Update dev dependencies

.devcontainer/devcontainer.json

@@ -0,0 +1,18 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/javascript-node
+{
+    "name": "Node.js",
+    "image": "mcr.microsoft.com/devcontainers/base:jammy",
+    "features": {
+        "ghcr.io/devcontainers/features/node:1": {
+            "version": "20"
+        },
+        "ghcr.io/rocker-org/devcontainer-features/apt-packages:1": {
+            "packages": []
+        },
+        "ghcr.io/devcontainers/features/git:1": {}
+    },
+    "remoteEnv": {
+        "PATH": "${containerEnv:PATH}:./node_modules/.bin"
+    }
+}

.github/workflows/cd.yml

@@ -9,6 +9,9 @@ on:
       - develop
       - release-*
 
+env:
+  HUSKY: 0
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -19,6 +22,10 @@ jobs:
         contents: read
         packages: read
 
+    concurrency:
+        group: ${{ github.ref }}-cd
+        cancel-in-progress: false
+
     steps:
       - name: Import Secrets
         id: import-secrets
@@ -27,18 +34,21 @@ jobs:
           access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
           static-secrets: |
             {
-              "/WebComponents/prod/tokens/GH_TOKEN": "GH_TOKEN",
-              "/WebComponents/prod/tokens/PROGRESS_NPM_REGISTRY_TOKEN": "NPM_TOKEN"
+              "${{ secrets.GH_AKEYLESS_GH_TOKEN_PATH }}": "GH_TOKEN",
+              "${{ secrets.GH_AKEYLESS_NPM_TOKEN_PATH }}": "NPM_TOKEN"
             }
           export-secrets-to-environment: false
 
       - name: Check out branch
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0 # Fetch all branches
 
       - name: Install modules
-        run: npm install --no-audit
+        run: npm ci --no-audit --no-fund
+
+      - name: Verify attestations
+        run: npm audit signatures
 
       - name: Build package
         run: npm run build-package
@@ -49,8 +59,7 @@ jobs:
             npm run test
 
       - name: Publish release
-        run: ./.github/workflows/scripts/ci-semantic-release
         env:
           NPM_TOKEN: ${{ steps.import-secrets.outputs.NPM_TOKEN }}
           GH_TOKEN: ${{ steps.import-secrets.outputs.GH_TOKEN }}
-
+        run: npx semantic-release

.github/workflows/ci.yml

@@ -8,26 +8,26 @@ on:
       - develop
       - release-*
 
+env:
+  HUSKY: 0
+
 jobs:
   build:
     runs-on: ubuntu-latest
 
-    permissions:
-        id-token: write # Required by Akeyless
-        contents: read
-        packages: read
+    concurrency:
+        group: ${{ github.ref }}-ci
+        cancel-in-progress: true
 
     steps:
-      - name: Cancel previous runs
-        uses: styfle/[email protected]
-        with:
-          access_token: ${{ github.token }}
-
       - name: Check out repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Install modules
-        run: npm install --no-audit
+        run: npm ci --no-audit --no-fund
+
+      - name: Verify attestations
+        run: npm audit signatures
 
       - name: Lint
         run: npm run lint

.github/workflows/publish.yml

@@ -9,25 +9,26 @@ on: workflow_dispatch
 jobs:
   build:
     runs-on: ubuntu-latest
+    environment: publish
 
     steps:
       - name: Import Secrets
         id: import-secrets
         uses: LanceMcCarthy/akeyless-action@v3
         with:
           access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
-          static-secrets: '{ "/WebComponents/prod/tokens/GH_TOKEN": "GH_TOKEN" }'
+          static-secrets: '{ "${{ secrets.GH_AKEYLESS_GH_TOKEN_PATH }}": "GH_TOKEN" }'
           export-secrets-to-environment: false
 
       - name: Check out master
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           ref: master
           fetch-depth: 0 # Fetch all branches
           token: ${{ steps.import-secrets.outputs.GH_TOKEN }}
 
-      - name: Install modules
-        run: npm install @telerik/semantic-prerelease@1 --no-save
-
       - name: Fast-forward master to develop
-        run: npx release-master
+        run: |
+          # TODO: Remove after first sync with master
+          git checkout origin/develop -- ./tools/release-master
+          ./tools/release-master

