Switch from yarn to pnpm, improve workflows, add provenance to published package

.github/actions/set-up-node/action.yml

@@ -0,0 +1,20 @@
+name: "Set up Node.js"
+inputs:
+  node-version:
+    default: "lts/*"
+  registry-url:
+    default: ""
+runs:
+  using: "composite"
+  steps:
+    - name: Install pnpm
+      uses: pnpm/action-setup@v4
+    - name: Set up Node.js ${{ inputs.node-version }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        registry-url: ${{ inputs.registry-url }}
+        cache: "pnpm"
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install

.github/dependabot.yml

@@ -1,20 +1,20 @@
 version: 2
 updates:
-  - package-ecosystem: 'github-actions'
-    directory: '/'
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
-      interval: 'monthly'
+      interval: "monthly"
     labels:
-      - 'skip-changelog'
-      - 'dependencies'
+      - "skip-changelog"
+      - "dependencies"
     rebase-strategy: disabled
 
   - package-ecosystem: npm
-    directory: '/'
+    directory: "/"
 
     schedule:
-      interval: 'monthly'
-      time: '04:00'
+      interval: "monthly"
+      time: "04:00"
     open-pull-requests-limit: 10
     labels:
       - skip-changelog

.github/release-draft-template.yml

@@ -1,37 +1,37 @@
-name-template: 'v$RESOLVED_VERSION 🌻'
-tag-template: 'v$RESOLVED_VERSION'
+name-template: "v$RESOLVED_VERSION 🌻"
+tag-template: "v$RESOLVED_VERSION"
 exclude-labels:
-  - 'skip-changelog'
+  - "skip-changelog"
 version-resolver:
   minor:
     labels:
-      - 'breaking-change'
+      - "breaking-change"
   default: patch
 categories:
-  - title: '⚠️ Breaking changes'
-    label: 'breaking-change'
-  - title: '🚀 Enhancements'
-    label: 'enhancement'
-  - title: '🐛 Bug Fixes'
-    label: 'bug'
-  - title: '🔒 Security'
-    label: 'security'
-  - title: '⚙️ Maintenance/misc'
+  - title: "⚠️ Breaking changes"
+    label: "breaking-change"
+  - title: "🚀 Enhancements"
+    label: "enhancement"
+  - title: "🐛 Bug Fixes"
+    label: "bug"
+  - title: "🔒 Security"
+    label: "security"
+  - title: "⚙️ Maintenance/misc"
     label:
-      - 'maintenance'
-      - 'documentation'
+      - "maintenance"
+      - "documentation"
 template: |
   $CHANGES
 
   Thanks again to $CONTRIBUTORS! 🎉
-no-changes-template: 'Changes are coming soon 😎'
-sort-direction: 'ascending'
+no-changes-template: "Changes are coming soon 😎"
+sort-direction: "ascending"
 replacers:
   - search: '/(?:and )?@dependabot-preview(?:\[bot\])?,?/g'
-    replace: ''
+    replace: ""
   - search: '/(?:and )?@dependabot(?:\[bot\])?,?/g'
-    replace: ''
+    replace: ""
   - search: '/(?:and )?@bors(?:\[bot\])?,?/g'
-    replace: ''
-  - search: '/(?:and )?@meili-bot,?/g'
-    replace: ''
+    replace: ""
+  - search: "/(?:and )?@meili-bot,?/g"
+    replace: ""

.github/workflows/docs.yml

@@ -8,16 +8,12 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
-
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Install dependencies
-        run: yarn install
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/set-up-node
 
       - name: Generate Documentation
-        run: yarn build:docs
+        run: pnpm build:docs
 
