fix: dependabot bumps & releases in CI (#810)

boorad · web-flow · commit 603b77d0bfe0 · 2025-11-25T14:17:36.000-05:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,23 +1,28 @@
 version: 2
 
 updates:
-  - package-ecosystem: "bun"
-    target-branch: "main"
-    directory: "/"
+  - package-ecosystem: 'bundler'
+    directory: '/example'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
+
+  - package-ecosystem: 'bun'
+    target-branch: 'main'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
     ignore:
-      - dependency-name: "react"
-      - dependency-name: "react-native"
-      - dependency-name: "@react-native/eslint-plugin"
-      - dependency-name: "@react-native/metro-config"
-      - dependency-name: "@react-native/eslint-config"
-      - dependency-name: "@react-native/gradle-plugin"
-      - dependency-name: "@react-native-community/cli"
-      - dependency-name: "@react-native-community/cli-platform-android"
-      - dependency-name: "@react-native-community/cli-platform-ios"
-      - dependency-name: "@types/react"
-      - dependency-name: "chai"
-        versions: [ "<5.0.0" ]
-      - dependency-name: "@types/chai"
-        versions: [ "<5.0.0" ]
+      - dependency-name: 'react'
+      - dependency-name: 'react-native'
+      - dependency-name: '@react-native/eslint-plugin'
+      - dependency-name: '@react-native/metro-config'
+      - dependency-name: '@react-native/eslint-config'
+      - dependency-name: '@react-native/gradle-plugin'
+      - dependency-name: '@react-native-community/cli'
+      - dependency-name: '@react-native-community/cli-platform-android'
+      - dependency-name: '@react-native-community/cli-platform-ios'
+      - dependency-name: '@types/react'
+      - dependency-name: 'chai'
+        versions: ['<5.0.0']
+      - dependency-name: '@types/chai'
+        versions: ['<5.0.0']
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -0,0 +1,74 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to release (e.g., 1.0.0-beta.21) or increment (patch, minor, major, prepatch, preminor, premajor, prerelease)'
+        required: true
+        default: 'prerelease'
+      dry-run:
+        description: 'Dry run (no actual publish)'
+        type: boolean
+        default: false
+
+jobs:
+  release:
+    runs-on: macos-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Setup Node.js (for npm publish with OIDC)
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Setup Ruby (for CocoaPods)
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 3.3
+          bundler-cache: true
+          working-directory: example
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Configure Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Copy README to package
+        run: cp README.md packages/react-native-quick-crypto/README.md
+
+      - name: Release package to npm
+        working-directory: packages/react-native-quick-crypto
+        run: |
+          if [ "${{ inputs.dry-run }}" = "true" ]; then
+            bun release ${{ inputs.version }} --dry-run --ci
+          else
+            bun release ${{ inputs.version }} --ci
+          fi
+        env:
+          NPM_CONFIG_PROVENANCE: true
+
+      - name: Create Git tag and GitHub release
+        run: |
+          if [ "${{ inputs.dry-run }}" = "true" ]; then
+            bun run release-it ${{ inputs.version }} --dry-run --ci
+          else
+            bun run release-it ${{ inputs.version }} --ci
+          fi
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/bun.lock b/bun.lock
diff --git a/bunfig.toml b/bunfig.toml
@@ -0,0 +1,2 @@
+[install]
+publicHoistPattern = ["@react-native*", "react-native", "react"]
diff --git a/example/Gemfile b/example/Gemfile
@@ -14,3 +14,4 @@ gem 'bigdecimal'
 gem 'logger'
 gem 'benchmark'
 gem 'mutex_m'
+gem 'rexml', '>= 3.4.2'
diff --git a/example/Gemfile.lock b/example/Gemfile.lock
@@ -88,7 +88,7 @@ GEM
     netrc (0.11.0)
     nkf (0.2.0)
     public_suffix (4.0.7)
-    rexml (3.3.9)
+    rexml (3.4.4)
     ruby-macho (2.5.1)
     securerandom (0.3.1)
     typhoeus (1.4.1)
@@ -114,6 +114,7 @@ DEPENDENCIES
   concurrent-ruby (< 1.3.4)
   logger
   mutex_m
+  rexml (>= 3.4.2)
   xcodeproj (< 1.26.0)
 
 RUBY VERSION
diff --git a/example/ios/Podfile.lock b/example/ios/Podfile.lock
diff --git a/example/ios/QuickCryptoExample.xcodeproj/project.pbxproj b/example/ios/QuickCryptoExample.xcodeproj/project.pbxproj
@@ -396,7 +396,7 @@
 					"-DFOLLY_HAVE_CLOCK_GETTIME=1",
 				);
 				OTHER_LDFLAGS = "$(inherited)";
-				REACT_NATIVE_PATH = "${PODS_ROOT}/../../../node_modules/react-native";
+				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/react-native";
 				SDKROOT = iphoneos;
 				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "$(inherited) DEBUG";
 				SWIFT_ENABLE_EXPLICIT_MODULES = NO;
@@ -481,7 +481,7 @@
 					"-DFOLLY_HAVE_CLOCK_GETTIME=1",
 				);
 				OTHER_LDFLAGS = "$(inherited)";
-				REACT_NATIVE_PATH = "${PODS_ROOT}/../../../node_modules/react-native";
+				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/react-native";
 				SDKROOT = iphoneos;
 				SWIFT_ENABLE_EXPLICIT_MODULES = NO;
 				USE_HERMES = true;
diff --git a/example/metro.config.cjs b/example/metro.config.cjs
@@ -1,11 +1,8 @@
 const { getDefaultConfig, mergeConfig } = require('@react-native/metro-config');
 const path = require('path');
-const exclusionList = require('metro-config/private/defaults/exclusionList');
-const escape = require('escape-string-regexp');
-const pack = require('../package.json');
 
 const root = path.resolve(__dirname, '..');
-const peerModules = Object.keys({ ...pack.peerDependencies });
+const packagesDir = path.join(root, 'packages');
 
