From afc08a9c50259e37f8ccd22669a40a15450e3058 Mon Sep 17 00:00:00 2001 From: Jono Brandel Date: Fri, 10 Apr 2026 15:11:47 -0700 Subject: [PATCH 1/2] Use npm ci and pin npm in workflows Replace npm install with npm ci in CI workflows to ensure deterministic, faster installs (copilot-setup-steps.yml and lint.yml). Also pin the global npm version to 11.5.1 in publish.yml instead of installing the latest to avoid unexpected changes from rolling npm releases. --- .github/workflows/copilot-setup-steps.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/publish.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 772977a0..c0c61e8d 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -29,7 +29,7 @@ jobs: cache: "npm" - name: Install dependencies - run: npm install + run: npm ci - name: Build run: npm run build diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 88d8844e..6f7e6eed 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -11,6 +11,6 @@ jobs: # checkout@v5 - uses: jonobr1/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 - name: Install modules - run: npm install + run: npm ci - name: Run ESLint run: npm run lint diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 0a552ea4..2ed078e1 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -24,7 +24,7 @@ jobs: # Ensure npm 11.5.1 or later is installed - name: Update npm - run: npm install -g npm@latest + run: npm install -g npm@11.5.1 - run: npm ci - run: npm run build --if-present # - run: npm test From 7da9eced85ea29a44b7cb02cdafc7245086cf496 Mon Sep 17 00:00:00 2001 From: Jono Brandel Date: Fri, 10 Apr 2026 15:17:51 -0700 Subject: [PATCH 2/2] Add CODEOWNERS to require @jonobr1 review Add a .github/CODEOWNERS file that designates @jonobr1 as the owner for all files, ensuring the project maintainer is requested for review on pull requests. This enforces a single-point review policy for changes. --- .github/CODEOWNERS | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 00000000..4af09b82 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,4 @@ +# CODEOWNERS — all files require review from the project maintainer. +# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners + +* @jonobr1 \ No newline at end of file