env-secrets 0.3.0 → 0.3.2

package/.github/workflows/build-main.yml

@@ -14,14 +14,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 20.18.3
+          node-version: 24
 
       - name: Install Node.js dependencies
         run: yarn

package/.github/workflows/deploy-docs.yml

@@ -21,10 +21,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           cache: 'yarn'
           cache-dependency-path: website/package.json
       - name: Install deps

package/.github/workflows/e2e-tests.yaml

@@ -18,15 +18,15 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 24.x
+          node-version: 24
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.12'
 

package/.github/workflows/lint.yaml

@@ -16,12 +16,12 @@ jobs:
 
     steps:
       - name: Check out Git repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 20.18.3
+          node-version: 24
 
       # ESLint and Prettier must be in `package.json`
       - name: Install Node.js dependencies

package/.github/workflows/release.yml

@@ -14,18 +14,19 @@ on:
         default: 'patch'
         required: true
 
-permissions:
-  contents: write
-  packages: read
-
 jobs:
   release:
     if: ${{ github.ref == 'refs/heads/main' }}
     name: Create Github Release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for OIDC authentication
+      contents: write 
+      packages: read
+
     steps:
       - name: Clone Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -35,9 +36,9 @@ jobs:
           git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 20.18.3
+          node-version: 24
           registry-url: 'https://registry.npmjs.org'
 
       - name: Install Node.js dependencies
@@ -47,9 +48,8 @@ jobs:
         run: yarn build
 
       - name: Github release
-        run: yarn release ${{ inputs.release_type }} --ci
+        run: npx release-it ${{ inputs.release_type }} --ci
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Notify failures

package/.github/workflows/snyk.yaml

@@ -14,7 +14,7 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Run Snyk to check for vulnerabilities
         uses: snyk/actions/node@master
         continue-on-error: true # To make sure that SARIF upload gets called
@@ -23,6 +23,6 @@ jobs:
         with:
           args: --sarif-file-output=snyk.sarif
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: snyk.sarif

package/.github/workflows/unittests.yaml

@@ -22,10 +22,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
 

package/.nvmrc

@@ -1 +1 @@
-v20.18.3
+v24.12

package/.release-it.json

@@ -7,6 +7,6 @@
     "releaseNotes": "./generate-release-notes.sh ${tagName}"
   },
   "npm": {
-    "publish": true
+    "skipChecks": true
   }
 }

package/README.md

@@ -286,7 +286,7 @@ The site is configured for GitHub Pages at https://markcallen.github.io/env-secr
 nvm use
 ```
 
-Or use Node.js 20 (LTS) directly.
+Or use Node.js 24 (LTS) directly.
 
 2. **Install dependencies:**
 

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "env-secrets",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "get secrets from a secrets vault and inject them into the running environment",
   "main": "index.js",
   "author": "Mark C Allen (@markcallen)",
-  "repository": "markcallen/env-secrets",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/markcallen/env-secrets.git"
+  },
   "homepage": "https://github.com/markcallen/env-secrets",
   "license": "MIT",
   "private": false,
@@ -26,7 +29,7 @@
   "devDependencies": {
     "@types/debug": "^4.1.12",
     "@types/jest": "^29.5.14",
-    "@types/node": "^18.19.124",
+    "@types/node": "^18.19.130",
     "@typescript-eslint/eslint-plugin": "^5.62.0",
     "@typescript-eslint/parser": "^5.62.0",
     "aws-sdk-client-mock": "^3.0.0",
@@ -39,16 +42,16 @@
     "prettier": "^2.8.8",
     "release-it": "^15.11.0",
     "rimraf": "^3.0.2",
-    "ts-jest": "^29.4.1",
+    "ts-jest": "^29.4.6",
     "ts-node": "^10.9.2",
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@aws-sdk/client-secrets-manager": "^3.883.0",
-    "@aws-sdk/client-sts": "^3.883.0",
-    "@aws-sdk/credential-providers": "^3.883.0",
+    "@aws-sdk/client-secrets-manager": "^3.899.0",
+    "@aws-sdk/client-sts": "^3.899.0",
+    "@aws-sdk/credential-providers": "^3.899.0",
     "commander": "^9.5.0",
-    "debug": "^4.4.1"
+    "debug": "^4.4.3"
   },
   "lint-staged": {
     "*.{ts,js}": [
@@ -60,10 +63,11 @@
     ]
   },
   "publishConfig": {
-    "registry": "https://registry.npmjs.org/"
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
   },
   "bin": {
-    "env-secrets": "./dist/index.js"
+    "env-secrets": "dist/index.js"
   },
   "engines": {
     "node": ">=18.0.0"