Remove npm token usage and update to latest standards.

.github/workflows/ci.yml

@@ -11,21 +11,19 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: ['24.x', '25.x']
+        node-version: ['24.x', '26.x']
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
-      - name: Install latest npm
-        run: npm install -g npm@11.4.2
+      - name: Use latest npm
+        run: npm install --global npm@latest
       - name: Install Dependencies
         run: npm ci --ignore-scripts
-      - name: Prepare
-        run: npm run prepare
       - name: Compile
         run: npm run ci:compile
       - name: Check Code Style
@@ -34,31 +32,27 @@ jobs:
         run: npm run ci:lint
       - name: Run Tests
         run: npm run ci:test
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLISH }}
 
   branchBuild:
     name: Branch Build
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: ['24.x', '25.x']
+        node-version: ['24.x', '26.x']
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
-      - name: Install latest npm
-        run: npm install -g npm@11.4.2
+      - name: Use latest npm
+        run: npm install --global npm@latest
       - name: Install Dependencies
         run: npm ci --ignore-scripts
-      - name: Prepare
-        run: npm run prepare
       - name: Compile
         run: npm run ci:compile
       - name: Check Code Style
@@ -67,5 +61,3 @@ jobs:
         run: npm run ci:lint
       - name: Run Tests
         run: npm run ci:test
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLISH }}

.github/workflows/codeql-analysis.yml

@@ -22,10 +22,10 @@ jobs:
         language: ['javascript']
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/coverage.yml

@@ -2,42 +2,72 @@ name: Coverage
 
 on:
   pull_request:
-    branches:
-      - 'main'
+    branches: [main]
+
+concurrency:
+  group: coverage-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
 
 jobs:
-  coverage:
-    name: Coverage
+  base:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout Code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+      - uses: actions/setup-node@v7
+        with:
+          node-version: '26.x'
+          cache: 'npm'
+      - name: Install dependencies
+        run: npm ci --ignore-scripts
+      - name: Run coverage
+        run: npm run ci:coverage
+      - uses: actions/upload-artifact@v7
+        with:
+          name: base-coverage
+          path: coverage/lcov.info
+          if-no-files-found: error
+
+  pr:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - name: Use Node.js
-        uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
-          node-version: '24.x'
+          node-version: '26.x'
           cache: 'npm'
-      - name: Install latest npm
-        run: npm install -g npm@11.4.2
-      - name: Install Dependencies
+      - name: Install dependencies
         run: npm ci --ignore-scripts
-      - name: Prepare
-        run: npm run prepare
-      - name: Calculate Code Coverage
+      - name: Run coverage
         run: npm run ci:coverage
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLISH }}
-      - name: Create Coverage Report for base branch
-        run: |
-          mv coverage coverage-pr
-          git fetch
-          git checkout origin/${{ github.event.pull_request.base.ref }}
-          npm ci --ignore-scripts && npm run prepare && npm run ci:coverage
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN_PUBLISH }}
-      - name: Post Coverage Report
+      - uses: actions/upload-artifact@v7
+        with:
+          name: pr-coverage
+          path: coverage/lcov.info
+          if-no-files-found: error
+
+  report:
+    name: Coverage
+    needs: [base, pr]
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Require successful coverage jobs
+        if: ${{ needs.base.result != 'success' || needs.pr.result != 'success' }}
+        run: exit 1
+      - uses: actions/download-artifact@v8
+        with: { name: base-coverage, path: coverage }
+      - uses: actions/download-artifact@v8
+        with: { name: pr-coverage, path: coverage-pr }
+      - name: Post coverage report
         uses: checkdigit/github-actions/coverage-reporter@main
         with:
           coverage-results-folder-pr: 'coverage-pr'

LICENSE → LICENSE.txt

@@ -1,6 +1,6 @@
-MIT License
+The MIT License
 
-Copyright (c) 2025 checkdigit
+Copyright (c) 2022-2026 Check Digit, LLC
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -9,13 +9,13 @@ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.