.gitignore

@@ -1,5 +1,3 @@
 dist
 node_modules
 npm-debug.log
-package-lock.json
-yarn.lock

.husky/commit-msg

@@ -0,0 +1 @@
+commitlint --edit $1

.husky/pre-commit

@@ -0,0 +1 @@
+npm run lint

commitlint.config.js

@@ -1,39 +1,3 @@
-/* eslint-disable */
-
 module.exports = {
-	parserPreset: 'conventional-changelog-conventionalcommits',
-	rules: {
-		'body-leading-blank': [1, 'always'],
-		'body-max-line-length': [2, 'always', 100],
-		'footer-leading-blank': [1, 'always'],
-		'footer-max-line-length': [2, 'always', 100],
-		'header-max-length': [2, 'always', 100],
-		'scope-case': [2, 'always', 'lower-case'],
-		'subject-case': [
-			2,
-			'never',
-			['sentence-case', 'start-case', 'pascal-case', 'upper-case']
-		],
-		'subject-empty': [2, 'never'],
-		'subject-full-stop': [2, 'never', '.'],
-		'type-case': [2, 'always', 'lower-case'],
-		'type-empty': [2, 'never'],
-		'type-enum': [
-			2,
-			'always',
-			[
-				'build',
-				'chore',
-				'ci',
-				'docs',
-				'feat',
-				'fix',
-				'perf',
-				'refactor',
-				'revert',
-				'style',
-				'test'
-			]
-		]
-	}
+    extends: [ "@commitlint/config-conventional" ]
 };

eslint.config.mjs

@@ -0,0 +1,19 @@
+import globals from "globals";
+
+/** @type {import('eslint').Linter.Config[]} */
+export default [
+    {
+      files: ["*/*.js"],
+      languageOptions: {
+        sourceType: "module"
+      }
+    },
+    {
+      languageOptions: {
+        globals: globals.browser
+      }
+    },
+    {
+      ignores: ["dist/", "documentation/"]
+    }
+];

index.d.ts

@@ -52,7 +52,7 @@ export type OutputType = keyof OutputByType;
 export interface JSZipObject {
     name: string;
     /**
-     * Present for files loadded with `loadAsync`. May contain ".." path components that could
+     * Present for files loaded with `loadAsync`. May contain ".." path components that could
      * result in a zip-slip attack. See https://snyk.io/research/zip-slip-vulnerability
      */
     unsafeOriginalName?: string;

lib/base64.js

@@ -1,7 +1,5 @@
 import support from './support';
 
-/* eslint-disable */
-
 // private property
 const _keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
 

lib/compressedObject.js

@@ -3,8 +3,6 @@ import DataWorker from './stream/DataWorker';
 import DataLengthProbe from './stream/DataLengthProbe';
 import Crc32Probe from './stream/Crc32Probe';
 
-/* eslint-disable */
-
 /**
  * Represent a compressed object, with everything needed to decompress it.
  * @constructor

lib/crc32.js

@@ -1,7 +1,5 @@
 import * as utils from './utils';
 
-/* eslint-disable */
-
 /**
  * The following functions come from pako, from pako/lib/zlib/crc32.js
  * released under the MIT license, see pako https://github.com/nodeca/pako/

lib/generate/ZipFileWorker.js

@@ -6,8 +6,6 @@ import * as utf8 from '../utf8';
 import crc32 from '../crc32';
 import * as signature from '../signature';
 
-/* eslint-disable */
-
 /**
  * Transform an integer into a string in hexadecimal.
  * @private

lib/generate/index.js

@@ -1,8 +1,6 @@
 import compressions from '../compressions';
 import ZipFileWorker from './ZipFileWorker';
 
-/* eslint-disable */
-
 /**
  * Find the compression to use.
  * @param {String} fileCompression the compression defined at the file level, if any.

lib/load.js

@@ -5,8 +5,6 @@ import ZipEntries from './zipEntries';
 import Crc32Probe from './stream/Crc32Probe';
 import nodejsUtils from './nodejsUtils';
 
-/* eslint-disable */
-
 /**
  * Check the CRC32 of an entry.
  * @param {ZipEntry} zipEntry the zip entry to check.

lib/main.js

@@ -10,8 +10,6 @@ import * as generate from './generate/index';
 import load from './load';
 import support from './support';
 
-/* eslint-disable */
-
 /**
  * Add a file in the current folder.
  * @private