. npm accepts only the shared runners of GitLab.com (not a self-hosted runner),
390
+ # so this job is the only one that uses them. The tag is the one of GitLab, it cannot be renamed.
391
+ tags:
392
+ - saas-linux-small-amd64
393
+ id_tokens:
394
+ NPM_ID_TOKEN:
395
+ aud: "npm:registry.npmjs.org"
379
396
  rules:
380
397
  - if: $UPDATE_DEPENDENCIES == "true"
381
398
  when: never
382
399
  - if: $CI_COMMIT_TAG =~ $VERSION_TAG_REGEX
383
400
  script:
384
- - |
385
- if [[ -z "${NPM_TOKEN:-}" ]]; then
386
- echo "ERROR: NPM_TOKEN is not set or empty"
387
- echo "Go to: GitLab → Settings → CI/CD → Variables → add NPM_TOKEN (type: Variable, protected, masked)"
388
- exit 1
389
- fi
390
- - echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > "${CI_PROJECT_DIR}/.npmrc"
391
401
  - |
392
402
  # A pre-release (2.3.0-rc.1) goes to the npm tag "next", so it never becomes "latest"
393
403
  npm_tag="latest"
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@zairakai/js-dev-tools",
3
- "version": "3.5.0",
3
+ "version": "3.7.0",
4
4
  "description": "The unified and centralized development toolkit for JavaScript/TypeScript projects - ESLint, Prettier, Stylelint, Knip, Vitest, Git Hooks, and GitLab CI pipeline templates",
5
5
  "keywords": [
6
6
  "dev-tools",
@@ -91,16 +91,16 @@
91
91
  "@stanislas-poisson/js-dev-tools": "^1.0.0",
92
92
  "eslint": "^10.12.0",
93
93
  "markdownlint-cli2": "^0.23.3",
94
- "prettier": "^3.9.9",
94
+ "prettier": "^3.9.10",
95
95
  "stylelint": "^17.16.0"
96
96
  },
97
97
  "devDependencies": {
98
- "@vitest/coverage-v8": "^5.0.3",
98
+ "@vitest/coverage-v8": "^5.0.5",
99
99
  "knip": "^6.41.0",
100
- "sort-package-json": "^4.0.0",
100
+ "sort-package-json": "^4.1.0",
101
101
  "typescript": "^6.0.3",
102
- "vitest": "^5.0.3",
103
- "zod": "^4.6.5"
102
+ "vitest": "^5.0.5",
103
+ "zod": "^4.6.7"
104
104
  },
105
105
  "peerDependencies": {
106
106
  "eslint": "^10.0.0",