chore: repo maintenance (#252)

* chore: repo maintenance

* Create nervous-fishes-arrive.md

* update

* update

* update doc

Author: ota-meshi

.changeset/nervous-fishes-arrive.md

@@ -0,0 +1,5 @@
+---
+"jsonc-eslint-parser": patch
+---
+
+use npm trusted publishing

.eslintignore

@@ -1,9 +1,9 @@
 name: GHPages
 
 on:
+  workflow_dispatch: null
   push:
     branches: [master]
-  workflow_dispatch: null
 
 # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
 permissions:
@@ -13,7 +13,7 @@ permissions:
 
 # Allow one concurrent deployment
 concurrency:
-  group: pages
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - uses: actions/setup-node@v6
     - name: Install And Build
       run: |+

.eslintrc.js

@@ -6,12 +6,21 @@ on:
   pull_request:
     branches: [master]
 
+# Allow one concurrent deployment
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-node@v6
+    - uses: actions/cache@v4
+      with:
+        path: node_modules
+        key: ${{ runner.os }}-${{ hashFiles('package.json') }}-${{ github.ref }}
     - name: Install Packages
       run: npm install -f
     - name: Lint
@@ -22,16 +31,15 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [16.x, 18.x, 20.x]
+        node-version: [16.x, 18.x, 20.x, 22.x, 24.x]
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
-    - name: Install Target Packages
-      run: |+
-          npm install --legacy-peer-deps
+    - name: Install Packages
+      run: npm install -f
     - name: Test
       run: npm test
   test-for-old-node:
@@ -51,18 +59,3 @@ jobs:
           npm install --legacy-peer-deps
     - name: Test
       run: npm test
-  test-and-coverage:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v5
-    - uses: actions/setup-node@v6
-      with:
-        node-version: 24.x
-    - name: Install Packages
-      run: npm install
-    - name: Test
-      run: npm run test:nyc
-    - name: Coveralls GitHub Action
-      uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
-      with:
-        github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/GHPages.yml

@@ -5,27 +5,37 @@ on:
     branches:
       - master
 
-permissions:
-  contents: write
-  issues: write
-  pull-requests: write
+permissions: {}
+
+# Allow one concurrent deployment
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   release:
+    # prevents this action from running on forks
+    if: github.repository == 'ota-meshi/jsonc-eslint-parser'
+    permissions:
+      contents: write # to create release (changesets/action)
+      id-token: write # OpenID Connect token needed for provenance
+      pull-requests: write # to create pull request (changesets/action)
     name: Release
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0
-
       - name: Setup Node.js
         uses: actions/setup-node@v6
-
+        with:
+          node-version: lts/*
       - name: Install Dependencies
-        run: npm install --legacy-peer-deps
+        run: npm install
+      - name: Build
+        run: npm run build
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
@@ -39,4 +49,3 @@ jobs:
           title: "chore: release jsonc-eslint-parser"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/NodeCI.yml

@@ -6,17 +6,24 @@ on:
 permissions:
   contents: write
 
+# Allow one concurrent deployment
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   format:
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup node
         uses: actions/setup-node@v6
       - name: Install deps
-        run: npm install -f
+        run: npm install
+      - name: Build
+        run: npm run build
       - name: Format
         run: npm run eslint-fix
       - name: Commit

.github/workflows/Release.yml

@@ -0,0 +1,41 @@
+name: Update pkg.pr.new comment
+
+on:
+  workflow_run:
+    workflows: [Publish to pkg.pr.new]
+    types:
+      - completed
+
+permissions:
+  issues: write
+  pull-requests: write
+
+# Allow one concurrent deployment
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    if: github.repository == 'ota-meshi/jsonc-eslint-parser'
+    name: Update comment
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Download artifact
+        uses: actions/download-artifact@v6
+        with:
+          name: output
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          run-id: ${{ github.event.workflow_run.id }}
+      - run: ls -R .
+      - name: Post or update comment
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const fs = require('fs');
+            const output = JSON.parse(fs.readFileSync('output.json', 'utf8'));
+            const { default: process } = await import('${{ github.workspace }}/tools/pkg.pr.new-comment.mjs')
+
+            await process({github, context, core, output})

.github/workflows/format.yml

@@ -0,0 +1,47 @@
+name: Publish to pkg.pr.new
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+    tags: ["!**"]
+
+# Allow one concurrent deployment
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    if: github.repository == 'ota-meshi/jsonc-eslint-parser'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+      - name: Install Packages
+        run: npm install
+      - name: Build
+        run: npm run build
+      - run: npx pkg-pr-new publish --compact '.' --json output.json --comment=off
+      - name: Add metadata to output
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const fs = require('fs');
+            const output = JSON.parse(fs.readFileSync('output.json', 'utf8'));
+            output.number = context.issue.number;
+            output.event_name = context.eventName;
+            output.ref = context.ref;
+            output.sha = context.eventName === 'pull_request'
+              ? context.payload.pull_request.head.sha
+              : context.payload.after;
+            fs.writeFileSync('output.json', JSON.stringify(output), 'utf8');
+      - name: Upload output
+        uses: actions/upload-artifact@v5
+        with:
+          name: output
+          path: ./output.json
+
+      - run: ls -R .

.github/workflows/pkg.pr.new-comment.yml

@@ -1 +1,2 @@
-package-lock=false
+package-lock=false
+force=true