ci: update ci actions

This commit is contained in:
Ahmad 2025-06-13 23:56:57 -04:00
parent 1360243294
commit beefc6aac0
No known key found for this signature in database
GPG key ID: 8FD8A93530D182BF
5 changed files with 23 additions and 20 deletions

View file

@ -12,7 +12,7 @@ jobs:
strategy:
matrix:
node-version: [23.x]
node-version: [24.x]
steps:
- uses: actions/checkout@v4
@ -35,8 +35,8 @@ jobs:
- name: Validate current commit (last commit) with commitlint
if: github.event_name == 'push'
run: npx commitlint --last --verbose
run: yarn dlx commitlint --last --verbose
- name: Validate PR commits with commitlint
if: github.event_name == 'pull_request'
run: npx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose
run: yarn dlx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose

View file

@ -1,10 +1,4 @@
# Dependency Review Action
#
# This Action will scan dependency manifest files that change as part of a Pull Request, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging.
#
# Source repository: https://github.com/actions/dependency-review-action
# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
name: 'Dependency Review'
name: Dependency Review
on: [pull_request]
permissions:
@ -14,7 +8,7 @@ jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
- name: Checkout Repository
uses: actions/checkout@v4
- name: 'Dependency Review'
- name: Dependency Review
uses: actions/dependency-review-action@v4

View file

@ -16,6 +16,9 @@ jobs:
contents: read
security-events: write
actions: read
strategy:
matrix:
node-version: [24.x]
steps:
- name: Checkout code
uses: actions/checkout@v4
@ -23,11 +26,17 @@ jobs:
- name: Configure Corepack
run: corepack enable
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v4
with:
node-version: ${{ matrix.node-version }}
cache: yarn
- name: Install Dependencies
run: yarn install
- name: Run ESLint
run: npx eslint ./src
run: yarn dlx eslint ./src
--config eslint.config.mjs
--format @microsoft/eslint-formatter-sarif
--output-file eslint-results.sarif

View file

@ -1,4 +1,4 @@
name: NodeJS Build and Compile
name: NodeJS Build
permissions:
contents: read
@ -15,7 +15,7 @@ jobs:
strategy:
matrix:
node-version: [23.x]
node-version: [24.x]
steps:
- uses: actions/checkout@v4

View file

@ -1,4 +1,4 @@
name: Automatic Release Changelog
name: Generate Changelog
permissions:
contents: write
@ -6,7 +6,7 @@ permissions:
on:
push:
tags:
- 'v*'
- 'v*.*.*'
jobs:
release:
@ -14,7 +14,7 @@ jobs:
strategy:
matrix:
node-version: [23.x]
node-version: [24.x]
steps:
- uses: actions/checkout@v4
@ -30,6 +30,6 @@ jobs:
node-version: ${{ matrix.node-version }}
cache: yarn
- run: npx changelogithub
- run: yarn dlx changelogithub
env:
GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}