chore: @npmcli/template-oss@4.12.0

.github/workflows/release.yml

@@ -174,7 +174,7 @@ jobs:
         run: |
           git commit --all --amend --no-edit || true
           git push --force-with-lease
-          echo "::set-output  name=sha::$(git rev-parse HEAD)"
+          echo "sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
       - name: Get Workflow Job
         uses: actions/github-script@v6
         if: steps.commit.outputs.sha
@@ -255,7 +255,7 @@ jobs:
           else
             result="success"
           fi
-          echo "::set-output name=result::$result"
+          echo "result=$result" >> $GITHUB_OUTPUT
       - name: Conclude Check
         uses: LouisBrunner/checks-action@v1.3.1
         if: needs.update.outputs.check-id && always()
@@ -334,15 +334,14 @@ jobs:
       - name: Get Needs Result
         id: needs-result
         run: |
-          result=""
           if [[ "${{ contains(needs.*.result, 'failure') }}" == "true" ]]; then
             result="x"
           elif [[ "${{ contains(needs.*.result, 'cancelled') }}" == "true" ]]; then
             result="heavy_multiplication_x"
           else
             result="white_check_mark"
           fi
-          echo "::set-output name=result::$result"
+          echo "result=$result" >> $GITHUB_OUTPUT
       - name: Update Release PR Comment
         uses: actions/github-script@v6
         env:
@@ -363,7 +362,8 @@ jobs:
             if (updateComment) {
               console.log('Found comment to update:', JSON.stringify(updateComment, null, 2))
               let body = updateComment.body.replace(/Workflow run: :[a-z_]+:/, `Workflow run: :${RESULT}:`)
-              if (RESULT === 'x') {
+              const tagCodeowner = RESULT !== 'white_check_mark'
+              if (tagCodeowner) {
                 body += `\n\n:rotating_light:`
                 body += ` @npm/cli-team: The post-release workflow failed for this release.`
                 body += ` Manual steps may need to be taken after examining the workflow output`

SECURITY.md

@@ -4,11 +4,10 @@ GitHub takes the security of our software products and services seriously, inclu
 
 If you believe you have found a security vulnerability in this GitHub-owned open source repository, you can report it to us in one of two ways. 
 
-If the vulnerability you have found is *not* [in scope for the GitHub Bug Bounty Program](https://bounty.github.com/#scope) or if you do not wish to be considered for a bounty reward, please report the issue to us directly using [private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability).
+If the vulnerability you have found is *not* [in scope for the GitHub Bug Bounty Program](https://bounty.github.com/#scope) or if you do not wish to be considered for a bounty reward, please report the issue to us directly through [opensource-security@github.com](mailto:opensource-security@github.com).
 
 If the vulnerability you have found is [in scope for the GitHub Bug Bounty Program](https://bounty.github.com/#scope) and you would like for your finding to be considered for a bounty reward, please submit the vulnerability to us through [HackerOne](https://hackerone.com/github) in order to be eligible to receive a bounty award.
 
 **Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.**
 
 Thanks for helping make GitHub safe for everyone.
-

docs/package.json

@@ -22,7 +22,7 @@
   "devDependencies": {
     "@isaacs/string-locale-compare": "^1.1.0",
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "front-matter": "^4.0.2",
     "ignore-walk": "^6.0.1",
     "jsdom": "^21.1.0",
@@ -56,7 +56,7 @@
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
     "ciVersions": "latest",
     "engines": "^14.17.0 || ^16.13.0 || >=18.0.0",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "../scripts/template-oss/index.js",
     "workspaceRepo": {
       "add": {

mock-registry/package.json

@@ -34,7 +34,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4"
+    "version": "4.12.0"
   },
   "tap": {
     "no-coverage": true,
@@ -46,7 +46,7 @@
   "devDependencies": {
     "@npmcli/arborist": "^6.1.1",
     "@npmcli/eslint-config": "^4.0.1",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "nock": "^13.3.0",
     "npm-package-arg": "^10.1.0",
     "pacote": "^15.0.8",

