[command] npm run release

.github/workflows/test-build.yml

@@ -6,13 +6,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 16.13.0
       - uses: actions/cache@v2
         with:
           path: ~/.npm
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
           restore-keys: |
             ${{ runner.os }}-node-
-      - run: npm install
+      - run: npm ci
       - run: npm run all
         env:
           GITHUB_TOKEN: ${{ github.token }}
@@ -30,6 +33,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v1
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 16.13.0
       - uses: actions/cache@v2
         with:
           path: ~/.npm

.github/workflows/uncommitted.yml

@@ -10,14 +10,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - run: npm ci
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 16.13.0
       - uses: actions/cache@v2
         with:
           path: ~/.npm
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
           restore-keys: |
             ${{ runner.os }}-node-
-      - run: npm install
+      - run: npm ci
       - run: npm run release
       - name: check for uncommitted changes
         run: |

.node-version

@@ -0,0 +1 @@
+16.13.0

README.md

@@ -62,3 +62,13 @@ steps:
       SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
     if: always()
 ```
+
+## Require Permissions
+
+If you are explicitly specifying permissions, must grant `contents` and `actions`.
+
+```yaml
+permissions:
+  contents: read
+  actions: read
+```

__tests__/fixtures/repos.commits.get.json

@@ -92,4 +92,4 @@
       "patch": "@@ -29,7 +29,7 @@\n....."
     }
   ]
-}
+}

__tests__/helper.ts

@@ -181,7 +181,7 @@ export const pullRequest = (): Field => {
   let value;
   if (context.eventName.startsWith('pull_request')) {
     value =
-      '<https://github.com/8398a7/action-slack/pull/123|Add pullRequest field #123>';
+      '<https://github.com/8398a7/action-slack/pull/123|Add pullRequest field &amp; escaping &lt;, &gt; #123>';
   } else {
     value = 'n/a';
   }

__tests__/pull_request.test.ts

@@ -67,7 +67,7 @@ describe.each`
     github.context.payload = {
       pull_request: {
         html_url: 'https://github.com/8398a7/action-slack/pull/123',
-        title: 'Add pullRequest field',
+        title: 'Add pullRequest field & escaping <, >',
         number: 123,
         head: { sha },
       },
@@ -90,7 +90,7 @@ describe.each`
     payload.attachments[0].color = 'good';
     expect(await client.prepare(msg)).toStrictEqual(payload);
     expect(process.env.AS_PULL_REQUEST).toStrictEqual(
-      '<https://github.com/8398a7/action-slack/pull/123|Add pullRequest field #123>',
+      '<https://github.com/8398a7/action-slack/pull/123|Add pullRequest field &amp; escaping &lt;, &gt; #123>',
     );
   });
 });