homebridge-eggtimer-plugin 1.1.4 → 1.2.1

package/.github/workflows/build.yml

@@ -1,11 +1,12 @@
-# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
-# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
-
 name: Build
 permissions:
   contents: read
 
-on: [pull_request]
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
 
 jobs:
 
@@ -15,16 +16,17 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x, 20.x, 22.x, latest]
+        node-version: [20.x, 22.x]
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: pnpm/action-setup@v4
+    - uses: actions/checkout@v6
+    - uses: pnpm/action-setup@v5
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4.4.0
+      uses: actions/setup-node@v6.3.0
       with:
         node-version: ${{ matrix.node-version }}
         cache: pnpm
     - run: pnpm install --frozen-lockfile
+    - run: pnpm audit --audit-level=moderate
     - run: pnpm lint
     - run: pnpm build

package/.github/workflows/codeql.yml

@@ -0,0 +1,30 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "0 6 * * 1"
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: javascript-typescript
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:javascript-typescript"

package/.github/workflows/release.yml

@@ -0,0 +1,43 @@
+name: Release
+
+on:
+  workflow_run:
+    workflows: [Build]
+    types: [completed]
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: Semantic Release
+    runs-on: ubuntu-latest
+    if: >-
+      github.event_name == 'workflow_dispatch' ||
+      github.event.workflow_run.conclusion == 'success'
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: pnpm/action-setup@v5
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24.x
+          cache: pnpm
+          registry-url: https://registry.npmjs.org/
+
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build
+
+      - name: Semantic Release
+        run: pnpm semantic-release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/.releaserc.json

@@ -0,0 +1,23 @@
+{
+  "branches": ["main"],
+  "plugins": [
+    ["@semantic-release/commit-analyzer", {
+      "releaseRules": [
+        { "type": "build", "scope": "deps", "release": "patch" },
+        { "type": "build", "scope": "deps-dev", "release": "patch" }
+      ]
+    }],
+    ["@semantic-release/release-notes-generator", {
+      "presetConfig": {
+        "types": [
+          { "type": "feat", "section": "Features" },
+          { "type": "fix", "section": "Bug Fixes" },
+          { "type": "build", "section": "Dependencies", "hidden": false },
+          { "type": "perf", "section": "Performance" }
+        ]
+      }
+    }],
+    ["@semantic-release/npm", { "provenance": true }],
+    "@semantic-release/github"
+  ]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "homebridge-eggtimer-plugin",
   "displayName": "Homebridge Eggtimer Plugin",
-  "version": "1.1.4",
+  "version": "1.2.1",
   "description": "Egg Timers for Homebridge: https://github.com/nfarina/homebridge",
   "license": "MIT",
   "keywords": [
@@ -31,27 +31,34 @@
     "node": ">=18.0.0",
     "homebridge": ">=1.3.5 || ^2.0.0-beta.0"
   },
+  "scripts": {
+    "lint": "eslint src",
+    "lintAndFix": "eslint --fix src",
+    "debug": "tsc && homebridge -I -D",
+    "build": "rimraf ./dist && tsc",
+    "prepublishOnly": "pnpm lint && pnpm build"
+  },
   "devDependencies": {
-    "@eslint/js": "^9.34.0",
-    "@stylistic/eslint-plugin": "^4.4.1",
+    "@eslint/js": "^10.0.0",
+    "@semantic-release/commit-analyzer": "13.0.1",
+    "@semantic-release/github": "12.0.6",
+    "@semantic-release/npm": "13.1.5",
+    "@semantic-release/release-notes-generator": "14.1.0",
+    "@stylistic/eslint-plugin": "^5.10.0",
     "@types/async-lock": "^1.4.2",
-    "@types/node": "^22.17.2",
+    "@types/node": "^24.12.0",
     "@types/node-persist": "^3.1.8",
-    "eslint": "^9.34.0",
-    "homebridge": "^1.11.0",
-    "rimraf": "^6.0.1",
+    "eslint": "^10.0.0",
+    "homebridge": "^1.11.3",
+    "rimraf": "^6.1.3",
+    "semantic-release": "25.0.3",
     "ts-node": "^10.9.2",
-    "typescript": "^5.9.2",
-    "typescript-eslint": "^8.40.0"
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.57.1"
   },
   "dependencies": {
     "async-lock": "^1.4.1",
     "node-persist": "^4.0.4"
   },
-  "scripts": {
-    "lint": "eslint src",
-    "lintAndFix": "eslint --fix src",
-    "debug": "tsc && homebridge -I -D",
-    "build": "rimraf ./dist && tsc"
-  }
-}
+  "packageManager": "pnpm@10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be"
+}

