From 80671d7fbab12af7b10f699c47dcfb964754fa32 Mon Sep 17 00:00:00 2001 From: Matt <7128721+TobiTenno@users.noreply.github.com> Date: Tue, 14 Oct 2025 11:41:45 -0500 Subject: [PATCH 1/5] fix: provenance & oidc --- package.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index c408a86..b7ebb14 100644 --- a/package.json +++ b/package.json @@ -105,5 +105,6 @@ }, "mocha": { "exit": true - } + }, + "publishConfig": { "provenance": true } } From 182a000ff36b7fd8c9d39621c1e4ed9044dd9cf8 Mon Sep 17 00:00:00 2001 From: Matt <7128721+TobiTenno@users.noreply.github.com> Date: Tue, 14 Oct 2025 11:47:01 -0500 Subject: [PATCH 2/5] ci: update permissions for release --- .github/workflows/ci.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 07018d0..d4a9821 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -67,6 +67,11 @@ jobs: strategy: matrix: node-version: ['lts/*'] + permissions: + id-token: write + contents: write + pull-requests: write + issues: write steps: - name: Checkout uses: actions/checkout@v2 From d22603a47022cd5e8f61bc734d959ffde864a6b2 Mon Sep 17 00:00:00 2001 From: Matt <7128721+TobiTenno@users.noreply.github.com> Date: Tue, 14 Oct 2025 11:49:12 -0500 Subject: [PATCH 3/5] ci: update some action versions --- .github/workflows/ci.yaml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index d4a9821..9a54b99 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -11,9 +11,9 @@ jobs: node-version: ['lts/*'] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v5 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v5 with: node-version: ${{ matrix.node-version }} - name: Install Dependencies @@ -28,9 +28,9 @@ jobs: matrix: node-version: [12, 14, 16, 'lts/*'] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v5 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v5 with: node-version: ${{ matrix.node-version }} - run: npm install @@ -46,9 +46,9 @@ jobs: matrix: node-version: ['lts/*'] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v5 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v5 with: node-version: ${{ matrix.node-version }} - run: npm install @@ -74,9 +74,9 @@ jobs: issues: write steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v5 - name: Semantic Release - uses: cycjimmy/semantic-release-action@v2.5.0 + uses: cycjimmy/semantic-release-action@5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} From 394d5f713a28f8bf703940dc0f8f7a7b88460189 Mon Sep 17 00:00:00 2001 From: Matt <7128721+TobiTenno@users.noreply.github.com> Date: Tue, 14 Oct 2025 11:54:05 -0500 Subject: [PATCH 4/5] docs: docs link Updated the documentation link to the new URL. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index fea713c..87604b0 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ A simple package for fetching JSON from a URL and caching it for a decided amount of time. -## [Documentation](https://matej.voboril.dev/json-fetch-cache) +## [Documentation](https://tobitenno.github.io/json-fetch-cache/) [![npm version](https://badge.fury.io/js/json-fetch-cache.svg)](https://badge.fury.io/js/json-fetch-cache) [![CI](https://github.com/TobiTenno/json-fetch-cache/actions/workflows/ci.yaml/badge.svg)](https://github.com/TobiTenno/json-fetch-cache/actions/workflows/ci.yaml) From 9c03d6a7c7c9affa0f96261da50d0bab50ac2051 Mon Sep 17 00:00:00 2001 From: Matt <7128721+TobiTenno@users.noreply.github.com> Date: Tue, 14 Oct 2025 11:59:11 -0500 Subject: [PATCH 5/5] ci: dependabot strategy --- .github/dependabot.yml | 22 ++++++++++++++++++---- 1 file changed, 18 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 441088c..7e705cf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,12 +7,26 @@ updates: day: "sunday" time: "00:00" commit-message: - prefix: "" - prefix-development: "dev" - include: "scope" + prefix: "ci" labels: - "dependencies" open-pull-requests-limit: 10 pull-request-branch-name: separator: "-" - rebase-strategy: "auto" \ No newline at end of file + rebase-strategy: "auto" + - package-ecosystem: github-actions + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "06:00" + commit-message: + prefix: "ci" + groups: + continuous-integration: + patterns: + - '*' + open-pull-requests-limit: 5 + pull-request-branch-name: + separator: "-" + rebase-strategy: "auto"