 /**
  * Metro configuration
@@ -16,20 +13,13 @@ const peerModules = Object.keys({ ...pack.peerDependencies });
 const config = {
   watchFolders: [root],
 
-  // We need to make sure that only one version is loaded for peerDependencies
-  // So we blacklist them at the root, and alias them to the versions in example's node_modules
   resolver: {
-    blacklistRE: exclusionList(
-      peerModules.map(
-        m => new RegExp(`^${escape(path.join(root, 'node_modules', m))}\\/.*$`),
-      ),
-    ),
-
+    nodeModulesPaths: [
+      path.join(__dirname, 'node_modules'),
+      path.join(root, 'node_modules'),
+      packagesDir,
+    ],
     extraNodeModules: {
-      ...peerModules.reduce((acc, name) => {
-        acc[name] = path.join(__dirname, 'node_modules', name);
-        return acc;
-      }, {}),
       stream: require.resolve('readable-stream'),
     },
   },
diff --git a/example/package.json b/example/package.json
@@ -25,9 +25,9 @@
     "@noble/ciphers": "^2.0.1",
     "@noble/curves": "^1.7.0",
     "@noble/hashes": "^1.5.0",
-    "@react-navigation/bottom-tabs": "^6.6.1",
-    "@react-navigation/native": "^6.1.18",
-    "@react-navigation/native-stack": "^6.11.0",
+    "@react-navigation/bottom-tabs": "^7.8.6",
+    "@react-navigation/native": "^7.1.19",
+    "@react-navigation/native-stack": "^7.8.0",
     "buffer": "6.0.3",
     "chai": "<5.0.0",
     "crypto-browserify": "^3.12.0",
@@ -40,16 +40,18 @@
     "react-native-quick-base64": "2.2.2",
     "react-native-quick-crypto": "workspace:*",
     "react-native-safe-area-context": "^5.2.2",
-    "react-native-screens": "4.15.4",
+    "react-native-screens": "4.18.0",
     "react-native-vector-icons": "^10.1.0",
     "readable-stream": "4.5.2",
+    "safe-buffer": "^5.2.1",
     "tinybench": "^3.0.6",
     "util": "0.12.5"
   },
   "devDependencies": {
     "@babel/core": "7.28.4",
     "@babel/plugin-transform-class-static-block": "7.26.0",
     "@babel/preset-env": "7.26.0",
+    "@babel/preset-typescript": "^7.28.5",
     "@babel/runtime": "7.28.4",
     "@react-native-community/cli": "20.0.0",
     "@react-native-community/cli-platform-android": "20.0.0",
@@ -58,12 +60,12 @@
     "@react-native/eslint-config": "0.81.1",
     "@react-native/metro-config": "0.81.1",
     "@react-native/typescript-config": "0.81.1",
-    "@types/jest": "^29.5.13",
     "@tsconfig/react-native": "^3.0.5",
     "@types/chai": "<5.0.0",
+    "@types/jest": "^29.5.13",
     "@types/react": "^19.1.0",
-    "@types/react-test-renderer": "^19.1.0",
     "@types/react-native-vector-icons": "^6.4.18",
+    "@types/react-test-renderer": "^19.1.0",
     "babel-jest": "29.7.0",
     "babel-plugin-module-resolver": "5.0.2",
     "react-test-renderer": "19.1.0",
diff --git a/package.json b/package.json
@@ -45,7 +45,7 @@
     "eslint-plugin-prettier": "5.5.4",
     "eslint-plugin-react-native": "5.0.0",
     "prettier": "3.5.3",
-    "release-it": "18.1.2",
+    "release-it": "19.0.5",
     "typescript": "5.8.3",
     "typescript-eslint": "8.30.1",
     "yalc": "^1.0.0-pre.53"
diff --git a/packages/react-native-quick-crypto/package.json b/packages/react-native-quick-crypto/package.json
@@ -77,6 +77,7 @@
     "expo-build-properties": "0.14.6",
     "react-native-quick-base64": "2.2.2",
     "readable-stream": "4.5.2",
+    "safe-buffer": "^5.2.1",
     "util": "0.12.5"
   },
   "devDependencies": {
@@ -85,7 +86,7 @@
     "@types/react": "18.3.3",
     "@types/readable-stream": "4.0.18",
     "del-cli": "6.0.0",
-    "expo": "^47.0.0",
+    "expo": "^52.0.0",
     "jest": "29.7.0",
     "nitro-codegen": "0.29.1",
     "react-native-builder-bob": "0.40.15",
@@ -95,7 +96,7 @@
     "react": "*",
     "react-native": "*",
     "react-native-nitro-modules": ">=0.29.1",
-    "expo": ">=47.0.0"
+    "expo": ">=48.0.0"
   },
   "peerDependenciesMeta": {
     "expo": {

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+[install]`
	`2`	`+publicHoistPattern = ["@react-native*", "react-native", "react"]`