chore: bump @npmcli/template-oss from 3.2.1 to 3.4.1 (#147)

* chore: bump @npmcli/template-oss from 3.2.1 to 3.4.1 Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from 3.2.1 to 3.4.1. - [Release notes](https://github.com/npm/template-oss/releases) - [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md) - [Commits](npm/template-oss@v3.2.1...v3.4.1) --- updated-dependencies: - dependency-name: "@npmcli/template-oss" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore: postinstall for dependabot template-oss PR Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Luke Karrys <luke@lukekarrys.com>

Author: dependabot[bot]

.github/workflows/audit.yml

@@ -15,13 +15,13 @@ jobs:
  - uses: actions/checkout@v3
  - name: Setup git user
  run: |
- git config --global user.email "ops+npm-cli@npmjs.com"
- git config --global user.name "npm cli ops bot"
+ git config --global user.email "npm team"
+ git config --global user.name "ops+robot@npmjs.com"
  - uses: actions/setup-node@v3
  with:
  node-version: 16.x
  - name: Update npm to latest
  run: npm i --prefer-online --no-fund --no-audit -g npm@latest
  - run: npm -v
- - run: npm i --ignore-scripts --package-lock
+ - run: npm i --ignore-scripts --no-audit --no-fund --package-lock
  - run: npm audit

.github/workflows/ci.yml

@@ -22,15 +22,15 @@ jobs:
  - uses: actions/checkout@v3
  - name: Setup git user
  run: |
- git config --global user.email "ops+npm-cli@npmjs.com"
- git config --global user.name "npm cli ops bot"
+ git config --global user.email "npm team"
+ git config --global user.name "ops+robot@npmjs.com"
  - uses: actions/setup-node@v3
  with:
  node-version: 16.x
  - name: Update npm to latest
  run: npm i --prefer-online --no-fund --no-audit -g npm@latest
  - run: npm -v
- - run: npm i --ignore-scripts
+ - run: npm i --ignore-scripts --no-audit --no-fund
  - run: npm run lint
 
  test:
@@ -59,8 +59,8 @@ jobs:
  - uses: actions/checkout@v3
  - name: Setup git user
  run: |
- git config --global user.email "ops+npm-cli@npmjs.com"
- git config --global user.name "npm cli ops bot"
+ git config --global user.email "npm team"
+ git config --global user.name "ops+robot@npmjs.com"
  - uses: actions/setup-node@v3
  with:
  node-version: ${{ matrix.node-version }}
@@ -82,5 +82,5 @@ jobs:
  if: ${{ !startsWith(matrix.node-version, '10.') }}
  run: npm i --prefer-online --no-fund --no-audit -g npm@latest
  - run: npm -v
- - run: npm i --ignore-scripts
+ - run: npm i --ignore-scripts --no-audit --no-fund
  - run: npm test --ignore-scripts

.github/workflows/codeql-analysis.yml

@@ -34,8 +34,8 @@ jobs:
  - uses: actions/checkout@v3
  - name: Setup git user
  run: |
- git config --global user.email "ops+npm-cli@npmjs.com"
- git config --global user.name "npm cli ops bot"
+ git config --global user.email "npm team"
+ git config --global user.name "ops+robot@npmjs.com"
  - name: Initialize CodeQL
  uses: github/codeql-action/init@v1
  with:

.github/workflows/post-dependabot.yml

@@ -4,21 +4,20 @@ name: Post Dependabot Actions
 
 on: pull_request
 
-# https://docs.github.com/en/rest/overview/permissions-required-for-github-apps
+# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
 permissions:
- actions: write
  contents: write
 
 jobs:
- Install:
+ template-oss-apply:
  runs-on: ubuntu-latest
  if: github.actor == 'dependabot[bot]'
  steps:
  - uses: actions/checkout@v3
  - name: Setup git user
  run: |
- git config --global user.email "ops+npm-cli@npmjs.com"
- git config --global user.name "npm cli ops bot"
+ git config --global user.email "npm team"
+ git config --global user.name "ops+robot@npmjs.com"
  - uses: actions/setup-node@v3
  with:
  node-version: 16.x
@@ -36,8 +35,9 @@ jobs:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  run: |
  gh pr checkout ${{ github.event.pull_request.number }}
- npm install --ignore-scripts
+ npm install --ignore-scripts --no-audit --no-fund
  npm run template-oss-apply
  git add .
  git commit -am "chore: postinstall for dependabot template-oss PR"
  git push
+ npm run lint

.github/workflows/pull-request.yml

@@ -20,8 +20,8 @@ jobs:
  fetch-depth: 0
  - name: Setup git user
  run: |
- git config --global user.email "ops+npm-cli@npmjs.com"
- git config --global user.name "npm cli ops bot"
+ git config --global user.email "npm team"
+ git config --global user.name "ops+robot@npmjs.com"
  - uses: actions/setup-node@v3
  with:
  node-version: 16.x

package.json

@@ -33,7 +33,7 @@
  "devDependencies": {
  "@npmcli/config": "^4.0.1",
  "@npmcli/eslint-config": "^3.0.1",
- "@npmcli/template-oss": "3.2.1",
+ "@npmcli/template-oss": "3.4.1",
  "tap": "^16.0.1"
  },
  "engines": {
@@ -60,6 +60,6 @@
  ],
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "3.2.1"
+ "version": "3.4.1"
  }
 }