Update node/npm/workflows

.github/workflows/build-and-review-pr.yml

@@ -21,6 +21,10 @@ on:
   #   without disabling that requirement.  If we have a status check that is always produced,
   #   we can also use that to require all branches be up to date before they are merged.
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   build-and-review-pr:
     # This reusable workflow will check to see if an action's source code has changed based on
@@ -34,7 +38,7 @@ jobs:
     # This workflow assumes:
     #  - The main README.md is at the root of the repo
     #  - The README contains a contribution guidelines and usage examples section
-    uses: im-open/.github/.github/workflows/reusable-build-and-review-pr.yml@v1
+    uses: im-open/.github/.github/workflows/reusable-build-and-review-pr.yml@v2
     with:
       action-name: ${{ github.repository }}
       default-branch: main
@@ -101,7 +105,7 @@ jobs:
         run: echo ""
 
       - name: Setup - Checkout the action
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup - Dynamically generate tags for each of the scenarios to use with their release
         run: |
@@ -145,7 +149,7 @@ jobs:
         run: ./test/assert-values-match.sh --name "step outcome" --expected "success" --actual "${{ steps.prod-release.outcome }}"
 
       - name: And the release should exist on GitHub with props that match the inputs and defaults
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -195,7 +199,7 @@ jobs:
         run: ./test/assert-values-match.sh --name "step outcome" --expected "success" --actual "${{ steps.prod-release-asset.outcome }}"
 
       - name: And the release should exist on GitHub with the populated release url props
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -230,7 +234,7 @@ jobs:
 
       - name: And the release should exist on GitHub with the specified name
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -267,7 +271,7 @@ jobs:
 
       - name: And the release should exist on GitHub with the specified body
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -301,7 +305,7 @@ jobs:
 
       - name: And the release should exist on GitHub with the specified body
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
@@ -337,7 +341,7 @@ jobs:
 
       - name: And the release should exist on GitHub as a draft release
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -376,7 +380,7 @@ jobs:
 
       - name: And the release should exist on GitHub as a pre-release
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -415,7 +419,7 @@ jobs:
 
       - name: And the release should exist on GitHub with the release notes generated from the commits
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
@@ -486,7 +490,7 @@ jobs:
 
       - name: And the new release should exist on GitHub
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseExists = require('./test/assert-release-exists.js');
@@ -496,7 +500,7 @@ jobs:
 
       - name: And the original release should no longer exist
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const assertReleaseDoesNotExists = require('./test/assert-release-does-not-exist.js');
@@ -599,7 +603,7 @@ jobs:
 
       - name: Teardown - Cleanup all the releases by deleting them
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             // Not all of these will end up with a tag and a release, but run them all just in case any of the tests

.github/workflows/increment-version-on-merge.yml

@@ -29,9 +29,12 @@ on:
   #   if this action should be incremented and if new tags should be pushed to the repo based
   #   on the same criteria used in the build-and-review-pr.yml workflow.
 
+permissions:
+  contents: write
+
 jobs:
   increment-version:
-    uses: im-open/.github/.github/workflows/reusable-increment-version-on-merge.yml@v1
+    uses: im-open/.github/.github/workflows/reusable-increment-version-on-merge.yml@v2
     with:
       default-branch: main
 

README.md

@@ -65,7 +65,7 @@ jobs:
 
     steps:
       - name: Determine commitish to build and tag
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const targetRef = '${{ github.base_ref }}';
@@ -84,7 +84,7 @@ jobs:
             core.exportVariable('IS_PRERELEASE', isPreRelease);
             core.exportVariable('DO_BUILD', doBuild);
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         if: env.DO_BUILD == 'true'
         with:
           fetch-depth: 0
@@ -93,7 +93,7 @@ jobs:
       - name: Calculate next version
         id: version
         if: env.DO_BUILD == 'true'
-        uses: im-open/git-version-lite@v2
+        uses: im-open/git-version-lite@v4
         with:
           calculate-prerelease-version: true
           branch-name: ${{ github.head_ref }}
@@ -109,7 +109,7 @@ jobs:
         if: env.DO_BUILD == 'true'
         id: create_release
         # You may also reference just the major or major.minor version.
-        uses: im-open/create-release@v3.2.1
+        uses: im-open/create-release@v4.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           tag-name: ${{ steps.version.outputs.VERSION }}

action.yml

@@ -57,5 +57,5 @@ outputs:
   asset-browser-download-url:
     description: 'URL users can navigate to in order to download the uploaded asset'
 runs:
-  using: 'node20'
+  using: 'node24'
   main: 'dist/index.js'