github-settings-as-code 4.0.0 → 4.0.2

package/dist/github/actions-settings/constants.d.mts

@@ -149,7 +149,7 @@ export declare const ActionsSettings: Readonly<{
          * `read` にできるのは、 workflow 側が全て明示的に `permissions` を宣言して
          * いる場合だけ。宣言の無い job はこの既定値をそのまま受け取るため、
          * `write` のままだと「 branch の中身が何であれ書き込めるトークン」が
-         * 渡る。 .github/workflows/code-check.yml 冒頭の注記を参照。
+         * 渡る。 .github/workflows/README.md の "Permissions" を参照。
          */
         readonly default_workflow_permissions: Readonly<{
             typeName: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-settings-as-code",
-  "version": "4.0.0",
+  "version": "4.0.2",
   "private": false,
   "keywords": [
     "github",
@@ -27,39 +27,39 @@
   "dependencies": {
     "@octokit/core": "^7.0.8",
     "dedent": "^1.7.2",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.4",
     "octokit-safe-types": "^1.2.28",
     "ts-data-forge": "^14.7.1",
     "ts-fortress": "^12.1.3",
-    "ts-repo-utils": "^10.7.0",
+    "ts-repo-utils": "^10.7.1",
     "ts-type-forge": "^9.2.2"
   },
   "devDependencies": {
-    "@types/node": "26.5.1",
-    "@vitest/coverage-v8": "5.0.0",
-    "@vitest/ui": "5.0.0",
-    "cspell": "10.3.0",
-    "eslint": "10.10.0",
-    "eslint-config-typed": "5.11.10",
-    "eslint-plugin-ts-data-forge": "0.8.1",
-    "eslint-plugin-ts-fortress": "1.2.3",
-    "eslint-plugin-ts-type-forge": "0.8.4",
+    "@types/node": "26.6.3",
+    "@vitest/coverage-v8": "5.0.2",
+    "@vitest/ui": "5.0.2",
+    "cspell": "10.3.5",
+    "eslint": "10.11.0",
+    "eslint-config-typed": "5.16.0",
+    "eslint-plugin-ts-data-forge": "0.8.2",
+    "eslint-plugin-ts-fortress": "1.2.4",
+    "eslint-plugin-ts-type-forge": "0.8.5",
     "jiti": "2.7.0",
     "npm-run-all2": "9.0.3",
-    "prettier": "3.9.6",
+    "prettier": "3.9.9",
     "prettier-plugin-organize-imports": "4.3.0",
     "prettier-plugin-packagejson": "3.0.2",
-    "tsx": "4.23.13",
+    "tsx": "4.23.15",
     "typescript": "6.0.3",
     "typescript-native": "npm:typescript@7.0.2",
-    "vitest": "5.0.0"
+    "vitest": "5.0.2"
   },
   "engines": {
     "node": ">=22.22.2",
     "pnpm": ">=9.0.0"
   },
   "volta": {
-    "node": "26.8.2"
+    "node": "26.10.0"
   },
   "publishConfig": {
     "access": "public",

package/src/github/actions-settings/constants.mts

@@ -35,7 +35,7 @@ export const ActionsSettings = t.record({
    * `read` にできるのは、 workflow 側が全て明示的に `permissions` を宣言して
    * いる場合だけ。宣言の無い job はこの既定値をそのまま受け取るため、
    * `write` のままだと「 branch の中身が何であれ書き込めるトークン」が
-   * 渡る。 .github/workflows/code-check.yml 冒頭の注記を参照。
+   * 渡る。 .github/workflows/README.md の "Permissions" を参照。
    */
   default_workflow_permissions: t.enumType(['read', 'write'], {
     typeName: 'DefaultWorkflowPermissions',

package/src/github/ruleset/schema.test.mts

@@ -86,18 +86,20 @@ describe('the ruleset schema', () => {
 
     assert.deepStrictEqual(outcomeOf(files[0][0], declared), files[0][0]);
 
-    if (Result.isOk(declared)) {
-      // `getRuleset` hands the whole API response to this type, and a response
-      // carries more than the seven fields that go back out again.
-      const result = RulesetPicked.validate({
-        ...declared.value,
-        source: 'noshiro-pf/mono',
-        source_type: 'Repository',
-        node_id: 'RRS_lACqUmVwb3NpdG9yeQ',
-      });
-
-      assert.isTrue(Result.isOk(result));
+    if (Result.isErr(declared)) {
+      return;
     }
+
+    // `getRuleset` hands the whole API response to this type, and a response
+    // carries more than the seven fields that go back out again.
+    const result = RulesetPicked.validate({
+      ...declared.value,
+      source: 'noshiro-pf/mono',
+      source_type: 'Repository',
+      node_id: 'RRS_lACqUmVwb3NpdG9yeQ',
+    });
+
+    assert.isTrue(Result.isOk(result));
   });
 
   test('accepts a ruleset built from values GitHub does use', () => {

package/src/github/variables/constants.test.mts

@@ -99,12 +99,14 @@ describe(assertVariableNamesAreValid, () => {
 
     assert.isTrue(Result.isErr(result));
 
-    if (Result.isErr(result)) {
-      assert.isTrue(result.value.message.includes('WITH-HYPHEN'));
+    if (!Result.isErr(result)) {
+      return;
+    }
 
-      assert.isTrue(result.value.message.includes('GITHUB_TOKEN'));
+    assert.isTrue(result.value.message.includes('WITH-HYPHEN'));
 
-      assert.isFalse(result.value.message.includes('FINE'));
-    }
+    assert.isTrue(result.value.message.includes('GITHUB_TOKEN'));
+
+    assert.isFalse(result.value.message.includes('FINE'));
   });
 });