chore: @npmcli/template-oss@2.7.1

.commitlintrc.js

@@ -6,6 +6,6 @@ module.exports = {
   rules: {
     'type-enum': [2, 'always', ['feat', 'fix', 'docs', 'chore', 'deps']],
     'header-max-length': [2, 'always', 80],
-    'subject-case': [2, 'always', ['lower-case', 'sentence-case', 'start-case']],
+    'subject-case': [0, 'always', ['lower-case', 'sentence-case', 'start-case']],
   },
 }

.github/dependabot.yml

@@ -8,9 +8,9 @@ updates:
     interval: daily
   allow:
     - dependency-type: direct
-  versioning-strategy: increase-if-necessary
+  versioning-strategy: increase
   commit-message:
     prefix: deps
     prefix-development: chore
   labels:
-    - "dependencies"
+    - "Dependencies"

.github/workflows/ci.yml

@@ -9,7 +9,7 @@ on:
       - main
       - latest
   schedule:
-    # "At 02:00 on Monday" https://crontab.guru/#0_1_*_*_1
+    # "At 02:00 on Monday" https://crontab.guru/#0_2_*_*_1
     - cron: "0 2 * * 1"
 
 jobs:
@@ -34,12 +34,8 @@ jobs:
           shell: bash
         - os: macos-latest
           shell: bash
-        - os: windows-latest
-          shell: bash
         - os: windows-latest
           shell: cmd
-        - os: windows-latest
-          shell: powershell
     runs-on: ${{ matrix.platform.os }}
     defaults:
       run:
@@ -49,6 +45,18 @@ jobs:
       - uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
-      - run: npm i --prefer-online -g npm@latest
+        # node 12 and 14 ship with npm@6, which is known to fail when updating itself in windows
+      - name: Update to workable npm (windows)
+        if: matrix.platform.os == 'windows-latest' && (startsWith(matrix.node-version, '12') || startsWith(matrix.node-version, '14'))
+        run: |
+          curl -sO https://registry.npmjs.org/npm/-/npm-7.5.4.tgz
+          tar xf npm-7.5.4.tgz
+          cd package
+          node lib/npm.js install --no-fund --no-audit -g ..\npm-7.5.4.tgz
+          cd ..
+          rmdir /s /q package
+      - name: Update npm
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
       - run: npm i
       - run: npm test --ignore-scripts

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,38 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ main ]
+  schedule:
+    # "At 03:00 on Monday" https://crontab.guru/#0_3_*_*_1
+    - cron: "0 3 * * 1"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/post-dependabot.yml

@@ -0,0 +1,31 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "Post Dependabot Actions"
+on: pull_request
+
+jobs:
+  Install:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1.1.1
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: npm install and commit
+        if: ${{contains(steps.metadata.outputs.dependency-names, '@npmcli/template-oss')}}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config --local user.email "ops+npm-cli@npmjs.com"
+          git config --local user.name "npm cli ops bot"
+          gh pr checkout ${{ github.event.pull_request.number }}
+          npm install
+          git add .
+          git commit -am "chore: postinstall for dependabot template-oss PR"
+          git push origin ${{github.ref_name}}

.github/workflows/release-please.yml

@@ -21,5 +21,5 @@ jobs:
             [{"type":"feat","section":"Features","hidden":false},
             {"type":"fix","section":"Bug Fixes","hidden":false},
             {"type":"docs","section":"Documentation","hidden":false},
-            {"type":"deps","section":"dependencies","hidden":false},
+            {"type":"deps","section":"Dependencies","hidden":false},
             {"type":"chore","hidden":true}]

package.json

@@ -31,7 +31,8 @@
     "prepublishOnly": "git push origin --follow-tags",
     "postlint": "npm-template-check",
     "lintfix": "npm run lint -- --fix",
-    "posttest": "npm run lint"
+    "posttest": "npm run lint",
+    "template-copy": "npm-template-copy --force"
   },
   "tap": {
     "check-coverage": true
@@ -42,7 +43,7 @@
     ]
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.0",
+    "@npmcli/template-oss": "^2.7.1",
     "eslint": "^8.0.0",
     "tap": "^15.0.10"
   },
@@ -53,6 +54,6 @@
     "read-package-json-fast": "^2.0.1"
   },
   "templateOSS": {
-    "version": "2.4.0"
+    "version": "2.7.1"
   }
 }