wip: separate into runner, config, and plugins

.commitlintrc.js

@@ -1,4 +1,4 @@
-/* This file is automatically added by @npmcli/template-oss. Do not edit. */
+/* This file is automatically updated by @npmcli/template-oss. Do not edit. */
 
 module.exports = {
  extends: ['@commitlint/config-conventional'],

.eslintrc.js

@@ -1,4 +1,4 @@
-/* This file is automatically added by @npmcli/template-oss. Do not edit. */
+/* This file is automatically updated by @npmcli/template-oss. Do not edit. */
 
 'use strict'
 
@@ -10,11 +10,6 @@ const localConfigs = readdir(__dirname)
 
 module.exports = {
  root: true,
- ignorePatterns: [
- 'workspace/test-workspace/**',
- ],
- extends: [
- '@npmcli',
- ...localConfigs,
- ],
+ ignorePatterns: ['workspaces/**'],
+ extends: ['@npmcli', ...localConfigs],
 }

.github/CODEOWNERS

@@ -1,3 +1,3 @@
-# This file is automatically added by @npmcli/template-oss. Do not edit.
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
 
 * @npm/cli-team

.github/ISSUE_TEMPLATE/bug.yml

@@ -1,9 +1,9 @@
-# This file is automatically added by @npmcli/template-oss. Do not edit.
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
 
 name: Bug
 description: File a bug/issue
 title: "[BUG] <title>"
-labels: [ Bug, Needs Triage ]
+labels: [Bug, Needs Triage]
 
 body:
  - type: checkboxes

.github/ISSUE_TEMPLATE/config.yml

@@ -1,3 +1,3 @@
-# This file is automatically added by @npmcli/template-oss. Do not edit.
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
 
 blank_issues_enabled: true

.github/actions/audit/action.yml

@@ -0,0 +1,23 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Audit
+
+runs:
+ using: composite
+ steps:
+ - name: Run Full Audit
+ shell: bash
+ run: |
+ if ! npm audit; then
+ COUNT=$(npm audit --audit-level=none --json | jq -r '.metadata.vulnerabilities.total')
+ echo "::warning title=All Vulnerabilities::Found $COUNT"
+ fi
+
+ - name: Run Production Audit
+ shell: bash
+ run: |
+ if ! npm audit --omit=dev; then
+ COUNT=$(npm audit --omit=dev --audit-level=none --json | jq -r '.metadata.vulnerabilities.total')
+ echo "::error title=Production Vulnerabilities::Found $COUNT"
+ exit 1
+ fi

.github/actions/changed-files/action.yml

@@ -0,0 +1,39 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Get Changed Files
+
+inputs:
+ token:
+ description: GitHub token to use
+ required: true
+
+outputs:
+ names:
+ value: ${{ steps.files.outputs.result }}
+
+runs:
+ using: composite
+ steps:
+ - name: Get Changed Files
+ uses: actions/github-script@v6
+ id: files
+ with:
+ github-token: ${{ inputs.token }}
+ script: |
+ const { repo: { owner, repo }, eventName, payload, sha } = context
+ let files
+ if (eventName === 'pull_request' || eventName === 'pull_request_target') {
+ files = await github.paginate(github.rest.pulls.listFiles, {
+ owner,
+ repo,
+ pull_number: payload.pull_request.number,
+ })
+ } else {
+ const { data: commit } = await github.rest.repos.getCommit({
+ owner,
+ repo,
+ ref: sha,
+ })
+ files = commit.files
+ }
+ return files.map(f => f.filename)

.github/actions/changed-workspaces/action.yml

@@ -0,0 +1,30 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Get Changed Workspaces
+
+inputs:
+ token:
+ description: GitHub token to use
+ files:
+ description: json stringified array of file names or --all
+
+outputs:
+ flags:
+ value: ${{ steps.workspaces.outputs.flags }}
+
+runs:
+ using: composite
+ steps:
+ - name: Get Changed Files
+ uses: ./.github/actions/changed-files
+ if: ${{ !inputs.files }}
+ id: files
+ with:
+ token: ${{ inputs.token }}
+
+ - name: Get Workspaces
+ shell: bash
+ id: workspaces
+ uses: ./.github/actions/get-workspaces
+ with:
+ files: ${{ inputs.files || steps.files.outputs.names }}

