feat: update dependencies, include sourcemaps, update release process

.github/renovate.json

@@ -4,16 +4,24 @@
         "config:js-lib",
         ":semanticCommits",
         ":timezone(Europe/Prague)",
-        "schedule:monthly",
+        "schedule:earlyMondays",
         ":disableRateLimiting",
         ":label(dependencies)",
-        ":separateMultipleMajorReleases",
         "npm:unpublishSafe",
+        ":separateMultipleMajorReleases",
         "group:allNonMajor",
         "group:definitelyTyped",
         "group:jsTestNonMajor",
         "group:linters",
-        ":reviewer(samialdury)"
+        ":automergePr",
+        ":automergeRequireAllStatusChecks",
+        ":automergeDigest",
+        ":automergeMinor",
+        ":automergePatch",
+        ":automergeLinters",
+        ":automergeTesters",
+        ":automergeTypes"
     ],
-    "platformCommit": true
+    "platformCommit": true,
+    "platformAutomerge": true
 }

.github/workflows/ci.yaml

@@ -24,8 +24,8 @@ env:
 
 jobs:
     check:
-        runs-on: ubuntu-22.04
-        if: "!startsWith(github.event.head_commit.message, 'chore(release):')"
+        name: Check
+        runs-on: ubuntu-latest
         steps:
             - name: Checkout
               uses: actions/checkout@v3
@@ -44,27 +44,32 @@ jobs:
                   node-version: ${{ env.NODE_VERSION }}
                   cache: pnpm
 
-            - name: Install NPM dependencies
+            - name: Install npm dependencies
               timeout-minutes: 2
               run: |
-                  pnpm install --frozen-lockfile
+                  make install-ci
 
             - name: Check TypeScript
               timeout-minutes: 2
               run: |
-                  pnpm typecheck
+                  make typecheck
 
             - name: Bundle TypeScript
               timeout-minutes: 2
               run: |
-                  pnpm build
+                  make build
 
             - name: Run tests
               timeout-minutes: 2
               run: |
-                  pnpm test:ci
+                  make test-ci
 
-            - name: Check formatting & lint
+            - name: Check formatting
               timeout-minutes: 2
               run: |
-                  pnpm lint:ci
+                  make format-ci
+
+            - name: Check lint errors
+              timeout-minutes: 2
+              run: |
+                  make lint-ci

.github/workflows/release.yaml

@@ -2,9 +2,11 @@ name: Release
 
 on:
     workflow_dispatch:
-    push:
-        branches:
-            - 'main'
+        inputs:
+            acknowledge:
+                description: 'I understand that this action will publish a new NPM & GitHub release.'
+                required: true
+                type: boolean
 
 concurrency: release-${{ github.ref_name }}
 
@@ -14,12 +16,32 @@ env:
 
 jobs:
     release:
-        runs-on: ubuntu-22.04
-        if: startsWith(github.event.head_commit.message, 'chore(release):')
+        name: Release
+        if: ${{ inputs.acknowledge }}
+        runs-on: ubuntu-latest
+        permissions:
+            contents: write # to be able to publish a GitHub release
+            issues: write # to be able to comment on released issues
+            pull-requests: write # to be able to comment on released pull requests
+            id-token: write # to enable use of OIDC for npm provenance
         steps:
             - name: Checkout
               uses: actions/checkout@v3
               timeout-minutes: 2
+              with:
+                  token: ${{ secrets.BOT_PAT }}
+
+            - name: Import GPG key
+              uses: crazy-max/ghaction-import-gpg@v5
+              with:
+                  gpg_private_key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
+                  git_user_signingkey: true
+                  git_config_global: true
+                  git_commit_gpgsign: true
+                  git_tag_gpgsign: false
+                  git_push_gpgsign: false
+                  git_committer_name: ${{ secrets.BOT_USERNAME }}
+                  git_committer_email: ${{ secrets.BOT_EMAIL }}
 
             - name: Set up pnpm
               uses: pnpm/action-setup@v2
@@ -35,21 +57,39 @@ jobs:
                   cache: pnpm
                   cache-dependency-path: pnpm-lock.yaml
 
-            - name: Install NPM dependencies
+            - name: Get pnpm store directory
+              id: pnpm-store
               timeout-minutes: 2
               run: |
-                  pnpm install --frozen-lockfile
+                  echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+            - name: Restore pnpm cache
+              uses: actions/cache@v3
+              timeout-minutes: 2
+              with:
+                  path: ${{ steps.pnpm-store.outputs.STORE_PATH }}
+                  key: ${{ runner.os }}-node-${{ env.NODE_VERSION }}-pnpm-${{ env.PNPM_VERSION }}-store-${{ hashFiles('pnpm-lock.yaml') }}
+                  restore-keys: |
+                      ${{ runner.os }}-node-${{ env.NODE_VERSION }}-pnpm-${{ env.PNPM_VERSION }}-store-
 
-            - name: Build TypeScript
+            - name: Install npm dependencies
               timeout-minutes: 2
               run: |
-                  pnpm build
+                  make install-ci
 
-            - name: Create GitHub release and publish to NPM
-              uses: changesets/action@v1
+            - name: Bundle TypeScript
               timeout-minutes: 2
+              run: |
+                  make build
+
+            - name: Release to NPM & GitHub
+              timeout-minutes: 2
+              run: |
+                  make release
               env:
-                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-              with:
-                  publish: pnpm release
+                  GITHUB_TOKEN: ${{ secrets.BOT_PAT }}
+                  GIT_AUTHOR_NAME: ${{ secrets.BOT_USERNAME }}
+                  GIT_AUTHOR_EMAIL: ${{ secrets.BOT_EMAIL }}
+                  GIT_COMMITTER_NAME: ${{ secrets.BOT_USERNAME }}
+                  GIT_COMMITTER_EMAIL: ${{ secrets.BOT_EMAIL }}