chore(deps): actions/core@3.0.0

.github/workflows/release.yml

@@ -3,11 +3,11 @@ name: Test + Release
 on:
   pull_request:
     branches:
-      - main
+      - master
 
   push:
     branch:
-      - main
+      - master
 jobs:
   test:
     name: Test Suite
@@ -17,27 +17,48 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - name: Install
-        run: npm install
+      - name: install
+        uses: actions/setup-node@v1
+        with:
+          node-version: 24
+
+      - name: test
+        run: npm test
 
   release:
-    name: release
+    name: Release
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     needs: test
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+      issues: write
+      pull-requests: write
     steps:
+      - name: Generate Token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
       - name: Checkout
-        uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+        uses: actions/checkout@v4
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: false
+
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 24
       - run: npm install
 
       - name: Publish
         run: npm run release
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           GIT_AUTHOR_NAME: 'Dependant Bot'
           GIT_AUTHOR_EMAIL: 'release-bot@codedependant.net'
           GIT_COMMITTER_NAME: 'Dependant Bot'
           GIT_COMMITTER_EMAIL: 'release-bot@codedependant.net'
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: 'false'

.npmrc

@@ -1,3 +1 @@
-hoist=true
 package-lock=false
-lock-file=false

compose/certs/server.crt

@@ -1,22 +1,24 @@
 -----BEGIN CERTIFICATE-----
-MIIDmzCCAoOgAwIBAgIUZfKvmAkBBUxqof/qSyRcP/ikVYMwDQYJKoZIhvcNAQEL
-BQAwXTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM
-GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDEWMBQGA1UEAwwNcmVnaXN0cnk6NTAw
-MDAeFw0yNTA1MjMxNjI1NDJaFw0yNjA1MjMxNjI1NDJaMF0xCzAJBgNVBAYTAkFV
-MRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRz
-IFB0eSBMdGQxFjAUBgNVBAMMDXJlZ2lzdHJ5OjUwMDAwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQDKEj7v6zvIo0uBX0d5+j98Ei/0NrtaGAbWMRqz8gG5
-PTYn0BLCrJxyUFw2bofymHnU1kJfP3wvvWiv+43RhWbV0B7BU63rwbBr7ktp9Tdm
-PiKiB972hn/zeec8yfzazrm/G2ZAYgE3OqKSdoiWHGss84XK2GYa/2SZJTSxz0W0
-iGC/Pon9L7Q5rfkycpQymIFO2NZCWx9v6DN4228Hxy+GyNVvLUpZ/Du/6TBLYTXy
-4K7ULQ6mAssjM0D+h2k3uoyMzJ84lY7h3d3DQh/tGq06YA8aeSyvreLVM15j+bUu
-QLZfrxPrDPNaCSm958/49ZloH88fYjICpgFaZACH86xvAgMBAAGjUzBRMB0GA1Ud
-DgQWBBROY6VqgOXnNedDiIcqZ7sOdcyOQzAfBgNVHSMEGDAWgBROY6VqgOXnNedD
-iIcqZ7sOdcyOQzAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAS
-44AvqMU/dcq+tolhj7ThOFQmh1lCoE/eorC8I6HntHfLM3fvpnQFd5P02Bdp5Pb3
-X0xfXlnL6IsG55MUFD6MEsouTLgHMhZPRGgo6lN/LkPL+9Hv1joHLlXGZOi8maJa
-9700pmShbsmJxxv+LPMgkWkQ/S9CQQnH+/pno0NqJuxYJEP2bBknoOHanNrbkL/G
-35/zZRtg9YSwmo+AADd1FlkoJjf6VZjUOF8G44VnM3bAcdZfvEe502cMeJxiBmnI
-91Ukomrx7zZdiSmW1y6cXyhOcv9pDSONce1lP3V/8EI5Vyk4J8qPvxHYlezhy958
-OWq7/tseI1+6YxL8FRyq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 -----END CERTIFICATE-----

