Dependency updates, use new JSX transform

.changeset/README.md

@@ -0,0 +1,5 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a tool to manage versioning and changelogs. Read the full documentation at https://changesets.dev.
+
+We also have a quick list of common questions to get you started engaging with this project in our [FAQ](https://changesets.dev/faq).

.changeset/config.json

@@ -0,0 +1,13 @@
+{
+    "$schema": "https://unpkg.com/@changesets/config@4.0.0/schema.json",
+    "access": "public",
+    "baseBranch": "main",
+    "changelog": [
+        "@changesets/changelog-github",
+        {
+            "disableThanks": true,
+            "repo": "s-group-dev/react-usercentrics"
+        }
+    ],
+    "format": "oxfmt"
+}

.changeset/early-cooks-film.md

@@ -0,0 +1,5 @@
+---
+'@s-group/react-usercentrics': minor
+---
+
+Use `react/jsx-runtime` for JSX. The React runtime requirement is slightly bumped from `>=16.8` to `>=16.14`, but this is not considered a breaking change since the major version remains the same.

.changeset/social-sails-kiss.md

@@ -0,0 +1,5 @@
+---
+'@s-group/react-usercentrics': patch
+---
+
+Update all dependencies to resolve security issues reported by `npm audit`

.github/workflows/codeql.yml

@@ -17,8 +17,8 @@ jobs:
     CodeQL:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # https://github.com/github/codeql-action/releases/tag/v4.36.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # https://github.com/github/codeql-action/releases/tag/v4.37.9
               with:
                   languages: javascript-typescript
-            - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # https://github.com/github/codeql-action/releases/tag/v4.36.0
+            - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # https://github.com/github/codeql-action/releases/tag/v4.37.9

.github/workflows/main.yml

@@ -4,7 +4,6 @@ on:
     push:
         branches:
             - main
-            - beta
 
 permissions:
     contents: read
@@ -13,12 +12,12 @@ jobs:
     Install:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
@@ -28,114 +27,57 @@ jobs:
             - if: steps.cache-node_modules.outputs.cache-hit != 'true'
               run: npm ci
 
-    Test:
-        needs:
-            - Install
+    Changesets:
+        needs: Install
         runs-on: ubuntu-latest
+        outputs:
+            publish: ${{ steps.changesets.outputs.published == 'true' }}
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
                   key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
                   restore-keys: |
                       ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-            - run: npm run test
-
-    Lint:
-        needs:
-            - Install
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
-              with:
-                  node-version-file: .node-version
-                  package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
-              id: cache-node_modules
-              with:
-                  path: node_modules
-                  key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-                  restore-keys: |
-                      ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-            - run: npm run lint
-
-    Typecheck:
-        needs:
-            - Install
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
-              with:
-                  node-version-file: .node-version
-                  package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
-              id: cache-node_modules
+            - name: Configure Git user
+              run: |
+                  git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+                  git config --global user.name "github-actions[bot]"
+                  git config tag.forceSignAnnotated true
+            - name: Changesets
+              id: changesets
+              uses: changesets/action@8488615a623b1b9c987934bb89eae8af6a946ac1 # https://github.com/changesets/action/releases/tag/v2.1.1
               with:
-                  path: node_modules
-                  key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-                  restore-keys: |
-                      ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-            - run: npm run typecheck
+                  commit-message: 'chore(changeset): release' # this is not used because of the custom version script
+                  create-github-releases: true
+                  publish-script: npm run tag # do not actually publish via Changeset, handled separately in Actions
+                  pr-title: '🦋 Changeset release'
+                  version-script: npm run version
 
-    Build:
-        needs:
-            - Install
+    Publish:
+        name: Publish to npm
         runs-on: ubuntu-latest
+        needs: Changesets
+        if: needs.Changesets.outputs.publish == 'true'
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
+                  registry-url: https://registry.npmjs.org
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
                   key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
                   restore-keys: |
                       ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
             - run: npm run build
-
-    Release:
-        # Prevent infinite release loop
-        if: ${{ !startsWith(github.event.head_commit.message, 'chore(release)') }}
-        permissions:
-            contents: write
-            issues: write
-            pull-requests: write
-        needs:
-            - Lint
-            - Typecheck
-            - Build
-            - Test
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-              with:
-                  token: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
-              with:
-                  node-version-file: .node-version
-                  package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
-              id: cache-node_modules
-              with:
-                  path: node_modules
-                  key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-                  restore-keys: |
-                      ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-            - run: npx semantic-release
-              env:
-                  GH_TOKEN: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}
-                  GIT_AUTHOR_NAME: ${{ github.event.head_commit.author.name }}
-                  GIT_AUTHOR_EMAIL: ${{ github.event.head_commit.author.email }}
-                  GIT_GIT_COMMITTER_NAME_NAME: ${{ github.event.head_commit.committer.name }}
-                  GIT_GIT_COMMITTER_NAME_EMAIL: ${{ github.event.head_commit.committer.email }}
+            - run: npm stage publish --provenance --access public

.github/workflows/pull-requests.yml

@@ -10,12 +10,12 @@ jobs:
     Install:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
@@ -26,16 +26,15 @@ jobs:
               run: npm ci
 
     Test:
-        needs:
-            - Install
+        needs: Install
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
@@ -45,36 +44,33 @@ jobs:
             - run: npm run test
 
     Lint:
-        needs:
-            - Install
+        needs: Install
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
                   key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
                   restore-keys: |
                       ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-            - run: npm run fmt
             - run: npm run lint
 
     Typecheck:
-        needs:
-            - Install
+        needs: Install
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
@@ -84,16 +80,15 @@ jobs:
             - run: npm run typecheck
 
     Build:
-        needs:
-            - Install
+        needs: Install
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
@@ -102,35 +97,24 @@ jobs:
                       ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
             - run: npm run build
 
-    Release-dry-run:
-        needs:
-            - Install
-        name: Release (dry-run)
+    Changesets:
+        needs: Install
+        # Changesets no longer exist when releasing
+        if: github.event_name == 'pull_request' && !startsWith(github.event.pull_request.title, '🦋 Changeset release')
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
+            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1
               with:
-                  token: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}
-                  ref: ${{ github.head_ref }}
                   fetch-depth: 0
-            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # https://github.com/actions/setup-node/releases/tag/v6.4.0
+            - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # https://github.com/actions/setup-node/releases/tag/v7.0.0
               with:
                   node-version-file: .node-version
                   package-manager-cache: false
-            - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # https://github.com/actions/cache/releases/tag/v5.0.5
+            - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # https://github.com/actions/cache/releases/tag/v6.1.0
               id: cache-node_modules
               with:
                   path: node_modules
                   key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
                   restore-keys: |
                       ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
-            - name: semantic-release --dry-run
-              run: |
-                  unset GITHUB_ACTIONS
-                  npx semantic-release --dry-run --no-ci --branches "${GITHUB_HEAD_REF}"
-              env:
-                  GH_TOKEN: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}
-                  GIT_AUTHOR_NAME: ${{ github.event.head_commit.author.name }}
-                  GIT_AUTHOR_EMAIL: ${{ github.event.head_commit.author.email }}
-                  GIT_GIT_COMMITTER_NAME_NAME: ${{ github.event.head_commit.committer.name }}
-                  GIT_GIT_COMMITTER_NAME_EMAIL: ${{ github.event.head_commit.committer.email }}
+            - run: npx changeset status --since=${{ github.event.pull_request.base.sha }}