Update GH actions/workflows, enable npm provenance (#564)

Author: paescuj

.editorconfig

@@ -13,4 +13,3 @@ indent_style = space
 [*.{mjs,js,ts}]
 indent_size = 4
 max_line_length = 100
-

.github/actions/setup-pnpm/action.yml renamed to .github/actions/setup/action.yml

@@ -1,9 +1,24 @@
-name: Setup pnpm
+name: Setup
 description: Setup the environment for the project
 
+inputs:
+  node-version:
+    description: Node.js version
+    default: '22'
+    required: false
+  node-registry:
+    description: Node.js package registry to set up for auth
+    required: false
+
 runs:
   using: composite
   steps:
+    - name: Install Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        registry-url: ${{ inputs.node-registry }}
+
     - name: Install pnpm
       uses: pnpm/action-setup@v4
 
@@ -19,3 +34,7 @@ runs:
         key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
         restore-keys: |
           ${{ runner.os }}-pnpm-store-
+
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install

.github/workflows/lint-format.yml

@@ -18,18 +18,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: 20
+      - name: Setup
+        uses: ./.github/actions/setup
 
-      - name: Setup pnpm
-        uses: ./.github/actions/setup-pnpm
-
-      - name: Install dependencies
-        run: pnpm install && pnpm add --global concurrently
+      - name: Install concurrently 🐶🥣
+        run: pnpm add --global concurrently
 
       - name: Lint & Format
         run: concurrently --prefix none --group "pnpm:lint" "pnpm:format"

.github/workflows/release.yml

@@ -5,16 +5,15 @@ on:
     tags:
       - 'v*'
 
-permissions:
-  contents: write
-
 jobs:
   gh-release:
     name: Create GitHub Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Create release
         env:
@@ -24,23 +23,20 @@ jobs:
   publish-npm:
     name: Publish to NPM
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
+      - name: Setup
+        uses: ./.github/actions/setup
         with:
-          node-version: 20
-          registry-url: https://registry.npmjs.org
-
-      - name: Setup pnpm
-        uses: ./.github/actions/setup-pnpm
-
-      - name: Install dependencies
-        run: pnpm install
+          node-registry: https://registry.npmjs.org
 
       - name: Publish to NPM
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: pnpm publish --no-git-checks

.github/workflows/test.yml

@@ -42,18 +42,15 @@ jobs:
             version: macOS-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
+      - name: Setup
+        uses: ./.github/actions/setup
         with:
           node-version: ${{ matrix.node }}
 
-      - name: Setup pnpm
-        uses: ./.github/actions/setup-pnpm
-
-      - name: Install dependencies
-        run: pnpm install && pnpm add --global concurrently
+      - name: Install concurrently 🐶🥣
+        run: pnpm add --global concurrently
 
       - name: Build & Test
         run: concurrently --prefix none --group "pnpm:build" "pnpm:test --coverage" "pnpm:test:smoke"

index.mjs

@@ -4,7 +4,6 @@
 
 import { concurrently } from './dist/src/index.js';
 
-// NOTE: the star reexport doesn't work in Node <12.20, <14.13 and <15.
 export * from './dist/src/index.js';
 
 export default concurrently;

tests/.npmrc

@@ -3,6 +3,6 @@
     "concurrently": "workspace:*"
   },
   "scripts": {
-    "test": "pnpm --prefix .. test -- --selectProjects smoke"
+    "test": "pnpm --workspace-root test:smoke"
   }
 }