chore: streamline package publishing

.github/dependabot.yml

@@ -1,30 +1,30 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     schedule:
-      interval: "monthly"
+      interval: 'monthly'
     labels:
-      - "dependencies"
-      - "npm"
-      - "skip changelog"
+      - 'dependencies'
+      - 'npm'
+      - 'skip changelog'
     groups:
       production-dependencies:
-        dependency-type: "production"
+        dependency-type: 'production'
         update-types:
-          - "minor"
-          - "patch"
+          - 'minor'
+          - 'patch'
       dev-dependencies:
-        dependency-type: "development"
+        dependency-type: 'development'
         update-types:
-          - "minor"
-          - "patch"
+          - 'minor'
+          - 'patch'
     ignore:
       # We want @types/node to match the *lowest* version of node.js that we support
-      - dependency-name: "@types/node"
+      - dependency-name: '@types/node'
         update-types:
-          - "version-update:semver-major"
-          - "version-update:semver-minor"
+          - 'version-update:semver-major'
+          - 'version-update:semver-minor'
       # As a library, upgrading TypeScript and using new language features would
       # be a breaking change for users who have not yet upgraded their TS version
-      - dependency-name: "typescript"
+      - dependency-name: 'typescript'

.github/workflows/ci.yaml

@@ -25,7 +25,7 @@ jobs:
       - name: Run Linter
         run: npm run eslint
       - name: Run Formatter
-        run: npm run prettier
+        run: npm run prettier -- --check
 
   test:
     name: Test - ${{ matrix.node-version }}
@@ -62,10 +62,8 @@ jobs:
         run: npm ci
       - name: Build
         run: npm run build
-      - name: Extract API
-        run: npm run api:extract
       - name: Generate docs
-        run: npm run api:docs
+        run: npm run docs:ci
       - name: Ensure API and doc changes have been committed
         run: |
           git add --renormalize .

.github/workflows/publish.yaml

@@ -0,0 +1,45 @@
+name: Publish
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    name: Publish to NPM
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+          cache: npm
+      - run: npm ci
+      - run: npm run prettier -- --check
+      - run: npm run lint
+      - run: npm run build
+      - run: npm run docs:ci
+      - name: Validate up-to-date documentation
+        run: |
+          git add --renormalize .
+          if (( "$(git diff HEAD --ignore-space-at-eol --ignore-cr-at-eol | wc -l)" != 0 )); then
+            cat << EOF >> $GITHUB_STEP_SUMMARY
+          ### Detected uncommitted changes
+
+          \`\`\`shell
+          $(git diff HEAD)
+          \`\`\`
+          EOF
+            git diff HEAD
+            exit 1
+          fi
+
+      - run: npm test
+      - run: npm publish --provenance
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.prettierignore

@@ -1,2 +1,3 @@
 dist
 test
+api

CHANGELOG.md

@@ -1,4 +1,4 @@
 # Changelog
 
-All notable changes to this project can be found at on the [Releases](https://github.com/salesforce/tough-cookie/releases)
+All notable changes to this project can be found on the [GitHub Releases](https://github.com/salesforce/tough-cookie/releases)
 page.

README.md

@@ -22,12 +22,16 @@ yarn add tough-cookie
 import { Cookie, CookieJar } from 'tough-cookie'
 
 // parse a `Cookie` request header
-const reqCookies = 'ID=298zf09hf012fh2; csrf=u32t4o3tb3gg43; _gat=1'.split(';').map(Cookie.parse)
+const reqCookies = 'ID=298zf09hf012fh2; csrf=u32t4o3tb3gg43; _gat=1'
+  .split(';')
+  .map(Cookie.parse)
 // generate a `Cookie` request header
-const cookieHeader = reqCookies.map(cookie => cookie.cookieString()).join(';')
+const cookieHeader = reqCookies.map((cookie) => cookie.cookieString()).join(';')
 
 // parse a Set-Cookie response header
-const resCookie = Cookie.parse('foo=bar; Domain=example.com; Path=/; Expires=Tue, 21 Oct 2025 00:00:00 GMT')
+const resCookie = Cookie.parse(
+  'foo=bar; Domain=example.com; Path=/; Expires=Tue, 21 Oct 2025 00:00:00 GMT',
+)
 // generate a Set-Cookie response header
 const setCookieHeader = cookie.toString()
 
@@ -58,8 +62,14 @@ import { CookieJar } from 'tough-cookie'
 const cookieJar = new CookieJar() // uses the in-memory store by default
 
