Feat/node24

.github/slack.yml

@@ -25,6 +25,9 @@ fields:
   - title: Job Matrix
     value: "{{#each jobMatrix}}{{@key}}: {{this}}\n{{/each}}"
     short: false
+  - title: Job Inputs
+    value: "{{#each jobInputs}}{{@key}}: {{this}}\n{{/each}}"
+    short: false
   - title: Workflow
     value: "<{{{workflowUrl}}}|{{workflow}}>"
     short: true

.github/workflows/codeql-analysis.yml

@@ -38,11 +38,13 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@53e96ec3b35fce51c141c0d6f0e31028a448722d # v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +55,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@53e96ec3b35fce51c141c0d6f0e31028a448722d # v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -67,4 +69,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@53e96ec3b35fce51c141c0d6f0e31028a448722d # v3

.github/workflows/custom.yml

@@ -3,15 +3,20 @@ on:
   repository_dispatch:
     types: [custom]
 
+permissions:
+  contents: read
+
 jobs:
   custom:
     runs-on: ubuntu-latest
     steps:
     - id: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
     - id: build
       run: |
-        npm install
+        npm ci
         npm run all
     - uses: ./
       with:

.github/workflows/manual.yml

@@ -1,6 +1,9 @@
 name: "manual-test"
 on: workflow_dispatch
 
+permissions:
+  contents: read
+
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
 
@@ -9,10 +12,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - id: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
     - id: build
       run: |
-        npm install
+        npm ci
         npm run all
     - uses: ./
       with:

.github/workflows/rebuild-dist.yml

@@ -0,0 +1,41 @@
+name: "rebuild-dist"
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - 'src/**'
+      - 'package.json'
+      - 'package-lock.json'
+      - 'tsconfig.json'
+
+permissions:
+  contents: write
+
+jobs:
+  rebuild:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      with:
+        node-version: 24
+    - run: npm ci
+    - run: npm run build
+    - run: npm run package
+    - name: Check for changes
+      id: diff
+      run: |
+        if git diff --quiet dist/; then
+          echo "changed=false" >> "$GITHUB_OUTPUT"
+        else
+          echo "changed=true" >> "$GITHUB_OUTPUT"
+        fi
+    - name: Commit and push
+      if: steps.diff.outputs.changed == 'true'
+      run: |
+        git config user.name "github-actions[bot]"
+        git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+        git add dist/
+        git commit -m "Rebuild dist"
+        git push

.github/workflows/schedule.yml

@@ -3,6 +3,9 @@ on:
   schedule:
     - cron:  '0 10 * * *'
 
+permissions:
+  contents: read
+
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
 
@@ -11,10 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - id: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
     - id: build
       run: |
-        npm install
+        npm ci
         npm run all
     - uses: ./
       with:

.github/workflows/test.yml

@@ -8,94 +8,94 @@ on: # rebuild any PRs and main branch changes
     tags:
       - 'v*'
 
-env:
-  SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+permissions:
+  contents: read
 
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
     - id: checkout
-      uses: actions/checkout@v4
-    - id: build
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
+    - id: install
       run: |
-        npm install
+        npm ci
     - id: format-check
       run: |
         npm run format-check
     - id: lint
       run: |
         npm run lint
+    - run: npm run build && npm run package
     - uses: ./
       with:
+        webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
         status: ${{ job.status }}
         channel: '#actions'
         message: lint error
-      if: failure()
+      if: ${{ failure() && github.event_name != 'pull_request' }}
 
   test:
     runs-on: ubuntu-latest
     steps:
     - id: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       with:
         ref: ${{ github.event.pull_request.head.sha }}
+        persist-credentials: false
+    - id: install-and-build
+      run: |
+        npm ci
+        npm run build
+        npm run package
     - uses: ./
       with:
+        webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
         status: starting
         channel: '#actions'
-    - id: dump_github
-      name: Dump GitHub context
-      env:
-        GITHUB_CONTEXT: ${{ toJson(github) }}
-      run: echo "$GITHUB_CONTEXT"
-    - id: dump_job
-      name: Dump job context
-      env:
-        JOB_CONTEXT: ${{ toJson(job) }}
-      run: echo "$JOB_CONTEXT"
-    - id: dump_steps
-      name: Dump steps context
-      env:
-        STEPS_CONTEXT: ${{ toJson(steps) }}
-      run: echo "$STEPS_CONTEXT"
+      if: ${{ github.event_name != 'pull_request' }}
     - id: test
       run: |
-        npm install
         npm run test
     - uses: ./
       with:
+        webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
         status: ${{ job.status }}
         steps: ${{ toJson(steps) }}
         channel: '#actions'
         config: __tests__/fixtures/slack-legacy.yml
-      if: always()
+      if: ${{ always() && github.event_name != 'pull_request' }}
     - uses: ./
       with:
+        webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
         status: ${{ job.status }}
         steps: ${{ toJson(steps) }}
         channel: '#actions'
         config: __tests__/fixtures/slack-blocks.yml
-      if: always()
+      if: ${{ always() && github.event_name != 'pull_request' }}
 
   build:
     runs-on: ubuntu-latest
     steps:
     - id: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       with:
         ref: ${{ github.event.pull_request.head.sha }}
+        persist-credentials: false
     - id: install-nodejs
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       with:
-        node-version: 20
+        node-version: 24
     - id: build
       run: |
-        npm install
+        npm ci
         npm run all
     - uses: ./
       with:
+        webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
         status: ${{ job.status }}
         steps: ${{ toJson(steps) }}
         channel: '#actions'
-      if: always()
+      if: ${{ always() && github.event_name != 'pull_request' }}

.github/workflows/workflow.yml

@@ -7,6 +7,9 @@ on:
     #   - completed
     #   - requested
 
+permissions:
+  contents: read
+
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
 
@@ -15,7 +18,9 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
     - uses: ./
       with:
         webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
@@ -28,7 +33,9 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'failure' }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
     - uses: ./
       with:
         status: ${{ github.event.workflow_run.conclusion }}