Merge pull request #234 from jaredwray/chore-upgrading-workflows-to-u…

…se-pnpm-and-updating-security-policy

chore: upgrading workflows to use pnpm and updating security policy

.github/workflows/code-coverage.yml

@@ -24,13 +24,13 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Install Dependencies
-      run: npm install
+      run: npm install -g pnpm && pnpm install
 
-    - name: Compile    
-      run: npm run compile
+    - name: Build    
+      run: pnpm build
 
     - name: Testing    
-      run: npm run test
+      run: pnpm test
 
     - name: Code Coverage
       uses: codecov/codecov-action@v4

.github/workflows/deploy-site.yml

@@ -25,13 +25,13 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Install Dependencies  
-      run: npm install
+      run: npm install -g pnpm && pnpm install
 
-    - name: Build Website
-      run: npm run build
+    - name: Build
+      run: pnpm build
 
     - name: Build Website
-      run: npm run website:build
+      run: pnpm website:build
 
     - name: Publish to Cloudflare Pages
       uses: cloudflare/pages-action@1

.github/workflows/release.yaml

@@ -22,13 +22,13 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Install Dependencies
-      run: npm install
+      run: npm install -g pnpm && pnpm install
 
-    - name: Compile    
-      run: npm run compile
+    - name: Build    
+      run: pnpm build
 
     - name: Testing    
-      run: npm run test
+      run: pnpm test
 
     - name: Publish
       run: |

.github/workflows/tests.yml

@@ -24,10 +24,10 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Install Dependencies
-      run: npm install
+      run: npm install -g pnpm && pnpm install
 
-    - name: Compile    
-      run: npm run compile
+    - name: Build    
+      run: pnpm build
 
     - name: Testing    
-      run: npm run test
+      run: pnpm test

SECURITY.md

@@ -1,20 +1,5 @@
 # Security Policy
 
-## Supported Versions
+We update and maintain this code on a regular basis. If you find any any issues please create an issue and even better a pull request that details the security vulnerability.
 
-Use this section to tell people about which versions of your project are
-currently being supported with security updates.
-
-| Version | Supported          |
-| ------- | ------------------ |
-| 3.x.x   | :white_check_mark: |
-| 2.x.x   | :x:				   |
-| 1.x.x   | :x:                |
-
-## Reporting a Vulnerability
-
-Use this section to tell people how to report a vulnerability.
-
-Tell them where to go, how often they can expect to get an update on a
-reported vulnerability, what to expect if the vulnerability is accepted or
-declined, etc.
+As always, please upgrade to that latest version as that is the best policy to minimize the security risk.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "ecto",
-  "version": "4.1.4",
+  "version": "4.1.5",
   "description": "Modern Template Consolidation Engine for EJS, Markdown, Pug, Nunjucks, Liquid, and Handlebars",
   "type": "module",
   "main": "./dist/ecto.js",
@@ -21,9 +21,8 @@
     "watch": "tsc -w -p .",
     "clean": "rimraf ./dist yarn.lock package-lock.json pnpm-lock.yaml ./coverage ./node_modules ./site/readme.md ./dist-site",
     "test": "xo --fix && vitest run --coverage",
-    "compile": "rimraf ./dist && tsup src/ecto.ts --format esm --dts --clean",
-    "build": "rimraf ./dist && npm run compile",
-    "prepare": "rimraf ./dist && npm run compile",
+    "build": "rimraf ./dist && tsup src/ecto.ts --format esm --dts --clean",
+    "prepare": "npm run build",
     "website:build": "rimraf ./site/readme.md && npx -y docula build -s ./site -o ./dist-site",
     "website:serve": "rimraf ./site/readme.md && npx -y docula serve -s ./site -o ./dist-site"
   },