chore: update upstream to v8.0.0

.github/project-workflows/sync-with-template.yml

@@ -67,7 +67,7 @@ jobs:
           echo "UPDATE_FROM_TEMPLATE_PAT secret not found. Please create a fine-grained Personal Access Token following the instructions in the workflow file."
           exit 1
       - name: Checkout project repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           path: project
@@ -120,7 +120,7 @@ jobs:
           sudo apt install wiggle
       - name: Checkout update release of template
         if: ${{ env.BRANCH_EXISTS == 'false' }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: ${{ env.TEMPLATE_REPOSITORY }}
           ref: ${{ env.TEMPLATE_UPDATE_VERSION }}

.github/scripts/expo-doctor.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+# Run expo-doctor and capture output and exit code
+output=$(npx expo-doctor@latest 2>&1)
+exit_code=$?
+
+# Output file location
+output_file=".expo/expo-doctor.md"
+{
+  # Add summary based on exit code
+  if [ $exit_code -eq 0 ]; then
+    echo "✅ **Good news!** We ran Expo Doctor for this PR and everything looks good, Great job!" > "$output_file"
+  else
+    echo "❌ **Action Required:**  We ran Expo Doctor for this PR and found some issues that need to be addressed. Please review the complete report below 👇" > "$output_file"
+    echo >> "$output_file"  # Add blank line
+    echo "\`\`\`shell" >> "$output_file"
+    echo "$output" >> "$output_file"
+    echo "\`\`\`" >> "$output_file"
+  fi
+}
+
+# Show original output in terminal
+echo "$output"
+
+# Return the original exit code
+exit $exit_code

.github/workflows/check-merge-conflicts.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Check for merge conflicts

.github/workflows/compress-images.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Compress Images

.github/workflows/deploy-cli.yml

@@ -48,7 +48,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}
         run: echo "GH_TOKEN=${GH_TOKEN}" >> $GITHUB_ENV
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_TOKEN }}

.github/workflows/e2e-android-eas-build.yml

@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.github/workflows/e2e-android-maestro.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.github/workflows/e2e-android.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
@@ -52,7 +52,7 @@ jobs:
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.github/workflows/eas-build.yml

@@ -112,7 +112,7 @@ jobs:
           token: ${{ secrets.EXPO_TOKEN }}
 
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ secrets.NEW_VERSION_NUMBER_PAT }}

.github/workflows/expo-doctor.yml

@@ -23,19 +23,35 @@ on:
       - 'package.json'
       - 'pnpm-lock.yaml'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   doctor:
     name: Expo Doctor (expo)
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: 📦 Setup Node + PNPM + install deps
         uses: ./.github/actions/setup-node-pnpm-install
 
       - name: 🚑 Run Doctor Checks
-        run: rm -rf ios android && pnpm run doctor ## apprently the new update of expo will break if you already have ios and android folders in your project as they will show up a eas warning
+        run: |
+          chmod +x .github/scripts/expo-doctor.sh
+          .github/scripts/expo-doctor.sh
+
+      - name: Add doctor report as comment on PR
+        if: github.event_name == 'pull_request' && always()
+        uses: marocchino/sticky-pull-request-comment@v2
+        with:
+          header: expo-doctor
+          path: .expo/expo-doctor.md

.github/workflows/lint-ts.yml

@@ -18,6 +18,10 @@ on:
   pull_request:
     types: [opened, synchronize]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   lint:
     name: Lint TS (eslint, prettier)
@@ -28,7 +32,7 @@ jobs:
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.github/workflows/new-template-version.yml

@@ -61,7 +61,7 @@ jobs:
           echo "NEW_TEMPLATE_VERSION_PAT secret not found. Please create a fine-grained Personal Access Token following the instructions in the workflow file."
           exit 1
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ secrets.NEW_TEMPLATE_VERSION_PAT }}

.github/workflows/sonar.yml

@@ -16,15 +16,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: 📦 Setup Node + PNPM + install deps
         uses: ./.github/actions/setup-node-pnpm-install
 
       - name: Run Tests
-        run: export NODE_OPTIONS=--experimental-vm-modules && pnpm test:ci
+        run: pnpm test:ci
 
       - name: SonarQube Scan
         uses: sonarsource/sonarqube-scan-action@master

.github/workflows/stale.yml

@@ -4,6 +4,10 @@ on:
   schedule:
     - cron: '0 0 * * *'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   stale:
     runs-on: ubuntu-latest

.github/workflows/sync-with-upstream.yml

@@ -60,7 +60,7 @@ jobs:
           echo "UPDATE_FROM_UPSTREAM_PAT secret not found. Please create a fine-grained Personal Access Token following the instructions in the workflow file."
           exit 1
       - name: Checkout template repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ secrets.UPDATE_FROM_UPSTREAM_PAT }}

.github/workflows/test.yml

@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: 📦 Checkout project repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0