httpcat-cli 0.0.26 → 0.0.27-rc.2

package/.github/workflows/README.md

@@ -25,9 +25,26 @@ Manual workflow to update the Homebrew formula in the tap repository.
 
 ## Secrets Required
 
-Configure these in Repository Settings → Secrets and variables → Actions:
+**No secrets needed for publishing!** We use npm's [trusted publishing](https://docs.npmjs.com/trusted-publishers) with OIDC.
 
-- `NPM_TOKEN`: npm authentication token with publish permissions
+### Setting up Trusted Publishing
+
+1. Go to your package settings: https://www.npmjs.com/package/httpcat-cli/settings
+2. Navigate to **"Trusted Publishers"** section
+3. Click **"Add Trusted Publisher"**
+4. Select **"GitHub Actions"**
+5. Configure:
+   - **Repository**: `hathbanger/httpcat-cli`
+   - **Workflow file**: `.github/workflows/rc-publish.yml` (for RC) or `.github/workflows/release.yml` (for releases)
+   - **Environment name**: `npm-publish` (optional, if using environments)
+6. Save the configuration
+
+**Benefits:**
+- ✅ No tokens needed - uses OIDC authentication
+- ✅ Bypasses 2FA requirements automatically
+- ✅ Automatic provenance generation
+- ✅ More secure - short-lived credentials
+- ✅ No token management or rotation needed
   - Generate at: https://www.npmjs.com/settings/YOUR_USERNAME/tokens
   - Required scopes: `read:packages`, `write:packages`
 

package/.github/workflows/ci.yml

@@ -7,7 +7,7 @@ on:
     branches: [main, develop]
 
 env:
-  NODE_VERSION: '20'
+  NODE_VERSION: "20"
 
 jobs:
   test:
@@ -15,29 +15,33 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: ['18', '20', '22']
+        node-version: ["18", "20", "22"]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
 
       - name: Setup Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
-          cache: 'yarn'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: bun install --frozen-lockfile
 
       - name: Run tests
-        run: yarn test
+        run: bun run test
 
       - name: Build
-        run: yarn build
+        run: bun run build
 
       - name: Upload coverage reports
         if: matrix.node-version == '20'
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           files: ./coverage/lcov.info
           flags: unittests
@@ -49,19 +53,23 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
-          cache: 'yarn'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: bun install --frozen-lockfile
 
       - name: Type check
-        run: yarn build --noEmit || npx tsc --noEmit
+        run: bun run build --noEmit || npx tsc --noEmit
 
       - name: Check formatting (if configured)
         continue-on-error: true
@@ -77,19 +85,23 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
-          cache: 'yarn'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: bun install --frozen-lockfile
 
       - name: Run security audit
-        run: yarn audit --level moderate || true
+        run: bun audit --audit-level moderate || true
 
       - name: Check for known vulnerabilities
         uses: snyk/actions/node@master
@@ -98,4 +110,3 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         with:
           args: --severity-threshold=high
-

package/.github/workflows/homebrew-tap.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout homebrew tap
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: hathbanger/homebrew-httpcat
           token: ${{ secrets.GITHUB_TOKEN }}

