Switch back to coveralls. Fix pnpm audit issue.

.github/workflows/node.js.yml

@@ -7,10 +7,6 @@ on:
   pull_request:
     branches:
       - main
-  workflow_call:
-    secrets:
-      CODECOV_TOKEN:
-        required: true
 
 jobs:
   build:
@@ -42,7 +38,22 @@ jobs:
         run: npm run lint
       - name: Test
         run: npm run ci
-      - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+      # Stay on coveralls instead of codecov, since hildjj doesn't own the
+      # repo directly, and it's too much work to figure out.
+      - name: Coveralls Parallel
+        uses: coverallsapp/github-action@master
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          github-token: ${{ secrets.github_token }}
+          flag-name: node-${{ matrix.node-version }}
+          path-to-lcov: ./coverage/lcov.info
+          parallel: true
+  finish:
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Coveralls Finished
+        uses: coverallsapp/github-action@master
+        with:
+          github-token: ${{ secrets.github_token }}
+          path-to-lcov: ./coverage/lcov.info
+          parallel-finished: true

.github/workflows/publish.yml

@@ -26,6 +26,7 @@ jobs:
           cache: pnpm
       - run: pnpm i -r
       - run: npm run build
+      - run: npm pkg delete devDependencies scripts packageManager pnpm
       - run: npm publish --access public --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -65,5 +65,10 @@
   "packageManager": "[email protected]",
   "engines": {
     "node": ">=18"
+  },
+  "pnpm": {
+    "overrides": {
+      "cross-spawn": "7.0.6"
+    }
   }
 }