Release 11.13.0

.github/renovate.json5

@@ -1,4 +1,5 @@
 {
+  repositories: ['simple-icons/simple-icons-font'],
   extends: [
     'config:base',
 
@@ -9,6 +10,15 @@
   // Disable dependency dashboard
   dependencyDashboard: false,
 
+  // Use our labelling system
+  labels: ['dependencies'],
+
+  // We generally always want the major version
+  separateMajorMinor: false,
+
+  // We manually update digest dependencies (eg. hashes in Github actions)
+  digest: { enabled: false },
+
   // We will keep simple-icons up-to-date separately from renovate
   ignoreDeps: ['simple-icons'],
 
@@ -20,17 +30,5 @@
 
     // Explicitly enable lockfile maintenance
     enabled: true,
-
-    // This schedule should be the same as the general schedule!
-    schedule: 'on the 2nd and 4th day instance on sunday after 11pm',
   },
-
-  // Use our labelling system
-  labels: ['dependencies'],
-
-  // Schedule the PRs to interleave with our release schedule
-  schedule: 'on the 2nd and 4th day instance on sunday after 11pm',
-
-  // We generally always want the major version
-  separateMajorMinor: false,
 }

.github/workflows/auto-release.yml

@@ -8,9 +8,6 @@ on: workflow_dispatch
 #        https://api.github.com/repos/simple-icons/simple-icons-font/actions/workflows/auto-release.yml/dispatches
 # Replacing <token> by a personal access token with scope `public_repo`
 
-permissions:
-  contents: write
-
 jobs:
   auto-release:
     name: Automated release
@@ -25,10 +22,10 @@ jobs:
           persist-credentials: false
           # Fetch everything so we can checkout master
           fetch-depth: 0
-      - name: Use Node.js 16.x
+      - name: Use Node.js 20.x
         uses: actions/setup-node@v4
         with:
-          node-version: 16.x
+          node-version: 20.x
       - name: Cache dependencies
         uses: actions/cache@v4
         with:
@@ -66,7 +63,7 @@ jobs:
         run: |
           # Set up remote using a Personal Access Token
           git remote remove origin
-          git remote add origin https://${{secrets.RELEASE_TOKEN}}@github.com/simple-icons/simple-icons-font.git
+          git remote add origin https://${{ secrets.GITHUB_TOKEN }}@github.com/simple-icons/simple-icons-font.git
 
           # Push develop first, to prevent conflicts with parallel activity
           git push origin develop

.github/workflows/publish.yml

@@ -5,9 +5,6 @@ on:
       - master
   pull_request:
 
-permissions:
-  contents: write
-
 jobs:
   npm:
     name: NPM Package
@@ -26,12 +23,6 @@ jobs:
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
           restore-keys: |
             ${{ runner.os }}-node-
-      - name: Remove dark theme images from README
-        uses: mondeja/strip-gh-theme-links@v4
-        with:
-          files: README.md
-          keep: light
-          strict: true
       - name: Install dependencies
         run: npm ci
       - name: Build NodeJS package
@@ -47,6 +38,12 @@ jobs:
     name: GitHub release
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        if: github.ref == 'refs/heads/master'
+        with:
+          app-id: ${{ vars.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
       - name: Checkout
         uses: actions/checkout@v4
       - name: Get release version
@@ -56,8 +53,8 @@ jobs:
           echo "version=$PACKAGE_VERSION" >> $GITHUB_OUTPUT
       - name: Configure GIT credentials
         run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
+          git config user.name "simple-icons[bot]"
+          git config user.email "simple-icons[bot]@users.noreply.github.com"
       - name: Use Node.js 20.x
         uses: actions/setup-node@v4
         with:
@@ -75,21 +72,15 @@ jobs:
         run: npm run build
       - name: Update README CDN URLs
         run: node scripts/update-cdn-urls.js
-      - name: Remove dark theme images from README
-        uses: mondeja/strip-gh-theme-links@v4
-        with:
-          files: README.md
-          keep: light
-          strict: true
       # Commits that will only be included in the tag
       - name: Commit font
         run: |
           git add --force font/
           git commit -m 'Add font'
-      - name: Commit dark theme images strip
+      - name: Commit README updates
         run: |
           git add README.md
-          git commit -m 'Strip README dark theme image links'
+          git diff-index --quiet HEAD || git commit -m 'Update README CDN urls'
       - name: Create and push git tag
         if: github.ref == 'refs/heads/master'
         run: |
@@ -102,7 +93,7 @@ jobs:
         id: create-release
         uses: actions/create-release@v1
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
         with:
           tag_name: ${{ steps.get-version.outputs.version }}
           release_name: Release ${{ steps.get-version.outputs.version }}

.github/workflows/renovate.yml

@@ -0,0 +1,28 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: '0 0 1 5,11 *'
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup node
+        uses: actions/setup-node@v4
+      - name: Renovate
+        uses: renovatebot/github-action@v40.1.11
+        with:
+          configurationFile: .github/renovate.json5
+          token: ${{ steps.app-token.outputs.token }}
+        env:
+          LOG_LEVEL: debug

.github/workflows/verify.yml

@@ -1,5 +1,10 @@
 name: Verify
-on: [pull_request, push]
+on:
+  pull_request:
+  push:
+    branches:
+      - develop
+      - master
 
 permissions:
   contents: read