Merge pull request #8 from foxglove/nick/inf-65-update-npm-publish-workflows-to-use-trusted-publishing

Enable NPM trusted publishing with OIDC

Author: hillna

.github/workflows/ci.yml

@@ -12,20 +12,25 @@ jobs:
     name: push
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      # https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
+      id-token: write
+
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v6
+      - run: corepack enable
+      - uses: actions/setup-node@v6
         with:
-          node-version: 16.x
+          node-version: 22.x
           registry-url: https://registry.npmjs.org
+          cache: yarn
 
-      - run: yarn install --frozen-lockfile
+      - run: yarn install --immutable
       - run: yarn run build
       - run: yarn run lint:ci
       - run: yarn run test
 
       - name: Publish to NPM
         if: ${{ startsWith(github.ref, 'refs/tags/v') }}
-        run: yarn publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
+        run: yarn npm publish --provenance --access public

.gitignore

@@ -105,3 +105,12 @@ dist
 
 # MacOS
 .DS_Store
+
+# Yarn
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/sdks
+!.yarn/versions
+.pnp.*

.vscode/settings.json

@@ -1,7 +1,7 @@
 // -*- jsonc -*-
 {
   "editor.codeActionsOnSave": {
-    "source.fixAll.eslint": true
+    "source.fixAll.eslint": "explicit"
   },
   "editor.defaultFormatter": "esbenp.prettier-vscode",
   "editor.formatOnSave": true,

.yarnrc.yml

@@ -0,0 +1 @@
+nodeLinker: node-modules

package.json

@@ -1,6 +1,7 @@
 {
   "name": "@foxglove/velodyne-cloud",
   "version": "1.0.1",
+  "packageManager": "yarn@4.9.1",
   "description": "TypeScript library for converting Velodyne LIDAR packet data to point clouds",
   "license": "MIT",
   "keywords": [
@@ -36,24 +37,21 @@
     "node": ">= 14"
   },
   "devDependencies": {
-    "@foxglove/eslint-plugin": "0.13.0",
-    "@types/eslint": "^7",
-    "@types/eslint-plugin-prettier": "^3",
-    "@types/jest": "^26.0.23",
-    "@types/node": "^16.3.3",
-    "@types/prettier": "2.3.2",
-    "@typescript-eslint/eslint-plugin": "4.28.3",
-    "@typescript-eslint/parser": "4.28.3",
-    "eslint": "7.31.0",
-    "eslint-config-prettier": "8.3.0",
+    "@foxglove/eslint-plugin": "0.21.0",
+    "@types/jest": "29.5.14",
+    "@typescript-eslint/eslint-plugin": "5.62.0",
+    "@typescript-eslint/parser": "5.62.0",
+    "eslint": "8.57.0",
+    "eslint-config-prettier": "9.1.0",
+    "eslint-plugin-es": "4.1.0",
     "eslint-plugin-filenames": "1.3.2",
-    "eslint-plugin-import": "2.23.4",
-    "eslint-plugin-jest": "24.3.6",
-    "eslint-plugin-prettier": "3.4.0",
-    "jest": "27.0.6",
+    "eslint-plugin-import": "2.31.0",
+    "eslint-plugin-jest": "27.9.0",
+    "eslint-plugin-prettier": "5.2.1",
+    "jest": "29.7.0",
     "kelonio": "0.6.0",
-    "prettier": "2.3.2",
-    "ts-jest": "^27.0.3",
-    "typescript": "4.3.5"
+    "prettier": "3.5.1",
+    "ts-jest": "29.2.5",
+    "typescript": "5.7.3"
   }
 }