Skip to content

Update the packages, rewrite the README, and use NPM Trusted Publishing. No functionality changes - #12

Merged
Marko19907 merged 7 commits into
mainfrom
chore/11-dependency-updates-security
Dec 28, 2025
Merged

Update the packages, rewrite the README, and use NPM Trusted Publishing. No functionality changes#12
Marko19907 merged 7 commits into
mainfrom
chore/11-dependency-updates-security

Conversation

@Marko19907

Copy link
Copy Markdown
Owner

No description provided.

@Marko19907
Marko19907 requested a review from Copilot December 28, 2025 12:22
@Marko19907 Marko19907 self-assigned this Dec 28, 2025
@Marko19907 Marko19907 linked an issue Dec 28, 2025 that may be closed by this pull request

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates package dependencies, rewrites the README with improved messaging, and implements NPM Trusted Publishing for secure package releases. The changes modernize the development toolchain while maintaining backward compatibility (no functionality changes).

Key Changes

  • Updated all dev dependencies to latest versions (changesets, vitest, coverage, tsup, typescript, prettier)
  • Updated the esm-seedrandom dependency to newer ESM-compatible version
  • Rewrote README to emphasize design-first approach and HSL color generation benefits
  • Configured GitHub Actions to use NPM Trusted Publishing (removing manual token requirement)
  • Updated GitHub Actions workflows with newer action versions and Node.js version

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updated all dependencies to latest versions (changesets, vitest, tsup, typescript, prettier)
yarn.lock Auto-generated lockfile reflecting all updated dependencies
README.md Comprehensive rewrite emphasizing design-first HSL approach, visual quality, and deterministic color generation
.github/workflows/main.yml Updated to use newer GitHub Actions versions and Node.js 24
.github/workflows/publish.yml Added Trusted Publishing permissions and updated action versions
.changeset/calm-hounds-switch.md Documented the patch-level changes

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@Marko19907
Marko19907 merged commit 968e642 into main Dec 28, 2025
7 checks passed
@Marko19907
Marko19907 deleted the chore/11-dependency-updates-security branch December 28, 2025 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Vulnerabilities in esm-seedrandom

2 participants