build: release v11.0.2

.config/.github/labeler.yml

@@ -1,29 +1,35 @@
+release:
+- base-branch: 'main'
+
 test:
-  - src/__mocks__/**/*.test.ts
-  - src/__tests__/**/*.test.ts
+- changed-files:
+  - any-glob-to-any-file: ['src/__mocks__/**/*.test.ts', 'src/__tests__/**/*.test.ts']
 
 workflow:
-  - .github/**/*
-  - .gitignore
-  - .npmignore
+- changed-files:
+  - any-glob-to-any-file: ['.github/**/*', '.gitignore', '.npmignore']
 
 project:
-  - package-lock.json
-  - package.json
-  - LICENSE
+- changed-files:
+  - any-glob-to-any-file: ['package-lock.json', 'package.json', 'LICENSE']
 
 source:
-  - any: ['src/**/*', '!src/cli/*', '!src/__mocks__/*', '!src/__tests__/*']
+- changed-files:
+  - any-glob-to-any-file: ['src/**/*', '!src/cli/*', '!src/__mocks__/*', '!src/__tests__/*']
 
 api:
-  - bin/**/*
-  - src/cli/**/*
+- changed-files:
+  - any-glob-to-any-file: ['bin/**/*', 'src/cli/**/*']
 
 docs:
-  - any: ['docs/**/*', '*.md', '.ghinfo']
+- changed-files:
+  - any-glob-to-any-file: ['docs/**/*', '*.md', '.ghinfo']
 
 example:
-  - example/**/*
+- changed-files:
+  - any-glob-to-any-file: ['example/**/*']
+  -
 
 media:
-  - media/**/*
+- changed-files:
+  - any-glob-to-any-file: ['media/**/*']

.config/.github/workflows/build.yml

@@ -17,10 +17,10 @@ jobs:
       NODE_VERSION: 16
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Setup Node.js v${{ env.NODE_VERSION }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ env.NODE_VERSION }}
 
@@ -35,7 +35,7 @@ jobs:
         npm run test
 
     - name: Cache coverage
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: coverage
         key: coverage-${{ runner.os }}-${{ env.NODE_VERSION }}-${{ hashFiles('src/**/*.*', '**/package-lock.json') }}
@@ -48,10 +48,10 @@ jobs:
       NODE_VERSION: 16
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Use Node.js ${{ env.NODE_VERSION }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ env.NODE_VERSION }}
 
@@ -72,18 +72,18 @@ jobs:
       NODE_VERSION: 16
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Cache coverage
       id: cache-coverage
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: coverage
         key: coverage-${{ runner.os }}-${{ env.NODE_VERSION }}-${{ hashFiles('src/**/*.*', '**/package-lock.json') }}
 
     - name: Setup Node.js v${{ env.NODE_VERSION }}
       if: steps.cache-coverage.outputs.cache-hit != 'true'
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ env.NODE_VERSION }}
 
@@ -96,7 +96,7 @@ jobs:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Send coverage report
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v4
       with:
         file: ./coverage/lcov.info
 

.config/.github/workflows/release.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Sync project labels
       uses: micnncim/action-label-syncer@v1
@@ -19,17 +19,20 @@ jobs:
 
   publish:
     name: Publish
+    needs: [ sync ]
     runs-on: ubuntu-latest
-    env:
-      NODE_VERSION: 16
+
+    permissions:
+      id-token: write
+
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
-    - name: Setup Node.js v${{ env.NODE_VERSION }}
-      uses: actions/setup-node@v3
+    - name: Setup Node.js
+      uses: actions/setup-node@v4
       with:
-        node-version: ${{ env.NODE_VERSION }}
+        node-version: latest
 
     - name: Install Dependencies
       run: npm ci
@@ -45,26 +48,29 @@ jobs:
       run: npm run build
 
     - name: Publish package
-      uses: JS-DevTools/npm-publish@v1
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      uses: JS-DevTools/npm-publish@v3
       with:
         token: ${{ secrets.NPM_TOKEN }}
         access: "public"
+        provenance: true
 
   release:
     name: Create Release
+    needs: [ publish ]
     runs-on: ubuntu-latest
-    env:
-      NODE_VERSION: 16
+
+    permissions:
+      contents: write
+      id-token: write
+
     steps:
     - name: Checkout code
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
-    - name: Use Node.js ${{ env.NODE_VERSION }}
-      uses: actions/setup-node@v3
+    - name: Use Node.js
+      uses: actions/setup-node@v4
       with:
-        node-version: ${{ env.NODE_VERSION }}
+        node-version: latest
 
