From 8ae9e0e8e9f4c92a9cd233ce89c5fe68c5bf8f2f Mon Sep 17 00:00:00 2001
From: Gar <gar+gh@danger.computer>
Date: Wed, 9 Feb 2022 11:56:02 -0800
Subject: [PATCH] chore: @npmcli/template-oss@2.7.1

---
 .commitlintrc.js                      |  2 +-
 .github/dependabot.yml                |  4 +--
 .github/workflows/codeql-analysis.yml | 38 +++++++++++++++++++++++++++
 .github/workflows/post-dependabot.yml | 31 ++++++++++++++++++++++
 .github/workflows/release-please.yml  |  2 +-
 package.json                          |  7 ++---
 6 files changed, 77 insertions(+), 7 deletions(-)
 create mode 100644 .github/workflows/codeql-analysis.yml
 create mode 100644 .github/workflows/post-dependabot.yml

diff --git a/.commitlintrc.js b/.commitlintrc.js
index 38ae73c..cf8f3d7 100644
--- a/.commitlintrc.js
+++ b/.commitlintrc.js
@@ -6,6 +6,6 @@ module.exports = {
   rules: {
     'type-enum': [2, 'always', ['feat', 'fix', 'docs', 'chore', 'deps']],
     'header-max-length': [2, 'always', 80],
-    'subject-case': [2, 'always', ['lower-case', 'sentence-case', 'start-case']],
+    'subject-case': [0, 'always', ['lower-case', 'sentence-case', 'start-case']],
   },
 }
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 13126dd..4c8e23f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,9 +8,9 @@ updates:
     interval: daily
   allow:
     - dependency-type: direct
-  versioning-strategy: increase-if-necessary
+  versioning-strategy: increase
   commit-message:
     prefix: deps
     prefix-development: chore
   labels:
-    - "dependencies"
+    - "Dependencies"
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
new file mode 100644
index 0000000..c7694c4
--- /dev/null
+++ b/.github/workflows/codeql-analysis.yml
@@ -0,0 +1,38 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ main ]
+  schedule:
+    # "At 03:00 on Monday" https://crontab.guru/#0_3_*_*_1
+    - cron: "0 3 * * 1"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1
diff --git a/.github/workflows/post-dependabot.yml b/.github/workflows/post-dependabot.yml
new file mode 100644
index 0000000..11a5dac
--- /dev/null
+++ b/.github/workflows/post-dependabot.yml
@@ -0,0 +1,31 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "Post Dependabot Actions"
+on: pull_request
+
+jobs:
+  Install:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1.1.1
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: npm install and commit
+        if: ${{contains(steps.metadata.outputs.dependency-names, '@npmcli/template-oss')}}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config --local user.email "ops+npm-cli@npmjs.com"
+          git config --local user.name "npm cli ops bot"
+          gh pr checkout ${{ github.event.pull_request.number }}
+          npm install
+          git add .
+          git commit -am "chore: postinstall for dependabot template-oss PR"
+          git push origin ${{github.ref_name}}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index adf21ce..db96a53 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -21,5 +21,5 @@ jobs:
             [{"type":"feat","section":"Features","hidden":false},
             {"type":"fix","section":"Bug Fixes","hidden":false},
             {"type":"docs","section":"Documentation","hidden":false},
-            {"type":"deps","section":"dependencies","hidden":false},
+            {"type":"deps","section":"Dependencies","hidden":false},
             {"type":"chore","hidden":true}]
diff --git a/package.json b/package.json
index 031eccd..5297af2 100644
--- a/package.json
+++ b/package.json
@@ -12,7 +12,8 @@
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
     "lintfix": "npm run lint -- --fix",
-    "snap": "tap"
+    "snap": "tap",
+    "template-copy": "npm-template-copy --force"
   },
   "repository": {
     "type": "git",
@@ -35,7 +36,7 @@
     "typedarray-to-buffer": "^4.0.0"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.5.1",
+    "@npmcli/template-oss": "^2.7.1",
     "mkdirp": "^1.0.4",
     "rimraf": "^3.0.2",
     "tap": "^15.1.6"
@@ -49,6 +50,6 @@
   },
   "templateOSS": {
     "windowsCI": false,
-    "version": "2.5.1"
+    "version": "2.7.1"
   }
 }