From ada7fd7850ad81677f45fa86694cfe84ec65d103 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Carmo?= Date: Sun, 23 Nov 2025 16:10:19 +0000 Subject: [PATCH 1/5] build: update Node.js version to v24 in .nvmrc build: update pnpm version to 10.23.0 in package.json for improved compatibility --- .nvmrc | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.nvmrc b/.nvmrc index 9a2a0e2..54c6511 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -v20 +v24 diff --git a/package.json b/package.json index 9e937f5..a1a9693 100644 --- a/package.json +++ b/package.json @@ -114,5 +114,5 @@ "webpack-dev-server": "^5.1.0", "webpack-merge": "^6.0.1" }, - "packageManager": "pnpm@9.10.0+sha512.73a29afa36a0d092ece5271de5177ecbf8318d454ecd701343131b8ebc0c1a91c487da46ab77c8e596d6acf1461e3594ced4becedf8921b074fbd8653ed7051c" + "packageManager": "pnpm@10.23.0+sha512.21c4e5698002ade97e4efe8b8b4a89a8de3c85a37919f957e7a0f30f38fbc5bbdd05980ffe29179b2fb6e6e691242e098d945d1601772cad0fef5fb6411e2a4b" } From 59f31ffaaac8920ab76f1422f6b2899b836aa442 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Carmo?= Date: Sun, 23 Nov 2025 16:12:30 +0000 Subject: [PATCH 2/5] ci: update GitHub Actions to latest versions and use .nvmrc for node version ci: update dependabot/fetch-metadata action to v2.4.0 for improved metadata handling --- .github/workflows/codeql.yml | 2 +- .github/workflows/dependabot.yml | 2 +- .github/workflows/publish.yml | 6 +++--- .github/workflows/release.yml | 6 +++--- .github/workflows/tests.yml | 6 +++--- 5 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b434ad7..36caf1c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Initialize CodeQL uses: github/codeql-action/init@v3 diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index 293907e..7e0fdc8 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -12,7 +12,7 @@ jobs: steps: - name: Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@v2.3.0 + uses: dependabot/fetch-metadata@v2.4.0 with: github-token: '${{ secrets.GITHUB_TOKEN }}' diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2ca41d2..bf4c3cf 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -9,7 +9,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: token: ${{ secrets.GH_PAT }} ref: 'main' @@ -19,9 +19,9 @@ jobs: corepack enable pnpm - name: Use Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: - node-version: '20' + node-version: '.nvmrc' cache: 'pnpm' registry-url: https://registry.npmjs.org/ diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 631541c..0fcefa5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,7 +10,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: token: ${{ secrets.GH_PAT }} ref: 'main' @@ -20,9 +20,9 @@ jobs: corepack enable pnpm - name: Use Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: - node-version: '20' + node-version: '.nvmrc' cache: 'pnpm' registry-url: https://registry.npmjs.org/ diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index ab7605a..7b1062a 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -12,16 +12,16 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Enable corepack run: | corepack enable pnpm - name: Use Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: - node-version: '20' + node-version: '.nvmrc' cache: 'pnpm' registry-url: https://registry.npmjs.org/ From 1b608102a5f80028903cefa7b3b06a1526f112ea Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Carmo?= Date: Sun, 23 Nov 2025 16:12:52 +0000 Subject: [PATCH 3/5] ci(github): add permissions for OIDC and contents read in publish workflow --- .github/workflows/publish.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index bf4c3cf..f1bc508 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3,6 +3,10 @@ name: Publish on: workflow_dispatch: +permissions: + id-token: write # Required for OIDC + contents: read + jobs: publish-npm: runs-on: ubuntu-latest From f7dc584cac3beb15593f162ede401d39040dc9cc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Carmo?= Date: Sun, 23 Nov 2025 16:13:30 +0000 Subject: [PATCH 4/5] ci(workflows): use latest pnpm version with corepack for consistency and up-to-date builds --- .github/workflows/publish.yml | 1 + .github/workflows/release.yml | 1 + .github/workflows/tests.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f1bc508..f3ff8b6 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -21,6 +21,7 @@ jobs: - name: Enable corepack run: | corepack enable pnpm + corepack use pnpm@latest - name: Use Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0fcefa5..7537515 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,6 +18,7 @@ jobs: - name: Enable corepack run: | corepack enable pnpm + corepack use pnpm@latest - name: Use Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 7b1062a..4261078 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -17,6 +17,7 @@ jobs: - name: Enable corepack run: | corepack enable pnpm + corepack use pnpm@latest - name: Use Node.js uses: actions/setup-node@v6 From bf2cecf8d2dc84f033c3231e1b03852734a3babd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Carmo?= Date: Sun, 23 Nov 2025 16:17:48 +0000 Subject: [PATCH 5/5] ci: use node-version-file instead of node-version for setup-node action to properly read Node.js version from .nvmrc --- .github/workflows/publish.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/tests.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f3ff8b6..9ceac4a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -26,7 +26,7 @@ jobs: - name: Use Node.js uses: actions/setup-node@v6 with: - node-version: '.nvmrc' + node-version-file: '.nvmrc' cache: 'pnpm' registry-url: https://registry.npmjs.org/ diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7537515..e58d602 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,7 +23,7 @@ jobs: - name: Use Node.js uses: actions/setup-node@v6 with: - node-version: '.nvmrc' + node-version-file: '.nvmrc' cache: 'pnpm' registry-url: https://registry.npmjs.org/ diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 4261078..644d2d5 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -22,7 +22,7 @@ jobs: - name: Use Node.js uses: actions/setup-node@v6 with: - node-version: '.nvmrc' + node-version-file: '.nvmrc' cache: 'pnpm' registry-url: https://registry.npmjs.org/