From c562c6d791175940d47f8fce590cc18007286cb0 Mon Sep 17 00:00:00 2001 From: flakey5 <73616808+flakey5@users.noreply.github.com> Date: Tue, 2 Jun 2026 15:35:37 -0700 Subject: [PATCH] Update workers-types, pin actions to hashes, use dependabot Closes #167 Signed-off-by: flakey5 <73616808+flakey5@users.noreply.github.com> --- .github/dependabot.yml | 22 +++++++++++++++++++ .github/workflows/bonk.yml | 2 +- .github/workflows/changesets.yml | 6 ++--- .github/workflows/new-pr-review.yml | 2 +- .github/workflows/prerelease.yml | 12 +++++----- .github/workflows/semgrep.yml | 4 ++-- .github/workflows/tests.yml | 8 +++---- examples/basic/package-lock.json | 4 ++-- examples/core-tests/package-lock.json | 4 ++-- .../egress-interception/package-lock.json | 4 ++-- examples/egress-tests/package-lock.json | 4 ++-- examples/fuse-on-r2/package-lock.json | 4 ++-- examples/load-balancing/package-lock.json | 4 ++-- examples/multiple-ports/package-lock.json | 4 ++-- examples/timeout/package-lock.json | 4 ++-- examples/websocket/package-lock.json | 4 ++-- package-lock.json | 12 +++++----- package.json | 2 +- 18 files changed, 64 insertions(+), 42 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..9cee82a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,22 @@ +version: 2 +updates: + - package-ecosystem: npm + directory: '/' + versioning-strategy: increase + + schedule: + interval: monthly + + # Only accept updates older than a week + cooldown: + default-days: 7 + + - package-ecosystem: github-actions + directory: '/' + + schedule: + interval: monthly + + # Only accept updates older than a week + cooldown: + default-days: 7 diff --git a/.github/workflows/bonk.yml b/.github/workflows/bonk.yml index 4346a78..acd45ae 100644 --- a/.github/workflows/bonk.yml +++ b/.github/workflows/bonk.yml @@ -24,7 +24,7 @@ jobs: pull-requests: write steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: fetch-depth: 1 diff --git a/.github/workflows/changesets.yml b/.github/workflows/changesets.yml index 9d96494..0e768f5 100644 --- a/.github/workflows/changesets.yml +++ b/.github/workflows/changesets.yml @@ -16,14 +16,14 @@ jobs: runs-on: macos-latest-large steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: # See https://github.com/changesets/action/issues/187 token: ${{ secrets.GH_ACCESS_TOKEN }} fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e with: node-version: 24 cache: 'npm' @@ -36,7 +36,7 @@ jobs: - name: Create Version PR or Publish to NPM id: changesets - uses: changesets/action@v1 + uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b with: publish: npx changeset publish env: diff --git a/.github/workflows/new-pr-review.yml b/.github/workflows/new-pr-review.yml index 78f5274..19551c0 100644 --- a/.github/workflows/new-pr-review.yml +++ b/.github/workflows/new-pr-review.yml @@ -28,7 +28,7 @@ jobs: pull-requests: write steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: fetch-depth: 30 # Some history for context; not the full clone. diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml index d46f98b..e099744 100644 --- a/.github/workflows/prerelease.yml +++ b/.github/workflows/prerelease.yml @@ -1,12 +1,12 @@ name: Publish prereleases -on: +on: pull_request: push: branches: - main - next - -permissions: + +permissions: contents: read jobs: @@ -16,10 +16,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e with: node-version: 24 cache: 'npm' @@ -27,7 +27,7 @@ jobs: - name: Install Dependencies run: npm ci - - name: Build Package + - name: Build Package run: npm run build - run: npx pkg-pr-new publish --comment=update diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 09dfe25..656c7a7 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -16,11 +16,11 @@ jobs: name: semgrep-oss runs-on: ubuntu-slim steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: fetch-depth: 1 - id: cache-semgrep - uses: actions/cache@v5 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae with: path: ~/.local key: semgrep-1.160.0-${{ runner.os }} diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 48dd37b..d5c8204 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -14,10 +14,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e with: node-version: 24 cache: 'npm' @@ -43,10 +43,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e with: node-version: 24 cache: 'npm' diff --git a/examples/basic/package-lock.json b/examples/basic/package-lock.json index 87ed7f2..161f474 100644 --- a/examples/basic/package-lock.json +++ b/examples/basic/package-lock.json @@ -17,11 +17,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/core-tests/package-lock.json b/examples/core-tests/package-lock.json index 261169e..ca73d2f 100644 --- a/examples/core-tests/package-lock.json +++ b/examples/core-tests/package-lock.json @@ -19,11 +19,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/egress-interception/package-lock.json b/examples/egress-interception/package-lock.json index 24333dd..41d98a4 100644 --- a/examples/egress-interception/package-lock.json +++ b/examples/egress-interception/package-lock.json @@ -17,11 +17,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/egress-tests/package-lock.json b/examples/egress-tests/package-lock.json index 0dc3ccc..627ed5a 100644 --- a/examples/egress-tests/package-lock.json +++ b/examples/egress-tests/package-lock.json @@ -19,11 +19,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/fuse-on-r2/package-lock.json b/examples/fuse-on-r2/package-lock.json index 72211a3..2b4e8ef 100644 --- a/examples/fuse-on-r2/package-lock.json +++ b/examples/fuse-on-r2/package-lock.json @@ -17,11 +17,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/load-balancing/package-lock.json b/examples/load-balancing/package-lock.json index 9ae7498..1d9991e 100644 --- a/examples/load-balancing/package-lock.json +++ b/examples/load-balancing/package-lock.json @@ -17,11 +17,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/multiple-ports/package-lock.json b/examples/multiple-ports/package-lock.json index d512870..5d3cd2d 100644 --- a/examples/multiple-ports/package-lock.json +++ b/examples/multiple-ports/package-lock.json @@ -19,11 +19,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/timeout/package-lock.json b/examples/timeout/package-lock.json index 6c6e47c..0984b5a 100644 --- a/examples/timeout/package-lock.json +++ b/examples/timeout/package-lock.json @@ -17,11 +17,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/examples/websocket/package-lock.json b/examples/websocket/package-lock.json index e183de5..bed2a96 100644 --- a/examples/websocket/package-lock.json +++ b/examples/websocket/package-lock.json @@ -21,11 +21,11 @@ }, "../..": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", diff --git a/package-lock.json b/package-lock.json index e994502..87c5ada 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,16 +1,16 @@ { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@cloudflare/containers", - "version": "0.3.4", + "version": "0.3.6", "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0", @@ -302,9 +302,9 @@ } }, "node_modules/@cloudflare/workers-types": { - "version": "4.20260511.1", - "resolved": "https://registry.npmjs.org/@cloudflare/workers-types/-/workers-types-4.20260511.1.tgz", - "integrity": "sha512-FA+si7cOq9i/gtCHhIc0XJL0l1F/ApF+m00752Aj7WZFJrj3ZulT2T8/+rT3BabMT0QEnqFEGIqCgrmqhgEfMg==", + "version": "4.20260602.1", + "resolved": "https://registry.npmjs.org/@cloudflare/workers-types/-/workers-types-4.20260602.1.tgz", + "integrity": "sha512-0VssYYXHUn4VR1BaV+GXfhFpI53P2f6AIi17qyA9lQFyTs/u5ZF6IDPda2enDTIPFz/02872RM8CYVlXvRKtUA==", "dev": true, "license": "MIT OR Apache-2.0" }, diff --git a/package.json b/package.json index af0ebe0..40f995f 100644 --- a/package.json +++ b/package.json @@ -43,7 +43,7 @@ "license": "MIT OR Apache-2.0", "devDependencies": { "@changesets/cli": "^2.31.0", - "@cloudflare/workers-types": "^4.20260511.1", + "@cloudflare/workers-types": "^4.20260602.1", "@eslint/js": "^10.0.1", "@types/node": "^22.19.19", "eslint": "^10.3.0",