chore: bump dependencices (#172)

* - `@actions/tool-cache` v2.0.0 should not have any relevant breaking changes for us:
  - https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md
- `@octokit/rest` v19/v20 should also not affect us:
  - https://github.com/octokit/rest.js/releases/tag/v19.0.0
  - https://github.com/octokit/rest.js/releases/tag/v20.0.0
  - Except: https://github.com/octokit/octokit.js/#fetch-missing

Fixes #170

* chore: use Node.js 20 instead
node18 is LTS as of today, but not supported in GitHub Actions, so using node20 instead as per actions/runner#2619 (comment).

.github/workflows/checkin.yml

@@ -12,7 +12,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 18.x
+          node-version: 20
       - name: Install dependencies
         run: npm ci
       - name: Run tests

action.yml

@@ -4,7 +4,7 @@ branding:
   icon: terminal
 author: 'Max Schmitt'
 runs:
-  using: 'node16'
+  using: 'node20'
   main: 'lib/index.js'
   post: 'lib/index.js'
   post-if: '!cancelled()'

jest.config.js

@@ -2,5 +2,8 @@ module.exports = {
   clearMocks: true,
   testEnvironment: 'node',
   verbose: true,
-  collectCoverage: true
+  collectCoverage: true,
+  transform: {
+    "^.+\\.(js)$": "babel-jest",
+  },
 }

package.json

@@ -21,17 +21,17 @@
   "author": "Max Schmitt <max@schmitt.mx>",
   "license": "MIT",
   "dependencies": {
-    "@actions/core": "^1.4.0",
-    "@actions/github": "^5.0.0",
-    "@actions/tool-cache": "^1.7.1",
-    "@octokit/rest": "^18.9.0"
+    "@actions/core": "^1.10.0",
+    "@actions/github": "^5.1.1",
+    "@actions/tool-cache": "^2.0.1",
+    "@octokit/rest": "^20.0.1"
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
-    "@vercel/ncc": "^0.33.3",
-    "babel-jest": "^27.0.6",
-    "jest": "^27.0.6",
-    "jest-circus": "^27.0.6"
+    "@babel/core": "^7.22.11",
+    "@babel/preset-env": "^7.22.14",
+    "@vercel/ncc": "^0.36.1",
+    "babel-jest": "^29.6.4",
+    "jest": "^29.6.4",
+    "jest-circus": "^29.6.4"
   }
 }

src/index.js

@@ -132,7 +132,7 @@ export async function run() {
     if (limitAccessToActor === "true" || limitAccessToActor === "auto") {
       const { actor, apiUrl } = github.context
       const auth = core.getInput('github-token')
-      const octokit = new Octokit({ auth, baseUrl: apiUrl })
+      const octokit = new Octokit({ auth, baseUrl: apiUrl, request: { fetch }});
 
       const keys = await octokit.users.listPublicKeysForUser({
         username: actor

src/index.test.js

@@ -9,7 +9,12 @@ jest.mock("fs", () => ({
   mkdirSync: () => true,
   existsSync: () => true,
   unlinkSync: () => true,
-  writeFileSync: () => true
+  writeFileSync: () => true,
+  promises: new Proxy({}, {
+    get: () => {
+      return () => true
+    }
+  })
 }));
 jest.mock('./helpers', () => {
   const originalModule = jest.requireActual('./helpers');