feat: Modularize and update dependencies

Author: dawsontoth

.github/dependabot.yml

@@ -1,21 +1,55 @@
 name: Release
+
 on:
+  merge_group:
+    branches:
+      - main
   push:
     branches:
-      - master
+      - main
+  workflow_dispatch:
+
+# Needed for semantic-release to create GitHub releases and publish to npm via OIDC
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
+concurrency:
+  group: Release
+  cancel-in-progress: false
+
 jobs:
   release:
-    name: Release
+    name: Semantic Release
+    environment: Release
+    # Ensure releases run only when code reaches main via GitHub Merge Queue, or when manually dispatched
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        with:
+          fetch-depth: 0
+      - name: Setup Node.js
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version-file: '.nvmrc'
+          cache: npm
+          registry-url: 'https://registry.npmjs.org'
+      - name: Update npm
+        run: npm install -g npm@latest
       - name: Install dependencies
         run: npm ci
-      - name: Release
+      - name: Run ESLint
+        run: npm run lint
+      - name: Run unit tests
+        run: npm run test:ci
+      - name: Semantic Release
+        if: ${{ github.event_name == 'push' }}
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npx semantic-release
+          NPM_CONFIG_PROVENANCE: true
+      - name: Publish to NPM
+        run: npm publish --provenance

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,37 @@
+name: Verify PR
+
+on:
+  pull_request:
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - name: Setup Node.js
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version-file: '.nvmrc'
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Run ESLint
+        run: npm run lint
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - name: Setup Node.js
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version-file: '.nvmrc'
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Run unit tests
+        run: npm run test:ci

.github/workflows/release.yml

@@ -1,2 +1,4 @@
-*
-!index.js
+.idea
+scripts/
+tests/
+**/*.test.js

.github/workflows/verify-pr.yml

@@ -1 +1 @@
-22
+24.11.1

.npmignore

@@ -0,0 +1,46 @@
+{
+  "branches": [
+    "main"
+  ],
+  "plugins": [
+    [
+      "@semantic-release/commit-analyzer",
+      {
+        "preset": "conventionalcommits",
+        "releaseRules": [
+          {
+            "type": "feat",
+            "release": "minor"
+          },
+          {
+            "type": "*",
+            "release": "patch"
+          }
+        ],
+        "parserOpts": {
+          "noteKeywords": [
+            "BREAKING CHANGE",
+            "BREAKING CHANGES"
+          ]
+        }
+      }
+    ],
+    "@semantic-release/release-notes-generator",
+    [
+      "@semantic-release/npm",
+      {
+        "npmPublish": false
+      }
+    ],
+    [
+      "@semantic-release/git",
+      {
+        "assets": [
+          "package.json",
+          "package-lock.json"
+        ]
+      }
+    ],
+    "@semantic-release/github"
+  ]
+}

.nvmrc

@@ -2,12 +2,12 @@
 
 Dynamically loads environment variables from modules and then spawns a child process with them
 
-It's like  [dotenv](https://github.com/motdotla/dotenv), but instead of .env files, you require modules!
+It's like [dotenv](https://github.com/motdotla/dotenv), but instead of .env files, you require modules!
 
 ## Usage
 
 Add `dynenv` as a dev dependency using your particular package manager:
-```json
+```sh
 npm install dynenv --save-dev
 yarn add dynenv --dev
 ```

.releaserc.json

@@ -0,0 +1,83 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'fs';
+import { tmpdir } from 'os';
+import { join, dirname, resolve } from 'path';
+import { fileURLToPath } from 'url';
+import { spawnSync } from 'child_process';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const projectRoot = resolve(__dirname, '..');
+const cliEntry = resolve(projectRoot, 'index.js');
+
+function makeTempDir(prefix = 'dynenv-it-') {
+  return mkdtempSync(join(tmpdir(), prefix));
+}
+
+function ensureDir(path) {
+  mkdirSync(path, { recursive: true });
+}
+
+function write(path, content) {
+  ensureDir(dirname(path));
+  writeFileSync(path, content);
+}
+
+function runDynenv(args, options = {}) {
+  // Use the current Node executable to run the CLI entry
+  const res = spawnSync(process.execPath, [cliEntry, ...args], {
+    cwd: options.cwd,
+    env: options.env || process.env,
+    stdio: 'ignore',
+    encoding: 'utf-8',
+  });
+  return res;
+}
+
+describe('README integration examples', () => {
+  let cwd;
+
+  beforeEach(() => {
+    cwd = makeTempDir();
+  });
+
+  afterEach(() => {
+    if (cwd) {
+      try {
+        rmSync(cwd, { recursive: true, force: true });
+      }
+      catch {
+        // No directory to clean up (test may have failed before it could get to this point)
+      }
+    }
+  });
+
+  it('runs with barrier example: dynenv ./snippet.js -- <command>', () => {
+    // snippet.js from README exporting a function that returns env vars
+    write(join(cwd, 'snippet.js'), `module.exports = function() { return { REACT_APP_SAY_WHAAAAAT: 'WORLD!' }; };`);
+    // child script that asserts env is set
+    write(join(cwd, 'child.js'), `process.exit(process.env.REACT_APP_SAY_WHAAAAAT==='WORLD!' ? 0 : 1);`);
+
+    const res = runDynenv(['./snippet.js', '--', 'node', 'child.js'], { cwd });
+
+    expect(res.status).toBe(0);
+  });
+
+  it('auto-discovers dynenv entries from node_modules packages (including scoped)', () => {
+    // Unscoped package pkg1
+    const pkg1Root = join(cwd, 'node_modules', 'pkg1');
+    write(join(pkg1Root, 'package.json'), JSON.stringify({ name: 'pkg1', version: '1.0.0', dynenv: 'env/a.js' }, null, 2));
+    write(join(pkg1Root, 'env', 'a.js'), `module.exports = () => ({ AUTO_DISCOVERED: 'YES' });`);
+
+    // Scoped package @scope/pkg2
+    const pkg2Root = join(cwd, 'node_modules', '@scope', 'pkg2');
+    write(join(pkg2Root, 'package.json'), JSON.stringify({ name: '@scope/pkg2', version: '1.0.0', dynenv: 'env/b.js' }, null, 2));
+    write(join(pkg2Root, 'env', 'b.js'), `module.exports = () => ({ SCOPED: 'OK' });`);
+
+    // child script checks both env vars injected
+    write(join(cwd, 'verify.js'), `const ok = process.env.AUTO_DISCOVERED==='YES' && process.env.SCOPED==='OK'; process.exit(ok?0:1);`);
+
+    const res = runDynenv(['node', 'verify.js'], { cwd });
+
+    expect(res.status).toBe(0);
+  });
+});

README.md

@@ -0,0 +1,12 @@
+import js from '@eslint/js';
+import { defineConfig } from 'eslint/config';
+import globals from 'globals';
+
+export default defineConfig([
+  {
+    files: ['**/*.{js,mjs,cjs}'],
+    plugins: { js },
+    extends: ['js/recommended'],
+    languageOptions: { globals: globals.node },
+  },
+]);