semantic-release-vsce 6.0.4 → 6.0.6

package/README.md

@@ -158,17 +158,26 @@ name: release
 
 on:
   push:
-    branches: [master]
+    branches:
+      - master
+
+permissions:
+  contents: read # for checkout
 
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 16
+          node-version: 22
       - run: npm ci
+      - run: npm audit signatures
       - run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -205,7 +214,7 @@ jobs:
          'semantic-release-vsce',
          {
            packageVsix: true,
-           publish: false, // no-op since we use semantic-release-stop-before-publish
+           publish: false,
          },
        ],
        'semantic-release-stop-before-publish',
@@ -228,13 +237,13 @@ jobs:
          'semantic-release-vsce',
          {
            packageVsix: false,
-           publishPackagePath: '*/*.vsix',
+           publishPackagePath: '*.vsix',
          },
        ],
        [
          '@semantic-release/github',
          {
-           assets: '*/*.vsix',
+           assets: '*.vsix',
          },
        ],
      ],
@@ -251,7 +260,11 @@ name: ci
 
 on:
   push:
-    branches: [master]
+    branches:
+      - master
+
+permissions:
+  contents: read # for checkout
 
 jobs:
   build:
@@ -263,7 +276,7 @@ jobs:
             npm_config_arch: x64
           - os: windows-latest
             target: win32-arm64
-            npm_config_arch: arm
+            npm_config_arch: arm64
           - os: ubuntu-latest
             target: linux-x64
             npm_config_arch: x64
@@ -276,6 +289,9 @@ jobs:
           - os: ubuntu-latest
             target: alpine-x64
             npm_config_arch: x64
+          - os: ubuntu-latest
+            target: alpine-arm64
+            npm_config_arch: arm64
           - os: macos-latest
             target: darwin-x64
             npm_config_arch: x64
@@ -285,52 +301,60 @@ jobs:
           - os: ubuntu-latest
             target: universal
     runs-on: ${{ matrix.os }}
+    # Even though semantic-release will not publish anything, it still needs to
+    # validate the GITHUB_TOKEN
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
     steps:
-      - uses: actions/checkout@v3
-
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 16
-
+          node-version: 22
       - if: matrix.target != 'universal'
         name: Install dependencies (with binaries)
         run: npm ci
         env:
           npm_config_arch: ${{ matrix.npm_config_arch }}
-
       - if: matrix.target == 'universal'
         name: Install dependencies (without binaries)
         run: npm ci
-
       - run: npx semantic-release --extends ./package.release.config.js
         env:
           VSCE_TARGET: ${{ matrix.target }}
-          # All tokens are required since semantic-release needs to validate them
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # In case you want to publish to Visual Studio Marketplace
-          VSCE_PAT: ${{ secrets.VSCE_PAT }}
-          # In case you want to publish to Open VSX Registry
-          OVSX_PAT: ${{ secrets.OVSX_PAT }}
-
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.target }}
           path: '*.vsix'
+      # vsce updates the version in package.json and package-lock.json during
+      # package step, so we need to save them for the publish step
+      - if: matrix.target == 'universal'
+        uses: actions/upload-artifact@v4
+        with:
+          name: package-json
+          path: |
+            package.json
+            package-lock.json
 
   release:
     runs-on: ubuntu-latest
     needs: build
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
     steps:
-      - uses: actions/checkout@v3
-
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
         with:
-          node-version: 16
-
+          merge-multiple: true
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
       - run: npm ci
-
-      - uses: actions/download-artifact@v3
-
+      - run: npm audit signatures
       - run: npx semantic-release --extends ./publish.release.config.js
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -347,26 +371,31 @@ name: release
 
 on:
   push:
-    branches: [master]
+    branches:
+      - master
+
+permissions:
+  contents: read # for checkout
 
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 16
-      - run: npm ci
-
-      # Log into Azure CLI to get VSCE credentials
-      - name: Azure login
-        uses: azure/login@v2
+      - uses: actions/checkout@v4
+      - uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
-
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - run: npm ci
+      - run: npm audit signatures
       - run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "semantic-release-vsce",
-  "version": "6.0.4",
+  "version": "6.0.6",
   "description": "semantic-release plugin to package and publish VS Code extensions",
   "license": "MIT",
   "type": "module",
@@ -47,7 +47,7 @@
     ]
   },
   "volta": {
-    "node": "22.12.0",
+    "node": "22.13.0",
     "npm": "11.0.0"
   },
   "dependencies": {