package/renovate.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "labels": ["dependencies"],
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": ["before 7am on Monday"],
+    "commitMessageAction": "upgrade",
+    "automerge": true
+  },
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "groupName": "non-major dependencies",
+      "automerge": true
+    }
+  ],
+  "commitMessagePrefix": "build(deps):",
+  "dependencyDashboard": true
+}

package/.github/dependabot.yml

@@ -1,22 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
-version: 2
-updates:
-
-  # Maintain dependencies for GitHub Actions
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-      
-  # Maintain dependencies for npm
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-    allow:
-      - dependency-type: "production"
-    rebase-strategy: "disabled"

package/.github/workflows/audit.yml

@@ -1,27 +0,0 @@
-# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
-# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
-
-name: Audit
-permissions:
-  contents: read
-
-on:
-  
-  schedule:
-    - cron: '0 0 * * *'
-  workflow_dispatch:
-
-jobs:
-  build:
-
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@v4
-    - uses: pnpm/action-setup@v4
-    - uses: actions/setup-node@v4.4.0
-      with:
-        node-version: latest
-        cache: pnpm
-    - run: pnpm install --frozen-lockfile
-    - run: pnpm audit -P

package/.github/workflows/automerge.yml

@@ -1,15 +0,0 @@
-name: Auto-merge
-on: pull_request
-
-jobs:
-  automerge:
-    permissions:
-      pull-requests: write
-      contents: write
-    runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]' || ((startsWith(github.event.pull_request.title, 'Bump to version ') || startsWith(github.event.pull_request.title, 'Update PNPM')) && (github.actor == 'github-actions' || github.actor == 'teh-hippo'))
-    steps:
-      - uses: actions/checkout@v4
-      - run: gh pr merge --rebase --delete-branch --auto "${{ github.event.pull_request.number }}"
-        env:
-          GH_TOKEN: ${{ github.token }}

package/.github/workflows/build-homebridge2.0.yml

@@ -1,34 +0,0 @@
-# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
-# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
-
-name: Build Homebridge 2.x
-
-permissions:
-  contents: read
-
-on:
-  pull_request:
-  schedule:
-    - cron: '0 0 * * *'
-
-jobs:
-
-  build:
-
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@v4
-    - uses: pnpm/action-setup@v4
-    - run: |
-        sed -i -e 's/"homebridge": "\^[0-9]\.[0-9]\.[0-9]/"homebridge": "^2.0.0-beta.0/g' package.json
-    - uses: actions/setup-node@v4.4.0
-      with:
-        node-version: latest
-        cache: pnpm
-    - run: pnpm install --no-frozen-lockfile
-    - name: Show Homebridge 2.0 Version
-      run: |
-        pnpm ls homebridge --parseable | grep -o '@\([^\/]\+\)'
-    - run: pnpm build
-    - run: pnpm lint

package/.github/workflows/corepack.yml

@@ -1,38 +0,0 @@
-# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
-# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
-
-name: Update PNPM
-
-on:
-  
-  schedule:
-    - cron: '37 13 1 * *'
-  workflow_dispatch:
-    
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  build:
-
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@v4
-    - uses: pnpm/action-setup@v4
-    - uses: actions/setup-node@v4.4.0
-      with:
-        node-version: latest
-        cache: pnpm
-    - run: corepack use pnpm@latest
-    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@v7
-      with:
-        delete-branch: true
-        title: Update PNPM
-        commit-message: |
-          Update to the latest PNPM manager.
-        token: ${{ secrets.PAT }}
-        committer: AutoHippo <auto@hippo.org>
-        branch: autohippo/update-pnpm-${{ github.run_number }}

package/.github/workflows/npm-publish.yml

@@ -1,62 +0,0 @@
-# This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
-# For more information see: https://help.github.com/actions/language-and-framework-guides/publishing-nodejs-packages
-
-name: Release
-
-on:
-  release:
-    types: [published]
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4.4.0
-        with:
-          node-version: latest
-          cache: pnpm
-          registry-url: https://registry.npmjs.org/
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm build
-      - run: pnpm publish --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-  update-build-number:
-    needs: publish
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      contents: write
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          ref: main
-          fetch-tags: true
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4.4.0
-        with:
-          node-version: latest
-          cache: pnpm
-          registry-url: https://registry.npmjs.org/
-      - run: pnpm version patch --no-git-tag-version
-      - name: get-npm-version
-        id: version-after
-        uses: martinbeentjes/npm-get-version-action@v1.3.1
-      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
-        with:
-          add-paths: |
-            package.json
-          delete-branch: true
-          title: Bump to version ${{ steps.version-after.outputs.current-version }}
-          commit-message: |
-            Bump to version ${{ steps.version-after.outputs.current-version }}
-          token: ${{ secrets.PAT }}
-          committer: AutoHippo <auto@hippo.org>
-          branch: bump-to-version-${{ steps.version-after.outputs.current-version }}