package/.github/workflows/rc-publish.yml

@@ -0,0 +1,169 @@
+name: RC Publish
+
+on:
+  push:
+    branches:
+      - develop
+
+env:
+  NODE_VERSION: "20"
+  REGISTRY_URL: "https://registry.npmjs.org"
+
+jobs:
+  # Job 1: Determine RC version
+  prepare:
+    name: Prepare RC Version
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+      base-version: ${{ steps.version.outputs.base-version }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: ${{ env.REGISTRY_URL }}
+
+      - name: Get base version from package.json
+        id: base-version
+        run: |
+          BASE_VERSION=$(node -p "require('./package.json').version")
+          # Remove any existing prerelease suffix (e.g., 0.0.28-rc.1 -> 0.0.28)
+          BASE_VERSION=$(echo "$BASE_VERSION" | sed 's/-.*$//')
+          echo "base-version=$BASE_VERSION" >> $GITHUB_OUTPUT
+          echo "✅ Base version: $BASE_VERSION"
+
+      - name: Find latest RC version and increment
+        id: version
+        run: |
+          BASE_VERSION="${{ steps.base-version.outputs.base-version }}"
+
+          echo "Querying npm for existing RC versions..."
+          # Get all versions from npm
+          ALL_VERSIONS=$(npm view httpcat-cli versions --json 2>/dev/null || echo "[]")
+
+          # Filter for versions matching base version with RC suffix
+          RC_VERSIONS=$(echo "$ALL_VERSIONS" | node -e "
+            const versions = JSON.parse(require('fs').readFileSync(0, 'utf-8'));
+            const base = process.argv[1];
+            const rcVersions = versions
+              .filter(v => v.startsWith(base + '-rc.'))
+              .map(v => {
+                const match = v.match(/-rc\.(\d+)$/);
+                return match ? parseInt(match[1]) : 0;
+              })
+              .filter(n => n > 0)
+              .sort((a, b) => b - a);
+            console.log(rcVersions.length > 0 ? rcVersions[0] : 0);
+          " "$BASE_VERSION")
+
+          # Increment RC number
+          NEXT_RC=$((RC_VERSIONS + 1))
+          RC_VERSION="${BASE_VERSION}-rc.${NEXT_RC}"
+
+          echo "version=$RC_VERSION" >> $GITHUB_OUTPUT
+          echo "✅ Next RC version: $RC_VERSION"
+
+  # Job 2: Build and test
+  test:
+    name: Build & Test
+    runs-on: ubuntu-latest
+    needs: prepare
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: bun run test
+        # Note: Using Vitest now instead of Jest
+
+      - name: Build
+        run: bun run build
+
+      - name: Verify build output
+        run: |
+          if [ ! -f "dist/index.js" ]; then
+            echo "❌ Build failed: dist/index.js not found"
+            exit 1
+          fi
+          echo "✅ Build successful"
+
+  # Job 3: Publish RC to npm
+  publish-npm:
+    name: Publish RC to npm
+    runs-on: ubuntu-latest
+    needs: [prepare, test]
+    environment:
+      name: npm-publish
+      url: https://www.npmjs.com/package/httpcat-cli
+    permissions:
+      contents: read
+      id-token: write # Required for OIDC trusted publishing (no token needed!)
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: ${{ env.REGISTRY_URL }}
+
+      - name: Update npm to latest
+        run: npm install -g npm@latest
+        # npm 11.5.1+ required for trusted publishing (OIDC)
+
+      - name: Update package.json version
+        run: |
+          npm version "${{ needs.prepare.outputs.version }}" --no-git-tag-version --allow-same-version
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build
+        run: bun run build
+
+      - name: Publish RC to npm
+        run: npm publish --tag rc --access public
+        # Uses trusted publishing (OIDC) - no token needed!
+        # Configure trusted publisher at: https://www.npmjs.com/package/httpcat-cli/settings
+        # Provenance is automatically generated when using trusted publishing
+
+      - name: Verify npm publication
+        run: |
+          sleep 5  # Wait for npm CDN propagation
+          VERSION="${{ needs.prepare.outputs.version }}"
+          if npm view httpcat-cli@$VERSION version > /dev/null 2>&1; then
+            echo "✅ Successfully published httpcat-cli@$VERSION to npm (rc tag)"
+          else
+            echo "❌ Failed to verify npm publication"
+            exit 1
+          fi
+
+      - name: RC summary
+        run: |
+          echo "✅ RC published successfully!"
+          echo "Version: ${{ needs.prepare.outputs.version }}"
+          echo "npm: https://www.npmjs.com/package/httpcat-cli/v/${{ needs.prepare.outputs.version }}"
+          echo "Install: npm install -g httpcat-cli@${{ needs.prepare.outputs.version }}"