package-lock.json

@@ -161,7 +161,7 @@
         "@npmcli/git": "^4.0.1",
         "@npmcli/mock-registry": "^1.0.0",
         "@npmcli/promise-spawn": "^6.0.2",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "licensee": "^10.0.0",
         "nock": "^13.3.0",
         "npm-packlist": "^7.0.4",
@@ -182,7 +182,7 @@
       "devDependencies": {
         "@isaacs/string-locale-compare": "^1.1.0",
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "front-matter": "^4.0.2",
         "ignore-walk": "^6.0.1",
         "jsdom": "^21.1.0",
@@ -207,7 +207,7 @@
       "devDependencies": {
         "@npmcli/arborist": "^6.1.1",
         "@npmcli/eslint-config": "^4.0.1",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "nock": "^13.3.0",
         "npm-package-arg": "^10.1.0",
         "pacote": "^15.0.8",
@@ -2220,9 +2220,9 @@
       "link": true
     },
     "node_modules/@npmcli/template-oss": {
-      "version": "4.11.4",
-      "resolved": "https://registry.npmjs.org/@npmcli/template-oss/-/template-oss-4.11.4.tgz",
-      "integrity": "sha512-PtUacQfLt5yl+OuUb9XW9Bw3ZGMwDnV5dCbtUVFr4J+Ig5RVMyDjB0VmI3Uu4v9ntBNBINzvNBP1Hb3UCzoA4Q==",
+      "version": "4.12.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/template-oss/-/template-oss-4.12.0.tgz",
+      "integrity": "sha512-siPUfzR2EZXfOI98X/OfBa0OgVVeuWzV8Z5+DoziRIEr+pJVBY9tLcwE4oQd6idabUQQyc1DuCQ+OQ0B2loIZA==",
       "dev": true,
       "hasInstallScript": true,
       "dependencies": {
@@ -14941,7 +14941,7 @@
         "@npmcli/eslint-config": "^4.0.0",
         "@npmcli/mock-registry": "^1.0.0",
         "@npmcli/promise-spawn": "^6.0.2",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "http-proxy": "^1.18.1",
         "just-extend": "^6.2.0",
         "just-safe-set": "^4.2.1",
@@ -14996,7 +14996,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "benchmark": "^2.1.4",
         "chalk": "^4.1.0",
         "minify-registry-metadata": "^3.0.0",
@@ -15024,7 +15024,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "tap": "^16.3.4"
       },
       "engines": {
@@ -15041,7 +15041,7 @@
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
         "@npmcli/mock-registry": "^1.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "nock": "^13.3.0",
         "tap": "^16.3.4"
       },
@@ -15065,7 +15065,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "tap": "^16.3.4"
       },
       "engines": {
@@ -15092,7 +15092,7 @@
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
         "@npmcli/mock-registry": "^1.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "bin-links": "^4.0.1",
         "just-extend": "^6.2.0",
         "just-safe-set": "^4.2.1",
@@ -15111,7 +15111,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "tap": "^16.3.4"
       },
       "engines": {
@@ -15127,7 +15127,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "nock": "^13.3.0",
         "tap": "^16.3.4"
       },
@@ -15144,7 +15144,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "minipass": "^4.0.2",
         "nock": "^13.3.0",
         "tap": "^16.3.4"
@@ -15164,7 +15164,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "nock": "^13.3.0",
         "spawk": "^1.7.1",
         "tap": "^16.3.4"
@@ -15188,7 +15188,7 @@
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
         "@npmcli/mock-registry": "^1.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "lodash.clonedeep": "^4.5.0",
         "nock": "^13.3.0",
         "tap": "^16.3.4"
@@ -15205,7 +15205,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "nock": "^13.3.0",
         "tap": "^16.3.4"
       },
@@ -15222,7 +15222,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "nock": "^13.3.0",
         "tap": "^16.3.4"
       },
@@ -15242,7 +15242,7 @@
       },
       "devDependencies": {
         "@npmcli/eslint-config": "^4.0.0",
-        "@npmcli/template-oss": "4.11.4",
+        "@npmcli/template-oss": "4.12.0",
         "require-inject": "^1.4.4",
         "tap": "^16.3.4"
       },

package.json

@@ -194,7 +194,7 @@
     "@npmcli/git": "^4.0.1",
     "@npmcli/mock-registry": "^1.0.0",
     "@npmcli/promise-spawn": "^6.0.2",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "licensee": "^10.0.0",
     "nock": "^13.3.0",
     "npm-packlist": "^7.0.4",
@@ -248,7 +248,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "./scripts/template-oss/root.js"
   },
   "license": "Artistic-2.0",

smoke-tests/package.json

@@ -21,7 +21,7 @@
     "@npmcli/eslint-config": "^4.0.0",
     "@npmcli/mock-registry": "^1.0.0",
     "@npmcli/promise-spawn": "^6.0.2",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "http-proxy": "^1.18.1",
     "just-extend": "^6.2.0",
     "just-safe-set": "^4.2.1",
@@ -32,7 +32,7 @@
   "license": "ISC",
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "../scripts/template-oss/index.js"
   },
   "tap": {

workspaces/arborist/package.json

@@ -39,7 +39,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "benchmark": "^2.1.4",
     "chalk": "^4.1.0",
     "minify-registry-metadata": "^3.0.0",
@@ -98,7 +98,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "../../scripts/template-oss/index.js"
   }
 }

workspaces/config/package.json

@@ -33,7 +33,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "tap": "^16.3.4"
   },
   "dependencies": {
@@ -50,6 +50,6 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4"
+    "version": "4.12.0"
   }
 }

workspaces/libnpmaccess/package.json

@@ -17,7 +17,7 @@
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
     "@npmcli/mock-registry": "^1.0.0",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "nock": "^13.3.0",
     "tap": "^16.3.4"
   },
@@ -41,7 +41,7 @@
   ],
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "../../scripts/template-oss/index.js"
   },
   "tap": {

workspaces/libnpmdiff/package.json

@@ -42,7 +42,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "tap": "^16.3.4"
   },
   "dependencies": {
@@ -58,7 +58,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "../../scripts/template-oss/index.js"
   },
   "tap": {

workspaces/libnpmexec/package.json

@@ -52,7 +52,7 @@
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
     "@npmcli/mock-registry": "^1.0.0",
-    "@npmcli/template-oss": "4.11.4",
+    "@npmcli/template-oss": "4.12.0",
     "bin-links": "^4.0.1",
     "just-extend": "^6.2.0",
     "just-safe-set": "^4.2.1",
@@ -75,7 +75,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.11.4",
+    "version": "4.12.0",
     "content": "../../scripts/template-oss/index.js"
   }
 }