promote to stable

.github/workflows/codeql-analysis.yml

@@ -45,7 +45,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+      uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -70,4 +70,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

.github/workflows/experimental-release.yml

@@ -12,6 +12,6 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: form8ion/.github/.github/workflows/release-package.yml@master
+    uses: form8ion/.github/.github/workflows/release-package.yml@85b3f43533a7f9bf28efb357764fba989f5fd9d7 # master
     secrets:
       NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}

.github/workflows/node-ci.yml

@@ -27,16 +27,14 @@ jobs:
       - run: npm clean-install
       - run: npm audit signatures
       - run: npm test
-      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+      - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
   verify-matrix:
     runs-on: ubuntu-latest
     strategy:
       matrix:
         node:
-          - 18.19.0
-          - 20.9.0
-          - 22.11.0
-          - 24
+          - 22.21.0
+          - 24.12.0
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Setup node ${{ matrix.node_version }}
@@ -55,12 +53,10 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: form8ion/.github/.github/workflows/release-package.yml@master
+    uses: form8ion/.github/.github/workflows/release-package.yml@85b3f43533a7f9bf28efb357764fba989f5fd9d7 # master
     secrets:
-      NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}  
-
-  # separate job to set as required in branch protection,
-  # since the build names above change each time Node versions change
+      NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
+
   workflow-result:
     runs-on: ubuntu-latest
     needs:

.github/workflows/ossf-scorecard.yml

@@ -59,14 +59,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
         with:
           sarif_file: results.sarif

README.md

@@ -71,43 +71,54 @@ a wrapper.
 #### Import
 
 ```javascript
+import {ungroupObject} from '@form8ion/core';
 import {lift, questionNames, scaffold} from '@form8ion/project';
 ```
 
 #### Execute
 
 ```javascript
-await scaffold({
-  decisions: {
-    [questionNames.PROJECT_NAME]: 'my-project',
-    [questionNames.LICENSE]: 'MIT',
-    [questionNames.VISIBILITY]: 'Public',
-    [questionNames.DESCRIPTION]: 'My project',
-    [questionNames.GIT_REPO]: false,
-    [questionNames.COPYRIGHT_HOLDER]: 'John Smith',
-    [questionNames.COPYRIGHT_YEAR]: '2022',
-    [questionNames.PROJECT_LANGUAGE]: 'foo'
+const plugins = {
+  dependencyUpdaters: {
+    bar: {scaffold: options => options}
   },
-  plugins: {
-    dependencyUpdaters: {
-      bar: {scaffold: options => options}
-    },
-    languages: {
-      foo: {scaffold: options => options}
-    },
-    vcsHosts: {
-      baz: {
-        scaffold: options => options,
-        prompt: () => ({repoOwner: 'form8ion'})
-      }
+  languages: {
+    foo: {scaffold: options => options}
+  },
+  vcsHosts: {
+    baz: {
+      scaffold: options => options,
+      prompt: () => ({repoOwner: 'form8ion'})
     }
   }
-});
+};
+
+await scaffold(
+  {plugins},
+  {
+    prompt: () => ({
+      [questionNames.PROJECT_NAME]: 'my-project',
+      [questionNames.LICENSE]: 'MIT',
+      [questionNames.VISIBILITY]: 'Public',
+      [questionNames.DESCRIPTION]: 'My project',
+      [questionNames.GIT_REPO]: false,
+      [questionNames.COPYRIGHT_HOLDER]: 'John Smith',
+      [questionNames.COPYRIGHT_YEAR]: '2022',
+      [questionNames.PROJECT_LANGUAGE]: 'foo'
+    }),
+    logger: {
+      info: () => undefined,
+      success: () => undefined,
+      warn: () => undefined,
+      error: () => undefined
+    }
+  }
+);
 
 await lift({
   projectRoot: process.cwd(),
   results: {},
-  enhancers: {foo: {test: () => true, lift: () => ({})}},
+  enhancers: ungroupObject(plugins),
   vcs: {}
 });
 ```

example.js

@@ -3,6 +3,7 @@
 import {promises as fs} from 'node:fs';
 import {resolve} from 'path';
 import stubbedFs from 'mock-fs';
+import {ungroupObject} from '@form8ion/core';
 import {lift, questionNames, scaffold} from './lib/index.js';
 
 // #### Execute
@@ -13,36 +14,46 @@ stubbedFs({
   node_modules: stubbedFs.load('node_modules')
 });
 
-await scaffold({
-  decisions: {
-    [questionNames.PROJECT_NAME]: 'my-project',
-    [questionNames.LICENSE]: 'MIT',
-    [questionNames.VISIBILITY]: 'Public',
-    [questionNames.DESCRIPTION]: 'My project',
-    [questionNames.GIT_REPO]: false,
-    [questionNames.COPYRIGHT_HOLDER]: 'John Smith',
-    [questionNames.COPYRIGHT_YEAR]: '2022',
-    [questionNames.PROJECT_LANGUAGE]: 'foo'
+const plugins = {
+  dependencyUpdaters: {
+    bar: {scaffold: options => options}
   },
-  plugins: {
-    dependencyUpdaters: {
-      bar: {scaffold: options => options}
-    },
-    languages: {
-      foo: {scaffold: options => options}
-    },
-    vcsHosts: {
-      baz: {
-        scaffold: options => options,
-        prompt: () => ({repoOwner: 'form8ion'})
-      }
+  languages: {
+    foo: {scaffold: options => options}
+  },
+  vcsHosts: {
+    baz: {
+      scaffold: options => options,
+      prompt: () => ({repoOwner: 'form8ion'})
     }
   }
-});
+};
+
+await scaffold(
+  {plugins},
+  {
+    prompt: () => ({
+      [questionNames.PROJECT_NAME]: 'my-project',
+      [questionNames.LICENSE]: 'MIT',
+      [questionNames.VISIBILITY]: 'Public',
+      [questionNames.DESCRIPTION]: 'My project',
+      [questionNames.GIT_REPO]: false,
+      [questionNames.COPYRIGHT_HOLDER]: 'John Smith',
+      [questionNames.COPYRIGHT_YEAR]: '2022',
+      [questionNames.PROJECT_LANGUAGE]: 'foo'
+    }),
+    logger: {
+      info: () => undefined,
+      success: () => undefined,
+      warn: () => undefined,
+      error: () => undefined
+    }
+  }
+);
 
 await lift({
   projectRoot: process.cwd(),
   results: {},
-  enhancers: {foo: {test: () => true, lift: () => ({})}},
+  enhancers: ungroupObject(plugins),
   vcs: {}
 });