.github/actions/conclude-check/action.yml

@@ -0,0 +1,25 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Conclude Check
+description: Conclude a check
+
+inputs:
+ token:
+ description: GitHub token to use
+ required: true
+ conclusion:
+ description: conclusion of check
+ require: true
+ check-id:
+ description: id of check to conclude
+ required: true
+
+runs:
+ using: composite
+ steps:
+ - name: Conclude Check
+ uses: LouisBrunner/[email protected]
+ with:
+ token: ${{ inputs.token }}
+ conclusion: ${{ inputs.conclusion }}
+ check_id: ${{ inputs.check-id }}

.github/actions/create-check/action.yml

@@ -0,0 +1,69 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Create Check
+description: Create a check and associate it with a sha
+
+inputs:
+ token:
+ description: GitHub token to use
+ required: true
+ sha:
+ description: sha to attach the check to
+ required: true
+ job-name:
+ description: Name of the job to find
+ required: true
+ job-status:
+ description: Status of the check being created
+ default: "in_progress"
+
+outputs:
+ check-id:
+ description: The ID of the check that was created
+ value: ${{ steps.check.outputs.check_id }}
+
+runs:
+ using: composite
+ steps:
+ - name: Get Workflow Job
+ uses: actions/github-script@v6
+ id: workflow-job
+ env:
+ JOB_NAME: ${{ inputs.job-name }}
+ with:
+ github-token: ${{ inputs.token }}
+ script: |
+ const { JOB_NAME } = process.env
+ const { repo: { owner, repo }, runId, serverUrl } = context
+
+ const jobs = await github.paginate(github.rest.actions.listJobsForWorkflowRun, {
+ owner,
+ repo,
+ run_id: runId,
+ }).then(jobs => jobs.map(j => ({ name: j.name, html_url: j.html_url })))
+
+ console.log(`found jobs: ${JSON.stringify(jobs, null, 2)}`)
+
+ const job = jobs.find(j => j.name.endsWith(JOB_NAME))
+
+ console.log(`found job: ${JSON.stringify(job, null, 2)}`)
+
+ const shaUrl = `${serverUrl}/${owner}/${repo}/commit/${{ inputs.sha }}`
+ const summary = `This check is assosciated with ${shaUrl}\n\n`
+ const message = job?.html_url
+ ? `For run logs, click here: ${job.html_url}`
+ : `Run logs could not be found for a job with name: "${JOB_NAME}"`
+
+ // Return a json object with properties that LouisBrunner/checks-actions
+ // expects as the output of the check
+ return { summary: summary + message }
+
+ - name: Create Check
+ uses: LouisBrunner/[email protected]
+ id: check
+ with:
+ token: ${{ inputs.token }}
+ status: ${{ inputs.job-status }}
+ name: ${{ inputs.job-name }}
+ sha: ${{ inputs.sha }}
+ output: ${{ steps.workflow-job.outputs.result }}

.github/actions/deps/action.yml

@@ -0,0 +1,22 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Dependencies
+
+inputs:
+ command:
+ description: command to run for the dependencies step
+ default: "install --ignore-scripts --no-audit --no-fund"
+ flags:
+ description: extra flags to pass to the dependencies step
+ default: ""
+ shell:
+ description: shell to run on
+ default: "bash"
+
+runs:
+ using: composite
+ steps:
+ - name: Install Dependencies
+ shell: ${{ inputs.shell }}
+ run: |
+ npm ${{ inputs.command }} ${{ inputs.flags }}

.github/actions/get-workspaces/action.yml

@@ -0,0 +1,15 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: "Get Workspaces"
+
+inputs:
+ files:
+ description: "files"
+
+outputs:
+ flags:
+ description: "workspace flags"
+
+runs:
+ using: "node16"
+ main: "index.js"

.github/actions/lint/action.yml

@@ -0,0 +1,20 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: Lint
+
+inputs:
+ flags:
+ description: flags to pass to the commands
+ default: ""
+
+runs:
+ using: composite
+ steps:
+ - name: Lint
+ shell: bash
+ run: |
+ npm run lint --ignore-scripts ${{ inputs.flags }}
+ - name: Post Lint
+ shell: bash
+ run: |
+ npm run postlint --ignore-scripts ${{ inputs.flags }}

.github/actions/release-manager/action.yml

@@ -0,0 +1,14 @@
+# This file is automatically updated by @npmcli/template-oss. Do not edit.
+
+name: "Release Manager"
+
+inputs:
+ token:
+ required: true
+ pr-number:
+ required: true
+ comment-id:
+
+runs:
+ using: "node16"
+ main: "index.js"