     - name: Get package version
       run: node -p -e '`PACKAGE_VERSION=${require("./package.json").version}`' >> $GITHUB_ENV

.config/.github/workflows/scan.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 2
 

.config/.github/workflows/sync.yml

@@ -8,8 +8,13 @@ jobs:
   labels:
     name: Pull Request Labeler
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      pull-requests: write
+
     steps:
-    - uses: actions/labeler@v4
+    - uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: '.github/labeler.yml'

.github/labeler.yml

@@ -1,40 +1,43 @@
+release:
+- base-branch: 'main'
+
 workflow:
-  - .github/**/*
-  - ./.gitignore
-  - ./.npmignore
+- changed-files:
+  - any-glob-to-any-file: ['.github/**/*', './.gitignore', './.npmignore']
 
 config:
-  - .sharedconfig.yml
-  - .husky/**/*
+- changed-files:
+  - any-glob-to-any-file: ['.sharedconfig.yml', '.husky/**/*']
 
 project:
-  - package-lock.json
-  - package.json
-  - LICENSE
+- changed-files:
+  - any-glob-to-any-file:  ['package-lock.json', 'package.json', 'LICENSE']
 
 docs:
-  - any: ['docs/**/*', '*.md', '.ghinfo']
+- changed-files:
+  - any-glob-to-any-file: ['docs/**/*', '*.md', '.ghinfo']
 
 shared-config:workflow:
-  - .config/.github/**/*
-  - .config/.gitignore
-  - .config/.npmignore
+- changed-files:
+  - any-glob-to-any-file: ['.config/.github/**/*', '.config/.gitignore', '.config/.npmignore']
 
 shared-config:code-style:
-  - .config/.editorconfig
-  - .config/.eslintignore
-  - .config/.eslintrc
-  - .config/.prettierignore
-  - .config/.prettierrc
+- changed-files:
+  - any-glob-to-any-file: ['.config/.editorconfig', '.config/.eslintignore', '.config/.eslintrc', '.config/.prettierignore', '.config/.prettierrc']
 
 shared-config:test:
-  - .config/jest.config.js
+- changed-files:
+  - any-glob-to-any-file: ['.config/jest.config.js']
 
 shared-config:ts:
-  - .config/tsconfig.json
+- changed-files:
+  - any-glob-to-any-file: ['.config/tsconfig.json']
 
 shared-config:scripts:
-  - scripts.js
+- changed-files:
+  - any-glob-to-any-file: ['scripts.js']
 
 shared-config:dependencies:
-  - dependencies.js
+- changed-files:
+  - any-glob-to-any-file: ['dependencies.js']
+

.github/workflows/auto-merge.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.1.1
+        uses: dependabot/fetch-metadata@v1
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Enable auto-merge for Dependabot PRs

.github/workflows/build.yml

@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Use Node.js ${{ matrix.node }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: latest
 

.github/workflows/release.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Sync project labels
       uses: micnncim/action-label-syncer@v1
@@ -21,12 +21,16 @@ jobs:
     name: Publish
     needs: [ sync ]
     runs-on: ubuntu-latest
+
+    permissions:
+      id-token: write
+
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Setup Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: latest
 
@@ -36,21 +40,27 @@ jobs:
         npm run build
 
     - name: Publish package
-      uses: JS-DevTools/npm-publish@v1
+      uses: JS-DevTools/npm-publish@v3
       with:
         token: ${{ secrets.NPM_TOKEN }}
         access: "public"
+        provenance: true
 
   release:
     name: Create Release
     needs: [ publish ]
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      id-token: write
+
     steps:
     - name: Checkout code
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Use Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: latest
 

.github/workflows/sync.yml

@@ -8,8 +8,13 @@ jobs:
   labels:
     name: Pull Request Labeler
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      pull-requests: write
+
     steps:
-    - uses: actions/labeler@main
+    - uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: '.github/labeler.yml'