From 645466db2c0dbca43fc82459872c6416a4ff69e0 Mon Sep 17 00:00:00 2001
From: David Buzinski <103441853+davidbuzinski@users.noreply.github.com>
Date: Thu, 4 Sep 2025 11:45:59 -0400
Subject: [PATCH 1/3] Update bat.yml

---
 .github/workflows/bat.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/bat.yml b/.github/workflows/bat.yml
index 4a3640c..103fb59 100644
--- a/.github/workflows/bat.yml
+++ b/.github/workflows/bat.yml
@@ -1,13 +1,15 @@
 name: Build and Test
 on: [push]
+permissions:
+  contents: read
 
 jobs:
   bat:
     name: Build and Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
       - name: Perform npm tasks
@@ -65,7 +67,7 @@ jobs:
             check-matlab: matlabVer = ver('matlab'); assert(strcmp(matlabVer.Release,'(R2023a)'));
             check-toolbox: symbolicVer = ver('symbolic'); assert(strcmp(symbolicVer.Release,'(R2023a)'));
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: built-action
       - name: Install selected products

From 645b727bed2d96ac970933ccc63a74e775d69649 Mon Sep 17 00:00:00 2001
From: David Buzinski <103441853+davidbuzinski@users.noreply.github.com>
Date: Thu, 4 Sep 2025 11:46:36 -0400
Subject: [PATCH 2/3] Update publish.yml

---
 .github/workflows/publish.yml | 19 ++++++++-----------
 1 file changed, 8 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e904661..2c13770 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,8 +1,9 @@
 name: Publish
-
 on:
   release:
-    types: [published, edited]
+    types: published
+permissions:
+  contents: write
 
 jobs:
   build:
@@ -11,15 +12,12 @@ jobs:
     outputs:
       tag: ${{ steps.update-package-version.outputs.version }}
     steps:
-      # Configure runner with the right stuff
-      - uses: actions/checkout@v3
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/checkout@v5
       - name: Configure git
         run: |
           git config user.name 'Release Action'
           git config user.email '<>'
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
 
@@ -31,7 +29,6 @@ jobs:
         run: |
           git tag -d "${{ github.event.release.tag_name }}"
           VERSION=$(npm version "${{ github.event.release.tag_name }}" --no-git-tag-version)
-          echo "::set-output name=version::$VERSION"
           git add package.json package-lock.json
           git commit -m "[skip ci] Bump $VERSION"
           git push origin HEAD:main
@@ -47,15 +44,15 @@ jobs:
         id: release_info
         run: |
           # Check for semantic versioning
-          echo "Preparing release for version $longVersion"
           longVersion="${{github.event.release.tag_name}}"
+          echo "Preparing release for version $longVersion"
           [[ $longVersion == v[0-9]*.[0-9]*.[0-9]* ]]  || (echo "must follow semantic versioning" && exit 1)
           majorVersion=$(echo ${longVersion%.*.*})
           minorVersion=$(echo ${longVersion%.*})
 
-          # Add the built artifacts. Using --force because dist should be in
+          # Add the built artifacts. Using --force because dist/lib should be in
           # .gitignore
-          git add --force dist
+          git add --force dist lib
 
           # Make the commit
           MESSAGE="Build for $(git rev-parse --short HEAD)"

From c25259e4d86432085435cd3c685794e5c9360eb3 Mon Sep 17 00:00:00 2001
From: David Buzinski <103441853+davidbuzinski@users.noreply.github.com>
Date: Thu, 4 Sep 2025 11:49:14 -0400
Subject: [PATCH 3/3] Update publish.yml

---
 .github/workflows/publish.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2c13770..7a97572 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -50,9 +50,9 @@ jobs:
           majorVersion=$(echo ${longVersion%.*.*})
           minorVersion=$(echo ${longVersion%.*})
 
-          # Add the built artifacts. Using --force because dist/lib should be in
+          # Add the built artifacts. Using --force because dist should be in
           # .gitignore
-          git add --force dist lib
+          git add --force dist
 
           # Make the commit
           MESSAGE="Build for $(git rev-parse --short HEAD)"