feat(handle-npm-audit): rename workflow to dependency-security-maintenance

Author: tnotheis

.github/workflows/handle-npm-audit.yml …lows/dependency-security-maintenance.yml.github/workflows/handle-npm-audit.yml renamed to .github/workflows/dependency-security-maintenance.yml .github/workflows/handle-npm-audit.yml renamed to .github/workflows/dependency-security-maintenance.yml

@@ -107,7 +107,7 @@ jobs:
         working-directory: target-repository
         env:
           NPM_AUDIT_PR_TABLE_PATH: ${{ runner.temp }}/npm-audit-pr-table.md
-        run: ../github-actions-repo/node_modules/.bin/tsx ../github-actions-repo/handle-npm-audit/handleNpmAudit.ts
+        run: ../github-actions-repo/node_modules/.bin/tsx ../github-actions-repo/dependency-security-maintenance/dealWithVulnerabilities.ts
 
       - name: Check for changes
         id: changes

README.md

@@ -39,7 +39,7 @@ Inputs:
 
 - `branch`: branch to inspect and release from. Defaults to `main`.
 
-## handle-npm-audit
+## dependency-security-maintenance
 
 Runs `better-npm-audit`, applies `npm audit fix`, updates `.nsprc` with remaining vulnerability exceptions, and creates or updates a pull request with the current audit result when files changed. If no changes are needed, any open audit pull request is commented on and closed.
 
@@ -49,7 +49,7 @@ jobs:
         permissions:
             contents: write
             pull-requests: write
-        uses: js-soft/github-actions/.github/workflows/handle-npm-audit.yml@main
+        uses: js-soft/github-actions/.github/workflows/dependency-security-maintenance.yml@main
         with:
             auto-merge-method: ignore-branch-protection
         secrets:

handle-npm-audit/handleNpmAudit.ts

@@ -29,9 +29,9 @@ type AuditPrTableRow = {
     action: AuditAction
 }
 
-handleNpmAudit()
+dealWithVulnerabilities()
 
-function handleNpmAudit(): void {
+function dealWithVulnerabilities(): void {
     const firstAudit = runBetterNpmAudit()
     const firstAuditSeverities = readNpmAuditSeveritiesById()
     const newVulnerabilityIds = extractUnhandledVulnerabilityIds(firstAudit.output)

package.json

@@ -5,7 +5,7 @@
     "scripts": {
         "lint": "npm run lint:prettier && npm run lint:tsc",
         "lint:prettier": "prettier --check .",
-        "lint:tsc": "tsc -p release-dependency-updates/tsconfig.json --noEmit && tsc -p handle-npm-audit/tsconfig.json --noEmit",
+        "lint:tsc": "tsc -p release-dependency-updates/tsconfig.json --noEmit && tsc -p dependency-security-maintenance/tsconfig.json --noEmit",
         "test": "node --import tsx --test release-dependency-updates/src/*.test.ts",
         "release-dependency-updates": "node --import tsx release-dependency-updates/src/index.ts"
     },