From 96f1ac5c28e3f15688f641476fa74aaeae280100 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 22 Oct 2025 23:20:27 +0000 Subject: [PATCH 1/3] Initial plan From b16b111d7c00eed7bf8bc4ddf0834e225bcb5106 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 22 Oct 2025 23:24:52 +0000 Subject: [PATCH 2/3] Update GitHub Actions workflows for npm trusted publishers Co-authored-by: kentcdodds <1500684+kentcdodds@users.noreply.github.com> --- .github/workflows/validate.yml | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 8d7616c..23913a4 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -25,10 +25,10 @@ jobs: runs-on: ubuntu-latest steps: - name: ⬇️ Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: ⎔ Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node }} @@ -48,18 +48,23 @@ jobs: release: needs: main runs-on: ubuntu-latest + permissions: + contents: write # to be able to publish a GitHub release + id-token: write # to enable use of OIDC for npm provenance + issues: write # to be able to comment on released issues + pull-requests: write # to be able to comment on released pull requests if: ${{ github.repository == 'kentcdodds/match-sorter' && contains('refs/heads/main,refs/heads/beta,refs/heads/next,refs/heads/alpha', github.ref) && github.event_name == 'push' }} steps: - name: ⬇️ Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: ⎔ Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: - node-version: lts/* + node-version: 24 - name: 📥 Download deps uses: bahmutov/npm-install@v1 @@ -72,8 +77,9 @@ jobs: run: npm run build - name: 🚀 Release - uses: cycjimmy/semantic-release-action@v4 + uses: cycjimmy/semantic-release-action@v5.0.2 with: + semantic_version: 25 branches: | [ '+([0-9])?(.{+([0-9]),x}).x', @@ -85,4 +91,3 @@ jobs: ] env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} From 7a328a5078d02d8220bba33f6aefc09ccadbcea7 Mon Sep 17 00:00:00 2001 From: "Kent C. Dodds" Date: Wed, 22 Oct 2025 17:29:22 -0600 Subject: [PATCH 3/3] Apply suggestion from @kentcdodds --- .github/workflows/validate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 23913a4..afab575 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -64,7 +64,7 @@ jobs: - name: ⎔ Setup node uses: actions/setup-node@v6 with: - node-version: 24 + node-version: lts/* - name: 📥 Download deps uses: bahmutov/npm-install@v1