chore: update dev deps and release workflow

Author: christophehurpeau

.github/workflows/gh-pages.yml

@@ -8,7 +8,7 @@ jobs:
   create-documentation-and-deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Enable Corepack
         run: corepack enable
@@ -28,7 +28,7 @@ jobs:
         run: yarn typedoc --tsconfig tsconfig.doc.json
 
       - name: Generate Coverage
-        run: yarn test:coverage:json
+        run: yarn run test:coverage:json
 
       - name: Create nojekyll
         run: touch docs/.nojekyll

.github/workflows/push-renovate-build.yml

@@ -5,13 +5,16 @@ on:
     branches:
       - "renovate/rollup-**"
 
+permissions:
+  contents: write
+
 jobs:
   run-rollup-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
-          token: ${{ secrets.GH_TOKEN }}
+          ssh-key: ${{ secrets.PUSH_DEPLOY_KEY }}
 
       - name: Enable Corepack
         run: corepack enable

.github/workflows/push-renovate-pob_root.yml

@@ -7,13 +7,16 @@ on:
       - "renovate/pob-root-**"
       - "renovate/major-pob-root"
 
+permissions:
+  contents: write
+
 jobs:
   run-install-and-commit-modified-files:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
-          token: ${{ secrets.GH_TOKEN }}
+          ssh-key: ${{ secrets.PUSH_DEPLOY_KEY }}
 
       - name: Enable Corepack
         run: corepack enable

.github/workflows/push-renovate-prettier.yml

@@ -6,13 +6,16 @@ on:
       - "renovate/prettier-**"
       - "renovate/major-prettier"
 
+permissions:
+  contents: write
+
 jobs:
   run-prettier:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
-          token: ${{ secrets.GH_TOKEN }}
+          ssh-key: ${{ secrets.PUSH_DEPLOY_KEY }}
 
       - name: Enable Corepack
         run: corepack enable

.github/workflows/push.yml

@@ -1,13 +1,14 @@
 name: Push CI
-
+permissions:
+  contents: read
 on: [push]
 
 jobs:
   checks:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Enable Corepack
         run: corepack enable
@@ -21,13 +22,13 @@ jobs:
         run: yarn install --immutable
 
       - name: Checks
-        run: yarn run checks
+        run: run checks
 
   build:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Enable Corepack
         run: corepack enable
@@ -41,16 +42,16 @@ jobs:
         run: yarn install --immutable
 
       - name: Build
-        run: yarn run build
+        run: run build
 
       - name: Check nothing was forgotten before commit
-        run: yarn run repository-check-dirty
+        run: run repository-check-dirty
 
   lint:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Enable Corepack
         run: corepack enable
@@ -64,13 +65,13 @@ jobs:
         run: yarn install --immutable
 
       - name: Prettier
-        run: yarn run lint:prettier
+        run: run lint:prettier
 
       - name: Typescript
-        run: yarn run tsc
+        run: run tsc
 
       - name: Eslint
-        run: yarn run lint:eslint
+        run: run lint:eslint
 
   test:
     runs-on: ubuntu-latest
@@ -80,7 +81,7 @@ jobs:
         node-version: [22]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Enable Corepack
         run: corepack enable

.github/workflows/publish.yml .github/workflows/release.yml.github/workflows/publish.yml renamed to .github/workflows/release.yml

@@ -13,13 +13,17 @@ on:
         type: boolean
         default: false
 
+permissions:
+  id-token: write # Required for OIDC
+  contents: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
-          token: ${{ secrets.GH_TOKEN }}
+          ssh-key: ${{ secrets.PUSH_DEPLOY_KEY }}
           fetch-depth: 0
           fetch-tags: true
 
@@ -30,6 +34,7 @@ jobs:
         with:
           node-version: 22
           check-latest: true
+          registry-url: "https://registry.npmjs.org"
 
       - name: Check git tags
         if: github.ref == 'refs/heads/main' && !inputs.allow-no-tags
@@ -45,7 +50,7 @@ jobs:
 
