chore: streamline toolchain, packaging and CI

.c8rc.json

@@ -0,0 +1,14 @@
+{
+    "all": true,
+    "src": ["src"],
+    "include": ["src/**/*.ts"],
+    "exclude": ["test", "src/worker/WorkerRunner.ts", "src/service/DummyDataService.ts", "src/three/**"],
+    "extension": [".ts"],
+    "reporter": ["lcov", "text-summary"],
+    "report-dir": "./coverage",
+    "check-coverage": true,
+    "branches": 85,
+    "lines": 85,
+    "functions": 70,
+    "statements": 85
+}

.devcontainer/devcontainer.json

@@ -1,16 +1,10 @@
 {
     "name": "@openhps/core",
-    "image": "mcr.microsoft.com/devcontainers/javascript-node:20",
-    "features": {
-        "docker-in-docker": "latest"
-    },
-    "postCreateCommand": "yarn install",
+    "image": "mcr.microsoft.com/devcontainers/javascript-node:22",
+    "postCreateCommand": "npm ci",
     "customizations": {
         "vscode": {
-            "extensions": [
-                "dbaeumer.vscode-eslint",
-                "esbenp.prettier-vscode"
-            ]
+            "extensions": ["dbaeumer.vscode-eslint", "esbenp.prettier-vscode"]
         }
     }
-}
+}

.github/dependabot.yml

@@ -1,11 +1,60 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
+# Dependency updates for this OpenHPS module.
+# Docs: https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+#
+# Grouped deliberately: the lint and test stacks each have to move as a unit
+# because of peer ranges between them (eslint <-> typescript-eslint <-> plugins).
+# Ungrouped daily updates are what left ~10 abandoned dependabot branches behind.
 version: 2
 updates:
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "daily"
+    - package-ecosystem: npm
+      directory: /
+      schedule:
+          interval: weekly
+          day: monday
+      open-pull-requests-limit: 10
+      versioning-strategy: increase-if-necessary
+      groups:
+          lint:
+              patterns:
+                  - eslint
+                  - eslint-*
+                  - '@eslint/*'
+                  - typescript-eslint
+                  - '@typescript-eslint/*'
+                  - prettier
+                  - globals
+          test:
+              patterns:
+                  - mocha
+                  - mocha-*
+                  - chai
+                  - '@types/chai'
+                  - '@types/mocha'
+                  - nyc
+                  - ts-node
+          build:
+              patterns:
+                  - webpack
+                  - webpack-*
+                  - terser-webpack-plugin
+                  - typedoc
+                  - typedoc-*
+                  - '@babel/*'
+                  - size-limit
+                  - '@size-limit/*'
+          types:
+              patterns:
+                  - '@types/*'
+              exclude-patterns:
+                  - '@types/chai'
+                  - '@types/mocha'
+      ignore:
+          # TypeScript majors are gated on the typedoc and typescript-eslint peer
+          # ranges, so they are bumped deliberately rather than automatically.
+          - dependency-name: typescript
+            update-types: ['version-update:semver-major']
+    - package-ecosystem: github-actions
+      directory: /
+      schedule:
+          interval: weekly
+          day: monday

.github/workflows/auto-merge.yml

@@ -1,16 +1,14 @@
 name: auto-merge
 
-on:
-  pull_request:
+on: pull_request_target
 
-permissions: write-all
+# Least privilege: the previous fleet config used `permissions: write-all`.
+permissions:
+    contents: write
+    pull-requests: write
 
 jobs:
-  auto-merge:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: ahmadnassri/action-dependabot-auto-merge@v2
-        with:
-          target: minor
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+    auto-merge:
+        if: github.actor == 'dependabot[bot]'
+        uses: OpenHPS/workflows/.github/workflows/auto-merge.yml@v1
+        secrets: inherit

.github/workflows/ci.yml

@@ -0,0 +1,21 @@
+name: CI
+
+on:
+    push:
+        branches: [master, dev]
+    pull_request:
+        branches: [master, dev]
+    workflow_dispatch:
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
+
+jobs:
+    ci:
+        uses: OpenHPS/workflows/.github/workflows/module.yml@v1
+        secrets: inherit
+        with:
+            prebuild-script: 'build:three'
+            run-size-limit: true
+            graphviz: true