From b08b68f3e7e10aee2f4e30c7b34b9a2a695c2d43 Mon Sep 17 00:00:00 2001 From: RafaelGSS Date: Mon, 18 Aug 2025 14:46:54 -0300 Subject: [PATCH 1/2] workflows: add publish.yml This new action will publish new versions whenever a new tag is pushed to remote. Using npm provenance. See: https://github.com/fastify/fastify/issues/5984 --- .github/workflows/publish.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/publish.yml diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml new file mode 100644 index 0000000..7affe0a --- /dev/null +++ b/.github/workflows/publish.yml @@ -0,0 +1,29 @@ +name: Publish Package + +on: + push: + tags: + - 'v*' + +permissions: + id-token: write # Required for OIDC + contents: read + +jobs: + publish: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - uses: actions/setup-node@v4 + with: + node-version: '20' + registry-url: 'https://registry.npmjs.org' + + # Ensure npm 11.5.1 or later is installed + - name: Update npm + run: npm install -g npm@latest + - run: npm ci + - run: npm run build --if-present + - run: npm test + - run: npm publish From 504b4c06232bbdd0056317f90547af04fec3ec51 Mon Sep 17 00:00:00 2001 From: RafaelGSS Date: Mon, 18 Aug 2025 14:59:40 -0300 Subject: [PATCH 2/2] test: drop 25 from tests Schedule has been populated, so 25.0.0 exists on schedule.json. --- test.js | 1 - 1 file changed, 1 deletion(-) diff --git a/test.js b/test.js index d693b81..1173ab1 100644 --- a/test.js +++ b/test.js @@ -19,7 +19,6 @@ async function t () { assert.rejects(() => isNodeVulnerable('999'), /Could not fetch version information/) assert.rejects(() => isNodeVulnerable('Unobtanium'), /Could not fetch version information/) // i.e. not found - assert.rejects(() => isNodeVulnerable('25.0.0'), /Could not fetch version information/) // EOL assert.ok(await isNodeVulnerable('21.0.0'))