chore: bump @npmcli/template-oss from 4.15.1 to 4.18.0 (#256)

Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from
4.15.1 to 4.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/npm/template-oss/releases"><code>@​npmcli/template-oss</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v4.18.0</h2>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.17.0...v4.18.0">4.18.0</a>
(2023-07-18)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/f04a76d48e373fb03249973983e45472b26a9691"><code>f04a76d</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/330">#330</a>
use git remote for branch related config (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/dd9aadf8d96c31066c84905cad07ac89a68ceead"><code>dd9aadf</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/337">#337</a>
properly quote PR_TITLE (<a
href="https://redirect.github.com/npm/template-oss/issues/337">#337</a>)
(<a
href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/4662ec31afc77f0e5fdac13d0bf14e23e0e9cb43"><code>4662ec3</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/331">#331</a>
block protected branch creations (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h2>v4.17.0</h2>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.16.0...v4.17.0">4.17.0</a>
(2023-07-07)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/4624d9c17e30b4783ef6bfc28a72603cc076f0e7"><code>4624d9c</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
add overwrite false property to added files (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/710c25e404df0f5be2ef1a487704e7235db3c348"><code>710c25e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/327">#327</a>
do not add dependabot files when config is falsy (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/449066e1917b5ff113aba396b12986f5db5d25da"><code>449066e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
determine parser based on target filename (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/7300da491ec1e596c5ad82434f7975a5e5a70f23"><code>7300da4</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/325">#325</a>
apply settings to all requested branches (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/2a5cd532ce26b4fe66a6cb5a8b195c77e2520929"><code>2a5cd53</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/324">#324</a>
bump <code>@​npmcli/package-json</code> from 3.1.1 to 4.0.0</li>
</ul>
<h2>v4.16.0</h2>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.15.1...v4.16.0">4.16.0</a>
(2023-07-05)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/6e02268f12cc65da2180527a6a18f5d737bab6c3"><code>6e02268</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
allow adding latest to other ci versions (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/b83a19a98ec5db85b96e645916dcb65dbc64fbbd"><code>b83a19a</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to disable eslint (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/9606606f0163d56b785620881d5b01985f9218e3"><code>9606606</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to not update npm (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/73d7bf174d34c5d51b87f937daf52b94c9e803c4"><code>73d7bf1</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add release/v branches to all branch CI (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/npm/template-oss/blob/main/CHANGELOG.md"><code>@​npmcli/template-oss</code>'s
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.17.0...v4.18.0">4.18.0</a>
(2023-07-18)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/f04a76d48e373fb03249973983e45472b26a9691"><code>f04a76d</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/330">#330</a>
use git remote for branch related config (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/dd9aadf8d96c31066c84905cad07ac89a68ceead"><code>dd9aadf</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/337">#337</a>
properly quote PR_TITLE (<a
href="https://redirect.github.com/npm/template-oss/issues/337">#337</a>)
(<a
href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/4662ec31afc77f0e5fdac13d0bf14e23e0e9cb43"><code>4662ec3</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/331">#331</a>
block protected branch creations (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.16.0...v4.17.0">4.17.0</a>
(2023-07-07)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/4624d9c17e30b4783ef6bfc28a72603cc076f0e7"><code>4624d9c</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
add overwrite false property to added files (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/710c25e404df0f5be2ef1a487704e7235db3c348"><code>710c25e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/327">#327</a>
do not add dependabot files when config is falsy (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/449066e1917b5ff113aba396b12986f5db5d25da"><code>449066e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
determine parser based on target filename (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/7300da491ec1e596c5ad82434f7975a5e5a70f23"><code>7300da4</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/325">#325</a>
apply settings to all requested branches (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/2a5cd532ce26b4fe66a6cb5a8b195c77e2520929"><code>2a5cd53</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/324">#324</a>
bump <code>@​npmcli/package-json</code> from 3.1.1 to 4.0.0</li>
</ul>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.15.1...v4.16.0">4.16.0</a>
(2023-07-05)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/6e02268f12cc65da2180527a6a18f5d737bab6c3"><code>6e02268</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
allow adding latest to other ci versions (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/b83a19a98ec5db85b96e645916dcb65dbc64fbbd"><code>b83a19a</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to disable eslint (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/9606606f0163d56b785620881d5b01985f9218e3"><code>9606606</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to not update npm (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/73d7bf174d34c5d51b87f937daf52b94c9e803c4"><code>73d7bf1</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add release/v branches to all branch CI (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/d67bd699b759c766ddf5fd5aecd5c024f38dcfad"><code>d67bd69</code></a>
chore: release 4.18.0</li>
<li><a
href="https://github.com/npm/template-oss/commit/dd9aadf8d96c31066c84905cad07ac89a68ceead"><code>dd9aadf</code></a>
fix: properly quote PR_TITLE (<a
href="https://redirect.github.com/npm/template-oss/issues/337">#337</a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/f04a76d48e373fb03249973983e45472b26a9691"><code>f04a76d</code></a>
feat: use git remote for branch related config</li>
<li><a
href="https://github.com/npm/template-oss/commit/4662ec31afc77f0e5fdac13d0bf14e23e0e9cb43"><code>4662ec3</code></a>
fix: block protected branch creations</li>
<li><a
href="https://github.com/npm/template-oss/commit/102e1ae9d62646e888c71efe6d86dc491e5ca7ca"><code>102e1ae</code></a>
chore: release 4.17.0</li>
<li><a
href="https://github.com/npm/template-oss/commit/710c25e404df0f5be2ef1a487704e7235db3c348"><code>710c25e</code></a>
fix: do not add dependabot files when config is falsy</li>
<li><a
href="https://github.com/npm/template-oss/commit/4624d9c17e30b4783ef6bfc28a72603cc076f0e7"><code>4624d9c</code></a>
feat: add overwrite false property to added files</li>
<li><a
href="https://github.com/npm/template-oss/commit/449066e1917b5ff113aba396b12986f5db5d25da"><code>449066e</code></a>
fix: determine parser based on target filename</li>
<li><a
href="https://github.com/npm/template-oss/commit/7300da491ec1e596c5ad82434f7975a5e5a70f23"><code>7300da4</code></a>
fix: apply settings to all requested branches</li>
<li><a
href="https://github.com/npm/template-oss/commit/2a5cd532ce26b4fe66a6cb5a8b195c77e2520929"><code>2a5cd53</code></a>
deps: bump <code>@​npmcli/package-json</code> from 3.1.1 to 4.0.0</li>
<li>Additional commits viewable in <a
href="https://github.com/npm/template-oss/compare/v4.15.1...v4.18.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@npmcli/template-oss&package-manager=npm_and_yarn&previous-version=4.15.1&new-version=4.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luke Karrys <luke@lukekarrys.com>