       - name: Deploy to GitHub Pages
         uses: peaceiris/actions-gh-pages@v4

.github/workflows/meilisearch-prototype-tests.yml

@@ -5,10 +5,10 @@ name: Meilisearch prototype tests
 on:
   pull_request:
     branches:
-      - 'prototype-beta/**'
+      - "prototype-beta/**"
   push:
     branches:
-      - 'prototype-beta/**'
+      - "prototype-beta/**"
 
 jobs:
   meilisearch-version:
@@ -31,37 +31,34 @@ jobs:
           echo "meilisearch_version=$MEILISEARCH_VERSION" >> $GITHUB_OUTPUT
   integration_tests:
     runs-on: ubuntu-latest
-    needs: ['meilisearch-version']
+    needs: ["meilisearch-version"]
     services:
       meilisearch:
         image: getmeili/meilisearch:${{ needs.meilisearch-version.outputs.version }}
         env:
-          MEILI_MASTER_KEY: 'masterKey'
-          MEILI_NO_ANALYTICS: 'true'
+          MEILI_MASTER_KEY: "masterKey"
+          MEILI_NO_ANALYTICS: "true"
         ports:
-          - '7700:7700'
+          - "7700:7700"
     strategy:
       matrix:
-        node: ['18', '20', '22']
-    name: integration-tests (Node.js ${{ matrix.node }})
+        node-version: ["18", "20", "22"]
+    name: integration-tests (Node.js ${{ matrix.node-version }})
     steps:
       - uses: actions/checkout@v4
-      - name: Setup node
-        uses: actions/setup-node@v4
+      - uses: ./.github/actions/set-up-node
         with:
-          node-version: ${{ matrix.node }}
-          cache: yarn
-      - name: Install dependencies
-        run: yarn --dev
+          node-version: ${{ matrix.node-version }}
+
       - name: Run tests
-        run: yarn test
+        run: pnpm test
       - name: Build project
-        run: yarn build
+        run: pnpm build
       - name: Run ESM env
-        run: yarn test:env:esm
+        run: pnpm test:env:esm
       - name: Run Node.js env
-        run: yarn test:env:nodejs
+        run: pnpm test:env:nodejs
       - name: Run node typescript env
-        run: yarn test:env:node-ts
+        run: pnpm test:env:node-ts
       - name: Run Browser env
-        run: yarn test:env:browser
+        run: pnpm test:env:browser

.github/workflows/pre-release-tests.yml

@@ -5,12 +5,12 @@ name: Pre-Release Tests
 on:
   pull_request:
     branches:
-      - 'bump-meilisearch-v**'
-      - 'pre-release-beta/**'
+      - "bump-meilisearch-v**"
+      - "pre-release-beta/**"
   push:
     branches:
-      - 'bump-meilisearch-v**'
-      - 'pre-release-beta/**'
+      - "bump-meilisearch-v**"
+      - "pre-release-beta/**"
 
 jobs:
   meilisearch-version:
@@ -28,37 +28,34 @@ jobs:
   integration_tests:
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request' || startsWith(github.base_ref, 'bump-meilisearch-v') || startsWith(github.base_ref, 'pre-release-beta')
-    needs: ['meilisearch-version']
+    needs: ["meilisearch-version"]
     services:
       meilisearch:
         image: getmeili/meilisearch:${{ needs.meilisearch-version.outputs.version }}
         env:
-          MEILI_MASTER_KEY: 'masterKey'
-          MEILI_NO_ANALYTICS: 'true'
+          MEILI_MASTER_KEY: "masterKey"
+          MEILI_NO_ANALYTICS: "true"
         ports:
-          - '7700:7700'
+          - "7700:7700"
     strategy:
       matrix:
-        node: ['18', '20', '22']
-    name: integration-tests (Node.js ${{ matrix.node }})
+        node-version: ["18", "20", "22"]
+    name: integration-tests (Node.js ${{ matrix.node-version }})
     steps:
       - uses: actions/checkout@v4
-      - name: Setup node
-        uses: actions/setup-node@v4
+      - uses: ./.github/actions/set-up-node
         with:
-          node-version: ${{ matrix.node }}
-          cache: yarn
-      - name: Install dependencies
-        run: yarn --dev
+          node-version: ${{ matrix.node-version }}
+
       - name: Run tests
-        run: yarn test
+        run: pnpm test
       - name: Build project
-        run: yarn build
+        run: pnpm build
       - name: Run ESM env
-        run: yarn test:env:esm
+        run: pnpm test:env:esm
       - name: Run Node.js env
-        run: yarn test:env:nodejs
+        run: pnpm test:env:nodejs
       - name: Run node typescript env
-        run: yarn test:env:node-ts
+        run: pnpm test:env:node-ts
       - name: Run Browser env
-        run: yarn test:env:browser
+        run: pnpm test:env:browser

