chore(deps): upgrade yarn (#430)

* chore(deps): upgrade yarn

* chore(ci): enable corepack

.github/workflows/pr.yml

@@ -24,9 +24,9 @@ jobs:
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           always-auth: true
-          node-version-file: '.nvmrc'
-          registry-url: 'https://registry.npmjs.org'
-          scope: '@ivuorinen'
+          node-version-file: ".nvmrc"
+          registry-url: "https://registry.npmjs.org"
+          scope: "@ivuorinen"
 
       - name: Cache Node Modules
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
@@ -35,6 +35,11 @@ jobs:
           path: node_modules
           key: node-modules-${{ hashFiles('**/yarn.lock') }}
 
+      - name: Enable corepack
+        id: corepack
+        shell: bash
+        run: corepack enable
+
       - name: Install Dependencies
         if: steps.cache.outputs.cache-hit != 'true'
         run: yarn install

.github/workflows/publish.yml

@@ -30,11 +30,10 @@ jobs:
     needs:
       - Linter
     permissions:
-      statuses: write
-      contents: write
-      packages: write
-      issues: write
-      pull-requests: write
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for trusted publishing and npm provenance
 
     steps:
       - name: Checkout
@@ -45,26 +44,18 @@ jobs:
       - name: Setup Node.js Environment
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          always-auth: true
           node-version-file: ".nvmrc"
           registry-url: "https://registry.npmjs.org"
           scope: "@ivuorinen"
 
-      - name: Cache Node Modules
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
-        id: cache
-        with:
-          path: node_modules
-          key: node-modules-${{ hashFiles('**/yarn.lock') }}
+      - name: Install dependencies
+        run: yarn
 
-      - name: Install Dependencies
-        shell: bash
-        if: steps.cache.outputs.cache-hit != 'true'
-        run: yarn install
+      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+        run: yarn npm audit --environment production
 
       - name: Release
-        shell: bash
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: yarn run semantic-release
+        run: yarn semantic-release

.gitignore

@@ -13,3 +13,5 @@ packages/**/.*.config.*
 !packages/prettier-config/.prettierrc.json
 !packages/release-config/.releaserc.json
 !packages/stylelint-config/.stylelintrc.json
+.yarn
+CLAUDE.md

.yarnclean

@@ -0,0 +1,45 @@
+# test directories
+__tests__
+test
+tests
+powered-test
+
+# asset directories
+docs
+doc
+website
+images
+assets
+
+# examples
+example
+examples
+
+# code coverage directories
+coverage
+.nyc_output
+
+# build scripts
+Makefile
+Gulpfile.js
+Gruntfile.js
+
+# configs
+appveyor.yml
+circle.yml
+codeship-services.yml
+codeship-steps.yml
+wercker.yml
+.tern-project
+.gitattributes
+.editorconfig
+.*ignore
+.eslintrc
+.jshintrc
+.flowconfig
+.documentup.json
+.yarn-metadata.json
+.travis.yml
+
+# misc
+*.md

.yarnrc.yml

@@ -0,0 +1 @@
+nodeLinker: node-modules

package.json

@@ -39,25 +39,26 @@
     "url": "https://github.com/ivuorinen/base-configs.git"
   },
   "scripts": {
-    "eslint:fix": "eslint '**/*.{js,tsx,ts,mjs,cjs}' --fix",
-    "eslint:report": "eslint '**/*.{js,tsx,ts,mjs,cjs}'",
-    "fix": "run-s prettier:fix eslint:fix markdownlint:fix",
-    "markdownlint:fix": "markdownlint '**/*.md' --fix",
-    "markdownlint:report": "markdownlint '**/*.md'",
-    "prettier:fix": "prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
-    "prettier:report": "prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
+    "commitlint": "./node_modules/.bin/commitlint --from HEAD~1 --to HEAD --verbose",
+    "eslint:fix": "./node_modules/.bin/eslint '**/*.{js,tsx,ts,mjs,cjs}' --fix",
+    "eslint:report": "./node_modules/.bin/eslint '**/*.{js,tsx,ts,mjs,cjs}'",
+    "fix": "./node_modules/.bin/run-s prettier:fix eslint:fix markdownlint:fix",
+    "markdownlint:fix": "./node_modules/.bin/markdownlint '**/*.md' --fix",
+    "markdownlint:report": "./node_modules/.bin/markdownlint '**/*.md'",
+    "prettier:fix": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
+    "prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
   },
   "devDependencies": {
-    "@ivuorinen/browserslist-config": "^0.4.4",
-    "@ivuorinen/commitlint-config": "^0.3.8",
-    "@ivuorinen/eslint-config": "^0.5.12",
-    "@ivuorinen/markdownlint-config": "^0.3.15",
-    "@ivuorinen/prettier-config": "^0.3.8",
-    "@ivuorinen/semantic-release-config": "^0.3.9",
+    "@ivuorinen/browserslist-config": "^0.4.19",
+    "@ivuorinen/commitlint-config": "^0.3.12",
+    "@ivuorinen/eslint-config": "^0.5.13",
+    "@ivuorinen/markdownlint-config": "^0.3.16",
+    "@ivuorinen/prettier-config": "^0.3.12",
+    "@ivuorinen/semantic-release-config": "^0.3.18",
     "@types/node": "*",
     "npm-run-all": "^4.1.5",
-    "simple-git-hooks": "^2.8.1",
+    "simple-git-hooks": "^2.13.1",
     "typescript": ">=4.2.0"
   },
-  "packageManager": "yarn@1.22.22+sha256.c17d3797fb9a9115bf375e31bfd30058cac6bc9c3b8807a3d8cb2094794b51ca"
+  "packageManager": "yarn@4.12.0"
 }