fix: provenance & oidc (#146)

Author: TobiTenno

.github/dependabot.yml

@@ -7,12 +7,26 @@ updates:
       day: "sunday"
       time: "00:00"
     commit-message:
-      prefix: ""
-      prefix-development: "dev"
-      include: "scope"
+      prefix: "ci"
     labels:
       - "dependencies"
     open-pull-requests-limit: 10
     pull-request-branch-name:
       separator: "-"
-    rebase-strategy: "auto"
+    rebase-strategy: "auto"
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    commit-message:
+      prefix: "ci"
+    groups:
+      continuous-integration:
+        patterns:
+          - '*'
+    open-pull-requests-limit: 5
+    pull-request-branch-name:
+      separator: "-"
+    rebase-strategy: "auto"

.github/workflows/ci.yaml

@@ -11,9 +11,9 @@ jobs:
         node-version: ['lts/*']
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v5
       with:
         node-version: ${{ matrix.node-version }}
     - name: Install Dependencies
@@ -28,9 +28,9 @@ jobs:
       matrix:
         node-version: [12, 14, 16, 'lts/*']
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v5
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
@@ -46,9 +46,9 @@ jobs:
       matrix:
         node-version: ['lts/*']
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v5
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
@@ -67,11 +67,16 @@ jobs:
     strategy:
       matrix:
         node-version: ['lts/*']
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
+      issues: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v5
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@v2.5.0
+        uses: cycjimmy/semantic-release-action@5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

README.md

@@ -2,7 +2,7 @@
 
 A simple package for fetching JSON from a URL and caching it for a decided amount of time.
 
-## [Documentation](https://matej.voboril.dev/json-fetch-cache)
+## [Documentation](https://tobitenno.github.io/json-fetch-cache/)
 
 [![npm version](https://badge.fury.io/js/json-fetch-cache.svg)](https://badge.fury.io/js/json-fetch-cache)
 [![CI](https://github.com/TobiTenno/json-fetch-cache/actions/workflows/ci.yaml/badge.svg)](https://github.com/TobiTenno/json-fetch-cache/actions/workflows/ci.yaml)

package.json

@@ -105,5 +105,6 @@
   },
   "mocha": {
     "exit": true
-  }
+  },
+  "publishConfig": { "provenance": true }
 }