danger 14.0.5 → 14.0.6

package/CHANGELOG.md

@@ -18,6 +18,12 @@
 
 <!-- Your comment above this -->
 
+## 14.0.6
+
+The prebuilt macOS binaries (what `brew install danger/tap/danger-js` gives you) now embed node 24 instead of node 18.
+Those binaries ship their own copy of node, and the old one was too old for the networking library Danger uses, so every
+call to GitHub failed with `TypeError: terminated`. They work again. - [@orta]
+
 ## 14.0.0-5
 
 Release faff as I migrate to OIDC deploys for danger - orta

package/README.md

@@ -101,12 +101,16 @@ repository ruleset, so the set of people who can ship a release is that ruleset'
 
 - Checkout the `main` branch. Ensure your working tree is clean, and make sure you have the latest changes by running
   `git pull; yarn`.
-- Bump and tag - `npm run release -- patch`. This bumps `package.json`, commits, tags and pushes. It no longer publishes
+- Bump and tag - `npm run release -- patch --ci`. This bumps `package.json`, commits, tags and pushes. It no longer publishes
   to npm from your machine, so there's no OTP to enter.
 - Pushing the tag runs [`npm_publish.yml`](.github/workflows/npm_publish.yml), which publishes to npm using npm's
   trusted publishing (there is no `NPM_TOKEN` secret) and then kicks off `release.yml` for the macOS native builds and
   the homebrew tap.
 
+The publish job runs in the `npm-release` environment, which only tags can deploy to. Combined with the tag ruleset,
+that means a branch can never obtain npm's OIDC credentials. Changes to anything under `.github/workflows/` need a
+review from an admin, via [CODEOWNERS](.github/CODEOWNERS).
+
 :ship:
 
 ## License, Contributor's Guidelines and Code of Conduct

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "danger",
-  "version": "14.0.5",
+  "version": "14.0.6",
   "description": "Unit tests for Team Culture",
   "main": "distribution/danger.js",
   "typings": "distribution/danger.d.ts",
@@ -67,8 +67,8 @@
     "build:watch": "tsc -w",
     "link": "yarn run build && yarn link",
     "package": "yarn run pkg . --output brew-distribution/danger && zip -j brew-distribution/danger-macos.zip brew-distribution/danger && shasum -a 256 brew-distribution/danger-macos.zip",
-    "package:x64": "yarn run pkg . --output brew-distribution/danger-x64 --targets node18-macos-x64 && zip -j brew-distribution/danger-macos-x64.zip brew-distribution/danger-x64 && shasum -a 256 brew-distribution/danger-macos-x64.zip",
-    "package:arm64": "yarn run pkg . --output brew-distribution/danger-arm64 --targets node18-macos-arm64 && zip -j brew-distribution/danger-macos-arm64.zip brew-distribution/danger-arm64 && shasum -a 256 brew-distribution/danger-macos-arm64.zip",
+    "package:x64": "yarn run pkg . --output brew-distribution/danger-x64 --targets node24-macos-x64 && zip -j brew-distribution/danger-macos-x64.zip brew-distribution/danger-x64 && shasum -a 256 brew-distribution/danger-macos-x64.zip",
+    "package:arm64": "yarn run pkg . --output brew-distribution/danger-arm64 --targets node24-macos-arm64 && zip -j brew-distribution/danger-macos-arm64.zip brew-distribution/danger-arm64 && shasum -a 256 brew-distribution/danger-macos-arm64.zip",
     "declarations": "ts-node ./scripts/create-danger-dts.ts",
     "docs:cp_defs": "mkdir docs/docs_generate && cp source/danger.d.ts docs/docs_generate && cp node_modules/@octokit/rest/index.d.ts docs/docs_generate/github.d.ts",
     "docs": "yarn run docs:cp_defs && yarn typedoc --ignoreCompilerErrors --mode modules --json docs/js_ref_dsl_docs.json --includeDeclarations source",
@@ -117,6 +117,7 @@
     "@types/voca": "^1.4.0",
     "@typescript-eslint/eslint-plugin": "^5.10.1",
     "@typescript-eslint/parser": "^5.10.1",
+    "@yao-pkg/pkg": "^6.22.0",
     "danger-plugin-jest": "^1.0.1",
     "danger-plugin-yarn": "^1.3.1",
     "date-fns": "^1.29.0",
@@ -131,7 +132,6 @@
     "lint-staged": "^12.3.7",
     "madge": "^6.0.1",
     "nock": "^14.0.15",
-    "pkg": "^5.8.1",
     "prettier": "^2.5.1",
     "release-it": "^18.1.2",
     "shx": "^0.3.4",