node-osc 8.0.1 → 8.0.4

package/.github/workflows/bump-version.yml

@@ -19,26 +19,16 @@ on:
         - minor
         - major
 
-# A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
-  # This workflow contains a single job called "bump-version"
   bump-version:
-    # The type of runner that the job will run on
     runs-on: ubuntu-latest
 
-    # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
-    # Check out the content (source branch).  Use a deploy key so that
-    # when we push changes, it will trigger the release workflow
-    # run that runs on: tag. (Using the GitHub token would
-    # not run the workflow to prevent infinite recursion.)
     - name: Check out source
-      uses: actions/checkout@v2
-      with:
-        ssh-key: ${{ secrets.DEPLOY_KEY }}
+      uses: actions/checkout@v3
 
     - name: Setup Node.js
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v3
       with:
         node-version: '16'
         cache: 'npm'
@@ -56,3 +46,9 @@ jobs:
 
     - name: Push latest version
       run: git push origin main --follow-tags
+
+  create-release:
+    needs: bump-version
+    uses: ./.github/workflows/create-release.yml
+    secrets:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/.github/workflows/codeql-analysis.yml

@@ -36,11 +36,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -48,4 +48,4 @@ jobs:
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2

package/.github/workflows/create-release.yml

@@ -2,16 +2,29 @@ on:
   push:
     tags:
       - 'v*'
+  workflow_call:
+    secrets:
+      NPM_TOKEN:
+        required: true
 
 name: Create Release
 
 jobs:
   publish:
+    permissions:
+      contents: read
     name: Publish to npm
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - name : checkout main if triggered
+        if: ${{ github.event_name == 'workflow_dispatch' }}
+        uses: actions/checkout@v3
+        with:
+          ref: main
+      - name: checkout tag if not triggered
+        if: ${{ github.event_name != 'workflow_dispatch' }}
+        uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
         with:
           node-version: '16'
           cache: 'npm'
@@ -24,12 +37,16 @@ jobs:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   create-github-release:
+    permissions:
+      contents: read
     name: Create GitHub Release
     runs-on: ubuntu-latest
     needs: publish
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
+        with:
+          ref: main
       - name: Create Release
         run: gh release create ${{ github.ref }} --generate-notes
         env:

package/.github/workflows/nodejs.yml

@@ -17,10 +17,10 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v3
       with:
         node-version: ${{ matrix.node-version }}
         cache: 'npm'

package/LICENSE

@@ -1,4 +1,4 @@
-                  GNU LESSER GENERAL PUBLIC LICENSE
+                   GNU LESSER GENERAL PUBLIC LICENSE
                        Version 3, 29 June 2007
 
  Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
@@ -162,4 +162,4 @@ General Public License ever published by the Free Software Foundation.
 whether future versions of the GNU Lesser General Public License shall
 apply, that proxy's public statement of acceptance of any version is
 permanent authorization for you to choose that version for the
-Library.
+Library.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "node-osc",
   "description": "pyOSC inspired library for sending and receiving OSC messages",
-  "version": "8.0.1",
+  "version": "8.0.4",
   "exports": {
     "require": "./dist/lib/index.js",
     "default": "./lib/index.mjs"
@@ -13,7 +13,7 @@
   "engines": {
     "node": "^14.18 || ^16.13 || >=18"
   },
-  "license": "LGPL-3.0",
+  "license": "LGPL-3.0-or-later",
   "scripts": {
     "clean": "rm -rf dist/",
     "build": "npm run clean && rollup --config rollup.config.mjs",