Merge pull request #625 from paambaati/gp/redesign-workflows

Author: paambaati

.github/dependabot.yml

@@ -3,59 +3,17 @@ updates:
 - package-ecosystem: npm
   directory: "/"
   schedule:
-    interval: daily
-    time: "23:30"
-  open-pull-requests-limit: 10
+    interval: monthly
+  open-pull-requests-limit: 5
   ignore:
-  - dependency-name: nock
+  # Ignore ESM-only package versions.
+  # This can be fully removed once everything is ESM-native without all the weird issues.
+  - dependency-name: hook-std
     versions:
-    - 13.0.10
-    - 13.0.6
-    - 13.0.7
-    - 13.0.8
-    - 13.0.9
-  - dependency-name: typescript
+    - '3.x'
+  - dependency-name: node-fetch
     versions:
-    - 4.1.4
-    - 4.1.5
-    - 4.2.2
-    - 4.2.3
-  - dependency-name: tape
+    - '3.x'
+  - dependency-name: to-readable-stream
     versions:
-    - 5.1.1
-    - 5.2.0
-    - 5.2.1
-  - dependency-name: "@types/node"
-    versions:
-    - 14.14.22
-    - 14.14.23
-    - 14.14.25
-    - 14.14.26
-    - 14.14.27
-    - 14.14.28
-    - 14.14.29
-    - 14.14.31
-    - 14.14.32
-    - 14.14.33
-    - 14.14.34
-    - 14.14.35
-    - 14.14.36
-    - 14.14.37
-    - 14.14.39
-    - 14.14.41
-    - 15.0.0
-  - dependency-name: sinon
-    versions:
-    - 10.0.0
-    - 9.2.4
-  - dependency-name: "@types/node-fetch"
-    versions:
-    - 2.5.8
-    - 2.5.9
-  - dependency-name: "@types/sinon"
-    versions:
-    - 9.0.10
-    - 9.0.11
-  - dependency-name: y18n
-    versions:
-    - 4.0.1
+    - '3.x'

.github/workflows/ci.yml

@@ -1,18 +1,28 @@
-name: "PR Checks"
+name: "PR checks"
 on: [pull_request, push]
 
 jobs:
   check_pr:
+    name: "PR checks"
     runs-on: ubuntu-latest
     steps:
     - name: checkout code
       uses: actions/checkout@v3
 
+    - name: setup node.js
+      uses: actions/setup-node@v3
+      with:
+        node-version: 16
+        cache: 'npm'
+
     - name: install dependencies
       run: npm ci
 
+    - name: check lock file for untrusted packages
+      run: npm_config_yes=true npx lockfile-lint --path package-lock.json --allowed-hosts npm --validate-https
+
     - name: build typescript
-      run: npm run build
+      run: npm run build -- --noEmit
 
     - name: run tests and instrument coverage
       run: npm run coverage
@@ -33,9 +43,9 @@ jobs:
             && exit 1)
 
     - name: publish code coverage to code-climate (duh)
-      uses: paambaati/[email protected]
+      if: ${{ github.event_name == 'push' }}
+      uses: paambaati/[email protected]
       env:
         CC_TEST_REPORTER_ID: 3470adaf12ff7cecdfe5a968ae0e95d098b6ee58c340114e1e90d440ee9e66ab
       with:
         debug: true
-      if: ${{ github.event_name == 'push' }}

.github/workflows/publish.yml

@@ -0,0 +1,27 @@
+name: "Publish"
+on:
+  release:
+    types:
+      - published
+      - created
+      - released
+      - rerequested
+
+jobs:
+  publish:
+    name: Publish released Action to GitHub marketplace
+    runs-on: ubuntu-latest
+    steps:
+      - name: Publish action
+        uses: technote-space/release-github-actions@v7
+        with:
+          GITHUB_TOKEN: ${{ secrets.CUSTOM_GITHUB_PERSONAL_TOKEN }}
+          COMMIT_NAME: 'GP'
+          COMMIT_EMAIL: '[email protected]'
+          CREATE_MAJOR_VERSION_TAG: true
+          CREATE_MINOR_VERSION_TAG: true
+          CREATE_PATCH_VERSION_TAG: true
+          CLEAN_TARGETS: '.[!.]*,test,src,*.ts,*.json,CHANGELOG.md,_config.yml,.github,coverage,.nyc_output'
+          BRANCH_NAME: 'releases/${MAJOR}/${MINOR}/${PATCH}'
+        env:
+          DEBUG: '*'

.github/workflows/release-branch.yml

@@ -1,20 +1,33 @@
-name: "Publish"
+name: "Release"
 on:
-  create:
+  push:
     branches:
-      - master
+      - main
+    tags:
+      - '!*'
 
 jobs:
   release:
-    name: Publish GitHub Actions to Marketplace
+    name: Cut a release on GitHub
     runs-on: ubuntu-latest
     steps:
-      - name: Publish GitHub Actions to Marketplace
-        uses: technote-space/release-github-actions@v7
+      - name: checkout code
+        uses: actions/checkout@v3
+
+      - name: setup node.js
+        uses: actions/setup-node@v3
         with:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          COMMIT_NAME: 'GP'
-          COMMIT_EMAIL: '[email protected]'
-          CREATE_MAJOR_VERSION_TAG: false
-          CREATE_MINOR_VERSION_TAG: false
-          CLEAN_TARGETS: '.[!.]*,test,src,*.ts,*.json,CHANGELOG.md,_config.yml'
+          node-version: 16
+          cache: 'npm'
+
+      - name: install dependencies
+        run: npm ci
+
+      - name: make a release on GitHub
+        run: npm_config_yes=true npx semantic-release
+        env:
+          GITHUB_TOKEN: ${{ secrets.CUSTOM_GITHUB_PERSONAL_TOKEN }}
+          GIT_AUTHOR_NAME: 'GP'
+          GIT_COMMITTER_NAME: 'GP'
+          GIT_AUTHOR_EMAIL: '[email protected]'
+          GIT_COMMITTER_EMAIL: '[email protected]'

.github/workflows/release.yml

@@ -1 +1,3 @@
 registry = "https://registry.npmjs.org/"
+save-exact = true
+fund = false

.npmrc

@@ -0,0 +1,52 @@
+{
+    "branches": [
+        "main"
+    ],
+    "plugins": [
+        "@semantic-release/commit-analyzer",
+        [
+            "@google/semantic-release-replace-plugin",
+            {
+                "replacements": [
+                    {
+                        "files": [
+                            "README.md"
+                        ],
+                        "from": "paambaati/[email protected].*",
+                        "to": "paambaati/codeclimate-action@v${nextRelease.version}",
+                        "results": [
+                            {
+                                "file": "README.md",
+                                "hasChanged": true,
+                                "numMatches": 5,
+                                "numReplacements": 5
+                            }
+                        ],
+                        "countMatches": true
+                    }
+                ]
+            }
+        ],
+        "@semantic-release/release-notes-generator",
+        [
+            "@semantic-release/changelog",
+            {
+                "changelogFile": "CHANGELOG.md"
+            }
+        ],
+        "@semantic-release/npm",
+        [
+            "@semantic-release/git",
+            {
+                "assets": [
+                    "package.json",
+                    "package-lock.json",
+                    "CHANGELOG.md",
+                    "README.md"
+                ],
+                "message": "chore(release): ${nextRelease.version}\n\n${nextRelease.notes}"
+            }
+        ],
+        "@semantic-release/github"
+    ]
+}