compose/certs/server.key

@@ -1,28 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDKEj7v6zvIo0uB
-X0d5+j98Ei/0NrtaGAbWMRqz8gG5PTYn0BLCrJxyUFw2bofymHnU1kJfP3wvvWiv
-+43RhWbV0B7BU63rwbBr7ktp9TdmPiKiB972hn/zeec8yfzazrm/G2ZAYgE3OqKS
-doiWHGss84XK2GYa/2SZJTSxz0W0iGC/Pon9L7Q5rfkycpQymIFO2NZCWx9v6DN4
-228Hxy+GyNVvLUpZ/Du/6TBLYTXy4K7ULQ6mAssjM0D+h2k3uoyMzJ84lY7h3d3D
-Qh/tGq06YA8aeSyvreLVM15j+bUuQLZfrxPrDPNaCSm958/49ZloH88fYjICpgFa
-ZACH86xvAgMBAAECggEAFNd37Vf2VRXemkvg++g/NwVLM+WXQk4bGml7JxctbVUu
-akHQRYr3IeU+9ZBF7lQisLyeoONT5Dqlew03jeYz+paaLXd7h0b1ctRjq9ySZ7W9
-7bdhHE04Ej0/B+qPbWQIDXl+fOJ+3JrsHK4kHVN2DG9bm9XhBiTUU+Vd/37w4hNF
-9e1o1BhzigsJPm4sOERkh82QyYIj1lc9Zt4jVv5KUHWRr4T7sMTUiBgSUc9hUSaU
-2TM8T2+KOjZIY0ZXK3IE2Lo73E2hreS1Pep0/cmr6TfZNPVaJRl3avPQwJX+heTO
-CjJKBAJYZrJWem/RXc5VJ2/b9k1uoR2uU+nAkYfphQKBgQDoCSsClf1lbZRQNiWg
-ojdZ2E9MTx3r5AmxNATTE8axoTQYskCH9yDkcZz9mx3qBATOuIBP8GOjg+sBnM9k
-9mk/LkTquc9p+KYaEmkokzgvCCwRwq2MGYuG+xFddNE3ZLPn2s45CEDAhd8Q/SC4
-Qi4H5inFXy5HYLAVE+C755idqwKBgQDe8NcwKdA2bStuMIe0giKYo1FogX3MiJcc
-GnntUUb64s1BtJYi/Vt9mRK/nfZ8cltCkPaO7TlxEQ0bD0fIgBC8vkm5IhmY4EPl
-wKbdP2L8u5OB2P7iTBuiwLFJdsolgq2M1DWC4KnBvVF1ar0ju92rJ/moo6adyYty
-OjN9dmTATQKBgAxn8RTCUDoMEdH4EyrzgWIcXqEF2eOy3ZHL5jYi6Iy2wcJQRYL/
-g5KzQGGO2ZqZfGhRFQsxHyKu+vGrIKuVQStPnf+uz5gq4zahpV22AVsCZNjOP9kt
-xHgDFHqatFTx3WyYFk6WUl/4yGRwJD+1yiBB/hm/bQoD8WYvGeTyDQbhAoGBAM4b
-AhX40hE/JCOeohbzKGDMu/pNnKt2q5zDrW0E8wYGn5PbC+IVMHwRBBA6TSIH5u7H
-ben8zloFVYRqwAZQvyh/E1EggWGgE6VYUevBKhZUo64rmphDnFj+o+gy9fdvtFq5
-5S613LrL938ByxI6IFiXgGuzv9mn9k8IF4op5kMRAoGBANvZQz9L8wA9dvEA36BU
-hc0g881gQtLSFylBFTvm7SkiITdeuRy6ubo7t84rh+Ae8hUaeoXhsKJvLPUKewsU
-Bv6GIAdRe5eHQtuTdxTFnu2Us4W18Jnn56T4OqCXOmDLMK1CmIw3HInQ0hPIdddY
-X+wFVOerplOlmcV5etBDJWhC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 -----END PRIVATE KEY-----

lib/publish.js

@@ -1,11 +1,11 @@
 'use strict'
 
-const actions = require('@actions/core')
 const docker = require('./docker/index.js')
 
 module.exports = publish
 
 async function publish(opts, context) {
+  const actions = await import('@actions/core')
   const {image = docker.Image.from(opts, context)} = context
 
   const sha = image.sha || opts.build_id

package.json

@@ -12,17 +12,20 @@
     "package.json",
     "index.js"
   ],
+  "engines": {
+    "node": ">=20"
+  },
   "scripts": {
-    "test": "docker-compose -f compose/base.yml -f compose/test.yml up --exit-code-from semantic-release --force-recreate --remove-orphans --build",
-    "start": "docker-compose -f compose/base.yml -f compose/dev.yml up --force-recreate --remove-orphans --build",
-    "stop": "docker-compose -f compose/base.yml -f compose/dev.yml down",
+    "test": "docker compose -f compose/base.yml -f compose/test.yml up --exit-code-from semantic-release --force-recreate --remove-orphans --build",
+    "start": "docker compose -f compose/base.yml -f compose/dev.yml up --force-recreate --remove-orphans --build",
+    "stop": "docker compose -f compose/base.yml -f compose/dev.yml down",
     "tap": "tap",
     "lint": "eslint .",
     "lint:fix": "npm run lint -- --fix",
     "local": "env $(cat env/local.env)",
     "pretap": "npm run lint",
-    "release": "semantic-release",
-    "release:dry": "semantic-release --no-ci --dry-run --branches=${BRANCH_NAME:-main}"
+    "release": "npx semantic-release",
+    "release:dry": "npm run release -- --no-ci --dry-run --branches=${BRANCH_NAME:-main}"
   },
   "keywords": [
     "semantic-release"
@@ -66,19 +69,17 @@
     ]
   },
   "devDependencies": {
-    "@codedependant/release-config-npm": "^1.0.4",
-    "@semantic-release/changelog": "^5.0.1",
-    "@semantic-release/git": "^9.0.0",
-    "@semantic-release/github": "^7.0.7",
+    "@codedependant/release-config-core": "^1.1.1",
+    "@semantic-release/changelog": "^6.0.3",
     "eslint": "^8.5.0",
     "eslint-config-codedependant": "^3.0.0",
-    "semantic-release": "17",
+    "semantic-release": "^25.0.3",
     "sinon": "^9.0.2",
     "stream-buffers": "^3.0.3",
     "tap": "^16.0.0"
   },
   "dependencies": {
-    "@actions/core": "^1.11.1",
+    "@actions/core": "^3.0.0",
     "@semantic-release/error": "^3.0.0",
     "debug": "^4.1.1",
     "execa": "^4.0.2",