chore: update skeleton (#142)

issues:
* chore: update skeleton (#138)

commits:
* chore: update skeleton (00bfdf9)

Co-authored-by: Muhammad Rendra <[email protected]>

Author: gitops-merge

.github/dependabot.yml

@@ -8,10 +8,18 @@ updates:
       interval: weekly
     commit-message:
       prefix: chore(actions)
+
   # npm
   - package-ecosystem: npm
     directory: /
     schedule:
       interval: weekly
     commit-message:
       prefix: chore(npm)
+    ignore:
+      - dependency-name: '@typescript-eslint/eslint-plugin'
+      - dependency-name: 'eslint'
+      - dependency-name: 'eslint-config-standard-with-typescript'
+      - dependency-name: 'eslint-plugin-import'
+      - dependency-name: 'eslint-plugin-n'
+      - dependency-name: 'eslint-plugin-promise"'

.github/workflows/audit.yml

@@ -20,6 +20,7 @@ jobs:
       # write
       security-events: write
     uses: ./.github/workflows/reusable.codeql.yml
+
   # Scorecard
   scorecard:
     name: Scorecard

.github/workflows/checkpoint.yml

@@ -11,6 +11,7 @@ jobs:
   review:
     name: Review
     uses: ./.github/workflows/reusable.review.yml
+
   # CodeQL
   codeql:
     name: CodeQL
@@ -22,6 +23,7 @@ jobs:
       # write
       security-events: write
     uses: ./.github/workflows/reusable.codeql.yml
+
   # Scorecard
   scorecard:
     name: Scorecard
@@ -36,6 +38,7 @@ jobs:
       id-token: write
       security-events: write
     uses: ./.github/workflows/reusable.scorecard.yml
+
   # Test
   test:
     name: Test

.github/workflows/release.yml

@@ -27,6 +27,7 @@ jobs:
       # write
       security-events: write
     uses: ./.github/workflows/reusable.codeql.yml
+
   # Scorecard
   scorecard:
     name: Scorecard
@@ -41,12 +42,14 @@ jobs:
       id-token: write
       security-events: write
     uses: ./.github/workflows/reusable.scorecard.yml
+
   # Test
   test:
     name: Test
     uses: ./.github/workflows/reusable.test.yml
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
   # Release
   release:
     name: Release

.github/workflows/reusable.codeql.yml

@@ -24,27 +24,33 @@ jobs:
         uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
         with:
           egress-policy: audit
+
       # Checkout
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
+
       # Initialize CodeQL
       - name: Initialize CodeQL
         uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           languages: javascript
+
       # Setup Node
       - name: Setup Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: lts/*
+
       # Clean Install
       - name: Clean Install
         run: npm ci
+
       # Build Source Code
       - name: Build Source Code
         run: npm run build
+
       # Analyze CodeQL
       - name: Analyze CodeQL
         uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16

.github/workflows/reusable.release.yml

@@ -32,12 +32,14 @@ jobs:
         uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
         with:
           egress-policy: audit
+
       # Checkout
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0 # All commits need to be analyzed
           token: ${{ secrets.TOKEN }}
+
       # Import GPG
       - name: Import GPG
         uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
@@ -46,17 +48,21 @@ jobs:
           git_user_signingkey: true
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.PASSPHRASE }}
+
       # Setup Node
       - name: Setup Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: lts/*
+
       # Clean Install
       - name: Clean Install
         run: npm ci
+
       # Build Source Code
       - name: Build Source Code
         run: npm run build
+
       # Release and Publish to NPM
       - name: Release and Publish to NPM
         env:
@@ -67,6 +73,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npx semantic-release
+
       # Rebase Development Branch
       - name: Rebase Development Branch
         run: |

.github/workflows/reusable.review.yml

@@ -17,11 +17,13 @@ jobs:
         uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
         with:
           egress-policy: audit
+
       # Checkout
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
+
       # Dependency Review
       - name: Dependency Review
         uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0

.github/workflows/reusable.scorecard.yml

@@ -27,25 +27,29 @@ jobs:
         uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
         with:
           egress-policy: audit
+
       # Checkout
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
+
       # Analyze OSSF Scorecard
       - name: Analyze OSSF Scorecard
         uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
         with:
           results_file: ossf_scorecard.sarif
           results_format: sarif
           publish_results: true
+
       # Upload to GitHub Actions Artifact
       - name: Upload to GitHub Actions Artifact
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: OSSF Scorecard
           path: ossf_scorecard.sarif
           overwrite: true
+
       # Upload to GitHub Code Scanning
       - name: Upload to GitHub Code Scanning
         uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16

.github/workflows/reusable.test.yml

@@ -20,23 +20,28 @@ jobs:
         uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
         with:
           egress-policy: audit
+
       # Checkout
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 2 # At least fetch the last two commits for comparison
           persist-credentials: false
+
       # Setup Node
       - name: Setup Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: lts/*
+
       # Clean Install
       - name: Clean Install
         run: npm ci
+
       # Run Test and Generate Coverage
       - name: Run Test and Generate Coverage
         run: npm test
+
       # Upload Coverage Reports to Codecov
       - name: Upload Coverage Reports to Codecov
         uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2

.releaserc

@@ -39,6 +39,7 @@
     }],
     ["@semantic-release/exec", {
       "prepareCmd": "npx clean-package",
+      "publishCmd": "ls -laihs && echo \"${process.env.GITHUB_REPOSITORY}\" && echo \"v${nextRelease.version}\" && echo \"v${nextRelease.name}\" && git tag -s v${nextRelease.version} -m \"release: v${nextRelease.version}\" && git push origin v${nextRelease.version}",
       "successCmd": "npx clean-package restore"
     }]
   ]