 // storing cookies with various SameSite attributes
-await cookieJar.setCookie('strict=authorized; SameSite=strict', 'http://example.com/index.html')
-await cookieJar.setCookie('lax=okay; SameSite=lax', 'http://example.com/index.html')
+await cookieJar.setCookie(
+  'strict=authorized; SameSite=strict',
+  'http://example.com/index.html',
+)
+await cookieJar.setCookie(
+  'lax=okay; SameSite=lax',
+  'http://example.com/index.html',
+)
 await cookieJar.setCookie('normal=whatever', 'http://example.com/index.html')
 
 // retrieving cookies using a SameSite context
@@ -105,7 +115,7 @@ You can define this functionality by passing in the `prefixSecurity` option to `
 import { CookieJar, MemoryCookieStore } from 'tough-cookie'
 
 const cookieJar = new CookieJar(new MemoryCookieStore(), {
-  prefixSecurity: 'silent'
+  prefixSecurity: 'silent',
 })
 
 // this cookie will be silently ignored since the url is insecure (http)

jest.config.ts

@@ -1,13 +1,13 @@
-import type { JestConfigWithTsJest } from "ts-jest";
+import type { JestConfigWithTsJest } from 'ts-jest'
 
 const config: JestConfigWithTsJest = {
   preset: 'ts-jest',
   testEnvironment: 'node',
   rootDir: './lib/',
   testPathIgnorePatterns: ['./lib/__tests__/data/'],
   fakeTimers: {
-    enableGlobally: true
-  }
+    enableGlobally: true,
+  },
 }
 
 export default config

lib/__tests__/cookieJar.spec.ts

@@ -34,6 +34,7 @@ import { CookieJar } from '../cookie/cookieJar'
 import type { SerializedCookieJar } from '../cookie/constants'
 import { MemoryCookieStore } from '../memstore'
 import { Store } from '../store'
+import { version } from '../version'
 
 // ported from:
 // - test/api_test.js (cookie jar tests)
@@ -977,7 +978,7 @@ describe('CookieJar', () => {
           prefixSecurity: 'silent',
           rejectPublicSuffixes: true,
           storeType: 'MemoryCookieStore',
-          version: 'tough-cookie@5.0.0',
+          version: `tough-cookie@${version}`,
         }
         expect(data).toEqual(expected)
       },

lib/__tests__/jarSerialization.spec.ts

@@ -36,10 +36,6 @@ import { Store } from '../store'
 import { version } from '../version'
 
 describe('cookieJar serialization', () => {
-  it('should use the expected version', () => {
-    expect(version).toBe('5.0.0')
-  })
-
   it('should provide the list of serialized properties available for a Cookie with `Cookie.serializableProperties`', () => {
     expect(Cookie.serializableProperties).toEqual([
       'key',

lib/__tests__/version.spec.ts

@@ -0,0 +1,8 @@
+import { version } from '../version'
+
+describe('version file', () => {
+  it('should have a valid semver version', () => {
+    expect(typeof version).toBe('string')
+    expect(version).toMatch(/^\d+?\.\d+?\.\d+?(?:-[\w.]+?)?$/)
+  })
+})

package.json

@@ -92,20 +92,22 @@
     "!__tests__"
   ],
   "scripts": {
-    "api:dev": "npm run build && npm run api:extract -- --local && npm run api:docs",
-    "api:docs": "api-documenter markdown --input-folder ./tmp --output-folder ./api/docs",
-    "api:extract": "api-extractor run --verbose",
+    "docs": "npm run build && npm run docs:ci",
+    "docs:ci": "npm run docs:extract -- --local && npm run docs:generate",
+    "docs:generate": "api-documenter markdown --input-folder ./tmp --output-folder ./api/docs",
+    "docs:extract": "api-extractor run --verbose",
     "build": "npm run clean && tsc",
     "clean": "rm -rf dist",
-    "version": "genversion --template version-template.ejs --force lib/version.ts && git add lib/version.ts",
+    "version:version-file": "genversion --template version-template.ejs --force lib/version.ts",
+    "version": "npm run version:version-file && npm run docs && git add ./lib/version.ts ./api/docs",
     "test": "npm run test:ts && npm run test:legacy",
     "test:ts": "jest",
     "test:legacy": "npm run build -- --declaration false && ./test/scripts/vows.js test/*_test.js",
     "typecheck": "tsc --noEmit",
     "cover": "jest --coverage",
     "lint": "eslint .",
     "eslint": "eslint .",
-    "prettier": "prettier '**/*.{json,ts,yaml,md}'",
+    "prettier": "prettier .",
     "format": "npm run eslint -- --fix"
   },
   "//": "We only support node 18+, but v16 still works. We won't block v16 until it becomes a burden.",