bits-to-dead-trees 2.33.0 → 2.34.0

package/.changeset/config.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://unpkg.com/@changesets/config@2.0.0/schema.json",
+  "$schema": "https://unpkg.com/@changesets/config@4.0.0/schema.json",
   "changelog": [
     "@changesets/changelog-github",
     { "repo": "rmehner/bits-to-dead-trees" }
@@ -8,7 +8,6 @@
   "fixed": [],
   "linked": [],
   "access": "public",
-  "baseBranch": "main",
   "updateInternalDependencies": "patch",
   "ignore": []
 }

package/.github/workflows/build-docker-image-of-release.yml

@@ -50,14 +50,14 @@ jobs:
           persist-credentials: false
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
       - name: Build and push builder image
         uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0

package/.github/workflows/keep-versions-and-schemas-in-sync.yml

@@ -34,8 +34,6 @@ jobs:
         run: .github/bin/sync-node-version-from-playwright
 
       - name: Commit .node-version changes
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           if [ -z "$(git status --porcelain)" ]; then
             exit 0
@@ -48,8 +46,6 @@ jobs:
         run: .github/bin/sync-playwright-version-to-dockerfile
 
       - name: Commit Dockerfile changes
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           if [ -z "$(git status --porcelain)" ]; then
             exit 0
@@ -71,8 +67,6 @@ jobs:
         run: npm run update-schemas
 
       - name: Commit schema changes
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           if [ -z "$(git status --porcelain)" ]; then
             exit 0
@@ -82,5 +76,7 @@ jobs:
           git commit -m "🤖 Update schema to match Playwright version"
 
       - name: Push changes
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git push "https://x-access-token:${GH_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" "HEAD:${GITHUB_REF_NAME}"

package/.github/workflows/release.yml

@@ -39,9 +39,8 @@ jobs:
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
-        uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0
+        uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2
         with:
-          publish: npm run release
-          title: Release new version 🚀
-        env:
-          GITHUB_TOKEN: ${{ secrets.PERSONAL_GITHUB_TOKEN }}
+          publish-script: npm run release
+          pr-title: Release new version 🚀
+          github-token: ${{ secrets.PERSONAL_GITHUB_TOKEN }}

package/.github/workflows/zizmor.yml

@@ -29,7 +29,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
+        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
         with:
           advanced-security: false
           annotations: true

package/.node-version

@@ -1 +1 @@
-24.18.1
+24.20.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # bits-to-dead-trees
 
+## 2.34.0
+
+### Minor Changes
+
+- [#719](https://github.com/rmehner/bits-to-dead-trees/pull/719) [`345de3a`](https://github.com/rmehner/bits-to-dead-trees/commit/345de3a64cddb162e765c34f939a853d99b62a84) Thanks [@depfu](https://github.com/apps/depfu)! - Update to Playwright 1.63.0
+
+## 2.33.1
+
+### Patch Changes
+
+- [`0655505`](https://github.com/rmehner/bits-to-dead-trees/commit/06555054682f7e148b2dc3ed6667078ff56081c0) Thanks [@rmehner](https://github.com/rmehner)! - Harden & Stabilize Dockerfile by using npm ci
+
 ## 2.33.0
 
 ### Minor Changes

package/Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/playwright:v1.62.1
+FROM mcr.microsoft.com/playwright:v1.63.0
 
 ENV NODE_ENV=production
 ENV PORT=8000
@@ -6,9 +6,9 @@ ENV SERVER_ADDRESS=0.0.0.0
 
 WORKDIR /app
 
-COPY ["package.json", "package-lock.json*", "./"]
+COPY ["package.json", "package-lock.json", "./"]
 
-RUN npm install --omit=dev --ignore-scripts
+RUN npm ci --omit=dev --ignore-scripts
 
 COPY ["server.js", "app.js", "pdf_request_body.json", "./"]
 

package/README.md

@@ -57,7 +57,7 @@ If you want to use it internally with docker-compose, this should give you a goo
 ```yml
 services:
   pdf:
-    image: ghcr.io/rmehner/bits-to-dead-trees:v2.32.1
+    image: ghcr.io/rmehner/bits-to-dead-trees:v2.33.1
     ports:
       - 8000:8000
 ```

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "bits-to-dead-trees",
   "author": "Robin Mehner <robin@coding-robin.de>",
-  "version": "2.33.0",
+  "version": "2.34.0",
   "description": "Turn HTML into PDF files",
   "repository": {
     "type": "git",
@@ -33,24 +33,24 @@
     "ts-check": "npx tsc --noEmit"
   },
   "dependencies": {
-    "fastify": "^5.10.0",
-    "playwright-core": "^1.62.1"
+    "fastify": "^5.12.3",
+    "playwright-core": "^1.63.0"
   },
   "devDependencies": {
     "@changesets/changelog-github": "^0.7.0",
-    "@changesets/cli": "^2.31.1",
+    "@changesets/cli": "^3.0.2",
     "@eslint/js": "^10.0.1",
-    "@tsconfig/node24": "^24.0.4",
-    "@types/lodash": "^4.17.24",
+    "@tsconfig/node24": "^24.0.5",
+    "@types/lodash": "^4.17.25",
     "@types/node": "24.12.0",
-    "eslint": "^10.8.0",
+    "eslint": "^10.9.1",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-n": "^18.2.2",
+    "eslint-plugin-n": "^18.3.0",
     "eslint-plugin-promise": "^7.3.0",
-    "globals": "^17.7.0",
+    "globals": "^17.12.0",
     "pino-pretty": "^13.1.3",
     "prettier": "^3.9.6",
     "typescript-json-schema": "^0.68.0",
-    "vitest": "^4.1.10"
+    "vitest": "^4.1.11"
   }
 }

package/pdf_request_body.json

@@ -146,8 +146,18 @@
           "type": "boolean"
         },
         "httpCredentials": {
-          "$ref": "#/definitions/HTTPCredentials",
-          "description": "Credentials for [HTTP authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication). If no\norigin is specified, the username and password are sent to any servers upon unauthorized responses."
+          "anyOf": [
+            {
+              "$ref": "#/definitions/HTTPCredentials"
+            },
+            {
+              "items": {
+                "$ref": "#/definitions/HTTPCredentials"
+              },
+              "type": "array"
+            }
+          ],
+          "description": "Credentials for [HTTP authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication). If no\norigin is specified, the username and password are sent to any servers upon unauthorized responses.\n\nPass an array to use different credentials for different origins. The first entry that matches the request origin\nis used, and entries with no origin match any request."
         },
         "ignoreHTTPSErrors": {
           "description": "Whether to ignore HTTPS errors when sending network requests. Defaults to `false`.",