.github/dependabot.yml

@@ -7,6 +7,7 @@ updates:
     directory: /
     schedule:
       interval: daily
+    target-branch: "main"
     allow:
       - dependency-type: direct
     versioning-strategy: increase-if-necessary

.github/settings.yml

@@ -15,6 +15,7 @@ branches:
     protection:
       required_status_checks: null
       enforce_admins: true
+      block_creations: true
       required_pull_request_reviews:
         required_approving_review_count: 1
         require_code_owner_reviews: true

.github/workflows/ci.yml

@@ -8,7 +8,6 @@ on:
   push:
     branches:
       - main
-      - latest
   schedule:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"

.github/workflows/codeql-analysis.yml

@@ -6,11 +6,9 @@ on:
   push:
     branches:
       - main
-      - latest
   pull_request:
     branches:
       - main
-      - latest
   schedule:
     # "At 10:00 UTC (03:00 PT) on Monday" https://crontab.guru/#0_10_*_*_1
     - cron: "0 10 * * 1"

.github/workflows/pull-request.yml

@@ -47,4 +47,4 @@ jobs:
         env:
           PR_TITLE: ${{ github.event.pull_request.title }}
         run: |
-          echo '$PR_TITLE' | npx --offline commitlint -V
+          echo "$PR_TITLE" | npx --offline commitlint -V

.github/workflows/release.yml

@@ -11,8 +11,6 @@ on:
   push:
     branches:
       - main
-      - latest
-      - release/v*
 
 permissions:
   contents: write
@@ -78,7 +76,7 @@ jobs:
             let commentId = comments.find(c => c.user.login === 'github-actions[bot]' && c.body.startsWith(body))?.id
 
             body += `Release workflow run: ${workflow.html_url}\n\n#### Force CI to Update This Release\n\n`
-            body += `This PR will be updated and CI will run for every non-\`chore:\` commit that is pushed to \`main\`. `
+            body += `This PR will be updated and CI will run for every non-\`chore:\` commit that is pushed to \`${REF_NAME}\`. `
             body += `To force CI to update this PR, run this command:\n\n`
             body += `\`\`\`\ngh workflow run release.yml -r ${REF_NAME} -R ${owner}/${repo} -f release-pr=${issue_number}\n\`\`\``
 

package.json

@@ -47,7 +47,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.15.1",
+    "@npmcli/template-oss": "4.18.0",
     "nock": "^13.2.4",
     "safe-buffer": "^5.2.1",
     "standard-version": "^9.3.2",
@@ -68,7 +68,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.15.1",
+    "version": "4.18.0",
     "publish": "true"
   }
 }