Merge pull request #32 from unclamped/feat/pnpm

feat: migrate from npm to pnpm

Author: Enchoseon

.github/dependabot.yml

@@ -1,22 +1,48 @@
 name: CI
 
-on: [push, pull_request]
+on:
+  - push
+  - pull_request
 
-jobs:
-  build:
+env: 
+  CI: true
 
+jobs:
+  cache-and-install:
     runs-on: ubuntu-latest
 
-    strategy:
-      matrix:
-        node-version: [16.x, 18.x]
-
     steps:
-    - uses: actions/checkout@v3
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
-      with:
-        node-version: ${{ matrix.node-version }}
-    - run: npm ci
-    # - run: npm run build
-    - run: npm test
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Install Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 16
+
+      - uses: pnpm/action-setup@v2
+        name: Install pnpm
+        id: pnpm-install
+        with:
+          version: 7
+          run_install: false
+
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@v3
+        name: Setup pnpm cache
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Run test
+        run: pnpm run test

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: SBOM upload
+
+on: 
+  push: 
+    branches: ["main"]
+
+jobs:
+  SBOM-upload:
+
+    runs-on: ubuntu-latest
+    permissions: 
+      id-token: write
+      contents: write
+      
+    steps:
+    - uses: actions/checkout@v3
+    - name: Generate SBOM
+      run: | 
+        curl -Lo $RUNNER_TEMP/sbom-tool https://github.com/microsoft/sbom-tool/releases/latest/download/sbom-tool-linux-x64
+        chmod +x $RUNNER_TEMP/sbom-tool
+        $RUNNER_TEMP/sbom-tool generate -b . -bc . -pn ${{ github.repository }} -pv 1.0.0 -ps OwnerName -nsb https://sbom.mycompany.com -V Verbose
+    - uses: actions/upload-artifact@v3
+      with:
+        name: sbom
+        path: _manifest/spdx_2.2
+    - name: SBOM upload 
+      uses: jhutchings1/[email protected]
+      with:
+        filePath: "_manifest/spdx_2.2/"

.github/workflows/sbom.yml

@@ -29,8 +29,8 @@
 1. In `config.json`, configure the following values:
     - `account.username`: Your Minecraft account playername.
     - `proxy.whitelist`: Playernames of accounts that are allowed to connect to the proxy.
-2. Run `npm ci --omit=dev`
-3. Run `npm start`
+2. Run `pnpm i --prod`
+3. Run `pnpm start`
 4. Enter the auth code that appears in the console into microsoft.com/link
 5. Connect to `127.0.0.1` in Minecraft
     - If `127.0.0.1` doesn't work try `0.0.0.0`