fix: dependabot and ci updates (#164)

* fix: dependabot and ci updates

* ci: update ensure-npm-build.yml

* Update ensure-npm-build.yml

.github/dependabot.yml

@@ -1,35 +1,48 @@
 version: 2
 updates:
-  # Maintain dependencies for npm
-  - package-ecosystem: "npm"
-    # Look for `package.json` and `package-lock.json` files in the root directory
+  # Maintain dependencies for Composer
+  - package-ecosystem: "composer"
     directory: "/"
-    # Check for updates weekly
     schedule:
       interval: "weekly"
     allow:
-      # Allow direct updates only (for packages named in package.json)
       - dependency-type: "direct"
-    # Allow up to 10 open pull requests for npm dependencies
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 5
+    versioning-strategy: "increase-if-necessary"
+    ignore:
+      - dependency-name: "*"
+        update-types: [ "version-update:semver-major" ]
+    groups:
+      composer-dependencies:
+        dependency-type: "production"
+      composer-dev-dependencies:
+        dependency-type: "development"
 
-  # Maintain dependencies for Composer
-  - package-ecosystem: "composer"
-    # Look for `composer.json` and `composer.lock` files in the root directory
+  # Maintain dependencies for npm
+  - package-ecosystem: "npm"
     directory: "/"
-    # Check for updates weekly
     schedule:
       interval: "weekly"
     allow:
-      # Allow direct updates only (for packages named in composer.json)
       - dependency-type: "direct"
-    # Allow up to 10 open pull requests for composer dependencies
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 5
+    versioning-strategy: "increase-if-necessary"
+    ignore:
+      - dependency-name: "*"
+        update-types: [ "version-update:semver-major" ]
+    groups:
+      npm-dependencies:
+        dependency-type: "production"
+      npm-dev-dependencies:
+        dependency-type: "development"
 
+  # Maintain dependencies for GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
-    allow:
-      - dependency-type: "direct"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 5
+    groups:
+      all-github-actions:
+        patterns:
+          - ".*"

.github/workflows/create-release.yml

@@ -0,0 +1,11 @@
+name: Prepare Release 🚀
+
+on:
+  push:
+    branches:
+      - dev
+
+jobs:
+  deploy:
+    uses: pressbooks/reusable-workflows/.github/workflows/prepare-release.yml@main
+    secrets: inherit

.github/workflows/ensure-npm-build.yml

@@ -0,0 +1,12 @@
+name: Npm build ⚙️
+
+on:
+  pull_request:
+    branches: [dev]
+    paths:
+      - "assets/**/*"
+
+jobs:
+  update-npm-build:
+    if: ${{ github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]' }}
+    uses: pressbooks/reusable-workflows/.github/workflows/npm-build.yml@main

.github/workflows/tests.yml

@@ -0,0 +1,31 @@
+name: Run Tests 🧪
+
+on:
+  push:
+    branches:
+      - dev
+  pull_request:
+    branches:
+      - dev
+  workflow_dispatch:
+
+jobs:
+  plugin-tests:
+    uses: pressbooks/reusable-workflows/.github/workflows/pb-plugin-tests.yml@main
+    secrets: inherit
+    with:
+      requires_pressbooks: true
+  trigger_bedrock_updates:
+    needs: plugin-tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Bedrock Updates
+        if: github.ref == 'refs/heads/dev'
+        uses: pressbooks/composer-autoupdate-bedrock@main
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          AWS_SNS_ARN_DEV: ${{ secrets.AWS_SNS_ARN_DEV }}
+          AWS_SNS_ARN_STAGING: ${{ secrets.AWS_SNS_ARN_STAGING }}
+          INPUT_TRIGGERED_BY: ${{ github.repository }}
+          REF: ${{ github.ref }}

.github/workflows/update-mo.yml

@@ -1,12 +1,12 @@
-name: Update .mo files
+name: Update .mo files 🌐
 
 on:
   pull_request:
-    branches: [ dev ]
+    branches: [dev]
     paths:
-      - 'languages/*.po'
+      - "languages/*.po"
   workflow_dispatch:
 
 jobs:
   update-mo-files:
-    uses: pressbooks/reusable-workflows/.github/workflows/update-mo.yml@dev
+    uses: pressbooks/reusable-workflows/.github/workflows/update-mo.yml@main

.github/workflows/update-pot.yml

@@ -1,41 +1,19 @@
-name: Update POT file
+name: Update .pot file 🌐
 
 on:
-  push:
-    branches:
-    - dev
+  pull_request:
+    branches: [dev]
     paths:
-    - '**.php'
-    - '**.js'
+      - "**.php"
+      - "**.js"
   workflow_dispatch:
 
 jobs:
-  update-pot:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-    - name: Setup PHP with tools
-      uses: shivammathur/setup-php@v2
-      with:
-        php-version: '8.1'
-        tools: composer, wp-cli/wp-cli-bundle
-    - name: Update POT file
-      run: wp i18n make-pot . languages/pressbooks-cas-sso.pot --domain=pressbooks-cas-sso --slug=pressbooks-cas-sso --package-name="Pressbooks CAS Single Sign-On" --headers="{\"Report-Msgid-Bugs-To\":\"https://github.com/pressbooks/pressbooks-cas-sso/issues\"}"
-    - name: Create Pull Request for POT file
-      id: cprpot
-      uses: peter-evans/create-pull-request@v5
-      with:
-        token: ${{ secrets.PAT_FOR_GITHUB_ACTIONS }}
-        labels: automerge-pot
-        commit-message: 'chore(l10n): update pot file'
-        title: 'chore(l10n): update pot file'
-        body: 'This pull request updates the POT file for this plugin.'
-        branch: chore/update-pot-file
-    - name: Merge pull request with updated POT file
-      if: ${{ steps.cprpot.outputs.pull-request-number }}
-      uses: "pascalgn/[email protected]"
-      env:
-        GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-        MERGE_LABELS: automerge-pot
-        MERGE_METHOD: squash
-        PULL_REQUEST: "${{ steps.cprpot.outputs.pull-request-number }}"
+  update-pot-file:
+    uses: pressbooks/reusable-workflows/.github/workflows/update-pot.yml@main
+    secrets: inherit
+    with:
+      domain: "pressbooks-cas-sso"
+      slug: "pressbooks-cas-sso"
+      package_name: "Pressbooks CAS SSO"
+      headers: '{"Report-Msgid-Bugs-To": "https://github.com/pressbooks/pressbooks-cas-sso/issues"}'

.nvmrc

@@ -1 +1 @@
-v18
+v20

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "2.4.0"
+}