Update to Node 20 and make ESM-only

.github/workflows/check-pr-reviews.yml

@@ -8,9 +8,6 @@ jobs:
   checkPrReviews:
     runs-on: ubuntu-latest
     name: Check PR Reviews
-    strategy:
-      matrix:
-        node-version: [18.x]
     steps:
       - name: Perform Check of PR Reviews
         uses: checkdigit/github-actions/check-pr-reviews@main

.github/workflows/check-published-scheduled.yml

@@ -9,17 +9,14 @@ jobs:
   checkPublished:
     runs-on: ubuntu-latest
     name: Check Published
-    strategy:
-      matrix:
-        node-version: [18.x]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+      - name: Install Node.js
+        uses: actions/setup-node@v4
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
       - name: Check Published
         uses: checkdigit/github-actions/check-published@main

.github/workflows/ci.yml

@@ -11,22 +11,16 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 21.x]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
-      - name: Check Label
-        uses: checkdigit/github-actions/check-label@main
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Install dependencies
         run: npm ci --ignore-scripts
-      - name: Audit Signatures
-        run: npm audit signatures
       - name: Compile
         run: npm run ci:compile
       - name: Check Code Style
@@ -41,24 +35,18 @@ jobs:
     name: Branch Build
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 21.x]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
-      - name: Check Label
-        uses: checkdigit/github-actions/check-label@main
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Install dependencies
         run: npm ci --ignore-scripts
-      - name: Audit Signatures
-        run: npm audit signatures
       - name: Compile
         run: npm run ci:compile
       - name: Check Code Style

.github/workflows/codeql-analysis.yml

@@ -22,10 +22,10 @@ jobs:
         language: ['javascript']
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3

.github/workflows/coverage.yml

@@ -12,17 +12,14 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     name: Coverage
-    strategy:
-      matrix:
-        node-version: [18.x]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+      - name: Install Node.js
+        uses: actions/setup-node@v4
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version: '20.x'
           cache: 'npm'
       - name: Install dependencies
         run: npm ci --ignore-scripts

.github/workflows/publish-beta.yml

@@ -7,26 +7,32 @@ on:
 
 jobs:
   publishBeta:
-    runs-on: ubuntu-latest
     name: Publish Beta
-    strategy:
-      matrix:
-        node-version: [18.x]
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout Code
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
-      - name: Install dependencies
+      - name: Check Label
+        uses: checkdigit/github-actions/check-label@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Check Imports
+        uses: checkdigit/github-actions/check-imports@main
+      - name: Install latest npm
+        run: npm install -g npm@latest
+      - name: Install Dependencies
         run: npm ci --ignore-scripts
       - name: Audit Signatures
         run: npm audit signatures
       - name: Run Test
-        run: npm run test
+        run: npm run ci:test
       - name: Prepare Beta
         id: prepare-beta
         uses: checkdigit/github-actions/prepare-beta@main

.github/workflows/publish.yml

@@ -7,20 +7,25 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     name: Publish to NPM
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - name: Checkout Code
+        uses: actions/checkout@v4
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
-      - name: Install dependencies
+      - name: Install latest npm
+        run: npm install -g npm@latest
+      - name: Install Dependencies
         run: npm ci --ignore-scripts
       - name: Audit Signatures
         run: npm audit signatures
-      - name: Run Test
-        run: npm run test
       - name: Publish
-        run: npm publish
+        run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN_PUBLISH }}

.gitignore

@@ -1,45 +1,6 @@
 .DS_Store
-
-# Logs
-logs
-*.log
-npm-debug.log*
-
-# Runtime data
-pids
-*.pid
-*.seed
-
-# Directory for instrumented libs generated by jscoverage/JSCover
-lib-cov
-
-# IntelliJ
-.idea
-
-# Coverage directory used by tools like istanbul
 coverage
-.nyc_output
-
-# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)
-.grunt
-
-# node-waf configuration
-.lock-wscript
-
-# Build directory
 build
 dist-*
-
-# Dependency directory
-# https://www.npmjs.org/doc/misc/npm-faq.html#should-i-check-my-node_modules-folder-into-git
 node_modules
-
-# Optional npm cache directory
-.npm
-.npmignore
-
-# Optional REPL history
-.node_repl_history
-
-# rollup
-.rpt2_cache
+.idea

LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License
 
-Copyright (c) 2021-2023 Check Digit, LLC
+Copyright (c) 2021-2024 Check Digit, LLC
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

SECURITY.md

@@ -6,8 +6,8 @@ These versions of `@checkdigit/retry` are currently being supported with securit
 
 | Version | Supported          |
 | ------- | ------------------ |
-| \>= 3.0 | :white_check_mark: |
-| \< 3.0  | :x:                |
+| \>= 4.0 | :white_check_mark: |
+| \< 4.0  | :x:                |
 
 ## Reporting a Vulnerability