chore: Modernise tooling (#117)

Author: franky47

.github/workflows/cd.yml

@@ -0,0 +1,64 @@
+name: CI/CD
+
+on:
+  push:
+    branches:
+      - main
+      - beta
+      - next
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+env:
+  FORCE_COLOR: 3 # Display chalk colors
+
+jobs:
+  ci:
+    name: CI
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
+        with:
+          node-version-file: .node-version
+          cache: pnpm
+      - name: Install dependencies
+        run: pnpm install
+      - name: Run integration tests
+        run: pnpm run ci
+      - uses: 47ng/actions-slack-notify@main
+        name: Notify on Slack
+        if: always()
+        with:
+          status: ${{ job.status }}
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+
+  cd:
+    name: Deployment
+    runs-on: ubuntu-24.04-arm
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for NPM provenance / trusted publishing
+    needs: [ci]
+    if: ${{ github.ref_name == 'main' || github.ref_name == 'beta' }}
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
+        with:
+          node-version-file: .node-version
+          cache: pnpm
+      - name: Install dependencies
+        run: pnpm install --ignore-scripts --frozen-lockfile
+      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+        run: npm audit signatures
+      - name: Build package
+        run: pnpm build
+      - name: Semantic Release
+        run: ./node_modules/.bin/semantic-release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/ci-cd.yml

@@ -15,29 +15,21 @@ jobs:
       contains(github.event.pull_request.labels.*.name, 'deploy:preview')
     runs-on: ubuntu-24.04-arm
     steps:
-      - id: yarn-cache
-        name: Get Yarn cache path
-        run: echo "::set-output name=dir::$(yarn cache dir)"
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
         with:
-          node-version: lts/*
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809
-        name: Load Yarn cache
-        with:
-          path: ${{ steps.yarn-cache.outputs.dir }}
-          key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-yarn-
-      - run: yarn install --ignore-scripts
-        name: Install dependencies
-      - run: yarn build
-        name: Build package
+          node-version-file: .node-version
+          cache: pnpm
+      - name: Install dependencies
+        run: pnpm install --ignore-scripts --frozen-lockfile
+      - name: Build package
+        run: pnpm build
       - name: Set package version
         run: |
           npm pkg set version=0.0.0-preview.${{ github.event.pull_request.head.sha }}
           echo "::notice title=Install (PR)::npm i https://pkg.pr.new/prisma-field-encryption@${{ github.event.pull_request.number }}"
           echo "::notice title=Install (SHA)::npm i https://pkg.pr.new/prisma-field-encryption@${{ github.event.pull_request.head.sha }}"
           echo "::notice title=Version::0.0.0-preview.${{ github.event.pull_request.head.sha }}"
       - name: Publish to pkg.pr.new
-        run: npx pkg-pr-new publish --compact --no-template
+        run: pnpx pkg-pr-new publish --compact --no-template --packageManager=pnpm --pnpm

.github/workflows/ci.yml

@@ -1,4 +1,4 @@
 #!/bin/sh
 . "$(dirname "$0")/_/husky.sh"
 
-yarn commitlint --edit $1
+pnpm commitlint --edit $1

.github/workflows/pkg.pr.new.yml

@@ -0,0 +1 @@
+24.11.0

.husky/commit-msg

@@ -0,0 +1,16 @@
+{
+  "branches": [
+    "+([0-9])?(.{+([0-9]),x}).x",
+    "main",
+    "next",
+    "next-major",
+    {
+      "name": "beta",
+      "prerelease": true
+    },
+    {
+      "name": "alpha",
+      "prerelease": true
+    }
+  ]
+}

.husky/pre-push

@@ -3,16 +3,15 @@
 ## Getting Started
 
 1. Fork the repository & clone your fork
-2. Install dependencies with `yarn install` _(uses Yarn v1)_
-3. Build the sources with `yarn build`
+2. Install dependencies with `pnpm install`
+3. Build the sources with `pnpm build`
 
 ## Running tests
 
-1. Run `yarn test` to run all tests. This includes:
+1. Run `pnpm test` to run all tests. This includes:
 
-- Unit tests (`yarn test:unit`)
-- Typechecking (`yarn test:types`)
-- Integration tests (`yarn test:integration`)
+- Typechecking (`pnpm test:types`)
+- Runtime tests (`pnpm test:runtime`) - runs both unit and integration tests
 
 The [integration test suite](./src/tests/integration.test.ts) runs against a local SQLite database.
 It is copied from `./prisma/db.test.sqlite` to `./prisma/db.integration.sqlite` before each test runs.