.github/workflows/publish.yml

@@ -6,28 +6,29 @@ on:
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          registry-url: https://registry.npmjs.org/
-          cache: 'yarn'
       - name: Check release validity
         run: sh .github/scripts/check-release.sh
       - name: Check tag format
         run: sh .github/scripts/check-tag-format.sh "${{ github.event.release.prerelease }}"
-      - name: Install dependencies
-        run: yarn install
+
+      - uses: ./.github/actions/set-up-node
+        with:
+          registry-url: https://registry.npmjs.org/
+
       - name: Build meilisearch-js
-        run: yarn build
+        run: pnpm build
       - name: Publish with latest tag
-        if: '!github.event.release.prerelease'
-        run: npm publish .
+        if: !github.event.release.prerelease
+        run: pnpm publish --provenance --access public
         env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Publish with beta tag
-        if: 'github.event.release.prerelease'
-        run: npm publish . --tag beta
+        if: github.event.release.prerelease
+        run: pnpm publish --provenance --access public --tag beta
         env:
-          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/tests.yml

@@ -27,36 +27,33 @@ jobs:
       meilisearch:
         image: getmeili/meilisearch:latest
         env:
-          MEILI_MASTER_KEY: 'masterKey'
-          MEILI_NO_ANALYTICS: 'true'
+          MEILI_MASTER_KEY: "masterKey"
+          MEILI_NO_ANALYTICS: "true"
         ports:
-          - '7700:7700'
+          - "7700:7700"
     strategy:
       fail-fast: false
       matrix:
-        node: ['18', '20', '22']
-    name: integration-tests (Node.js ${{ matrix.node }})
+        node-version: ["18", "20", "22"]
+    name: integration-tests (Node.js ${{ matrix.node-version }})
     steps:
       - uses: actions/checkout@v4
-      - name: Setup node
-        uses: actions/setup-node@v4
+      - uses: ./.github/actions/set-up-node
         with:
-          node-version: ${{ matrix.node }}
-          cache: 'yarn'
-      - name: Install dependencies
-        run: yarn --dev
+          node-version: ${{ matrix.node-version }}
+
       - name: Run tests
-        run: yarn test
+        run: pnpm test
       - name: Build project
-        run: yarn build
+        run: pnpm build
       - name: Run ESM env
-        run: yarn test:env:esm
+        run: pnpm test:env:esm
       - name: Run Node.js env
-        run: yarn test:env:nodejs
+        run: pnpm test:env:nodejs
       - name: Run node typescript env
-        run: yarn test:env:node-ts
+        run: pnpm test:env:node-ts
       - name: Run Browser env
-        run: yarn test:env:browser
+        run: pnpm test:env:browser
       - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v5
         env:
@@ -66,15 +63,10 @@ jobs:
     name: style-check
     steps:
       - uses: actions/checkout@v4
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: 'yarn'
-      - name: Install dependencies
-        run: yarn --dev
+      - uses: ./.github/actions/set-up-node
+
       - name: Run code style check
-        run: yarn style
+        run: pnpm style
       - name: Run yaml style check
         uses: ibiqlik/action-yamllint@v3
         with:
@@ -84,14 +76,9 @@ jobs:
     name: types-check
     steps:
       - uses: actions/checkout@v4
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: 'yarn'
-      - name: Install dependencies
-        run: yarn --dev
+      - uses: ./.github/actions/set-up-node
+
       - name: Build project
-        run: yarn build
+        run: pnpm build
       - name: Run types check
-        run: yarn types
+        run: pnpm types