       - name: New version (dry run)
         if: github.ref == 'refs/heads/main' && inputs.dry-run
-        run: yarn yarn-version version --dry-run
+        run: yarn run pob-version --dry-run
 
       - name: Configure Git user
         if: github.ref == 'refs/heads/main' && !inputs.dry-run
@@ -56,21 +61,21 @@ jobs:
       - name: New version
         if: github.ref == 'refs/heads/main' && !inputs.dry-run
         run: |
-          yarn yarn-version version --create-release=github  -m 'chore: release %v [skip ci]'
+          yarn run pob-version --create-release=github  -m 'chore: release %v [skip ci]'
         env:
-          HUSKY: 0
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          POB_GIT_HOOKS: 0
           YARN_ENABLE_IMMUTABLE_INSTALLS: false
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Publish to npm
+        if: github.ref == 'refs/heads/main' && !inputs.dry-run
         run: |
-          if [ -z "$NODE_AUTH_TOKEN" ]; then
-            echo "Missing env variable NODE_AUTH_TOKEN"
+          if [ -z "$NPM_AUTH_TOKEN" ]; then
+            echo "Missing env variable NPM_AUTH_TOKEN"
             exit 1
           fi
           echo >> ./.yarnrc.yml
-          echo "npmAuthToken: $NODE_AUTH_TOKEN" >> ./.yarnrc.yml
+          echo "npmAuthToken: $NPM_AUTH_TOKEN" >> ./.yarnrc.yml
           yarn workspaces foreach --all --parallel --no-private npm publish --tolerate-republish
-        if: github.ref == 'refs/heads/main' && !inputs.dry-run
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.prettierignore

@@ -1,6 +1,6 @@
 CHANGELOG.md
-/.yarnrc.yml
 /docs
+/.yarnrc.yml
 /.yarn/**/*
 /packages/*/dist
 /packages/*/build

.yarnrc.yml

@@ -1,5 +1,10 @@
 defaultSemverRangePrefix: ^
-
 enableGlobalCache: true
-
 nodeLinker: node-modules
+npmMinimalAgeGate: 4320
+npmPreapprovedPackages:
+  - "@pob/*"
+  - alouette
+  - alouette-icons
+  - nightingale
+  - nightingale-logger

package.json

@@ -8,7 +8,7 @@
   "repository": "https://github.com/christophehurpeau/nightingale.git",
   "homepage": "https://github.com/christophehurpeau/nightingale",
   "type": "module",
-  "packageManager": "yarn@4.11.0",
+  "packageManager": "yarn@4.12.0",
   "engines": {
     "node": ">=22.18.0"
   },
@@ -43,13 +43,13 @@
     "@pob/eslint-config": "62.0.0",
     "@pob/eslint-config-typescript": "62.0.0",
     "@pob/rollup-esbuild": "7.4.2",
-    "@pob/root": "19.8.0",
+    "@pob/root": "20.4.2",
     "@types/node": "24.10.4",
-    "@vitest/coverage-v8": "4.0.16",
+    "@vitest/coverage-v8": "4.0.10",
     "check-package-dependencies": "10.5.0",
     "eslint": "9.39.2",
     "typedoc": "0.28.15",
     "typescript": "5.9.3",
-    "vitest": "4.0.16"
+    "vitest": "4.0.10"
   }
 }

packages/nightingale-ansi-formatter/package.json

@@ -34,8 +34,8 @@
   "scripts": {
     "clean": "yarn clean:build",
     "lint": "yarn run lint:eslint",
-    "lint:eslint": "yarn ../.. run eslint --quiet packages/nightingale-ansi-formatter",
-    "test": "yarn ../../ run test -- packages/nightingale-ansi-formatter",
+    "lint:eslint": "yarn '../..' run eslint --quiet 'packages/nightingale-ansi-formatter'",
+    "test": "yarn '../..' run test -- 'packages/nightingale-ansi-formatter'",
     "watch": "yarn clean:build && rollup --config rollup.config.mjs --watch"
   },
   "pob": {},