Sign Windows build and bump version (#203)

Use code signing for our Windows build.

Author: Corentin Mors

.github/workflows/release.yml

@@ -41,11 +41,44 @@ jobs:
                   path: bundle/dcli-${{ matrix.settings.target }}${{ matrix.settings.extension }}
                   retention-days: 1
 
-    release:
+    sign:
         runs-on: ubuntu-latest
         needs: build
+        steps:
+            - name: Sign Artifact with CodeSignTool
+              uses: sslcom/esigner-codesign@develop
+              with:
+                  command: sign
+                  username: ${{ secrets.ES_USERNAME }}
+                  password: ${{ secrets.ES_PASSWORD }}
+                  # Credential ID for signing certificate.
+                  credential_id: ${{ secrets.CREDENTIAL_ID }}
+                  # OAuth TOTP Secret (https://www.ssl.com/how-to/automate-esigner-ev-code-signing)
+                  totp_secret: ${{ secrets.ES_TOTP_SECRET }}
+                  # Path of code object to be signed
+                  file_path: ${GITHUB_WORKSPACE}/bundle/dcli-win-x64.exe
+                  # Directory where signed code object(s) will be written.
+                  output_path: ${GITHUB_WORKSPACE}/signed
+                  malware_block: false
+                  environment_name: PROD
+
+            - run: mv signed/dcli-win-x64.exe signed/dcli-win-x64-signed.exe
+
+            - name: Archive binary artifact
+              uses: actions/upload-artifact@v3
+              with:
+                  name: dcli-win-x64-signed
+                  path: signed/dcli-win-x64-signed.exe
+                  retention-days: 1
+
+    release:
+        runs-on: ubuntu-latest
+        needs:
+            - build
+            - sign
         steps:
             - uses: actions/checkout@v3
+
             - name: Download all artifacts
               uses: actions/download-artifact@v3
               with:
@@ -62,3 +95,4 @@ jobs:
                       artifacts/dcli-linux-x64/dcli-linux-x64
                       artifacts/dcli-macos-x64/dcli-macos-x64
                       artifacts/dcli-win-x64/dcli-win-x64.exe
+                      artifacts/dcli-win-x64-signed/dcli-win-x64-signed.exe

.mocharc.json

@@ -1,5 +1,6 @@
 {
-  "extension": ["ts"],
-  "spec": "src/**/test.ts",
-  "loader": "ts-node/esm"
+    "extension": ["ts"],
+    "spec": "src/**/test.ts",
+    "loader": "ts-node/esm",
+    "require": ["ts-node/register"]
 }

.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs

@@ -1,9 +1,7 @@
-nodeLinker: node-modules
+compressionLevel: mixed
+
+enableGlobalCache: false
 
-plugins:
-  - path: .yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs
-    spec: "@yarnpkg/plugin-workspace-tools"
-  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
-    spec: "@yarnpkg/plugin-interactive-tools"
+nodeLinker: node-modules
 
-yarnPath: .yarn/releases/yarn-3.6.3.cjs
+yarnPath: .yarn/releases/yarn-4.0.2.cjs

.yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs

@@ -1,6 +1,6 @@
 {
     "name": "@dashlane/cli",
-    "version": "1.15.1",
+    "version": "1.15.2",
     "description": "Manage your Dashlane vault through a CLI tool",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
@@ -38,46 +38,46 @@
     "contributors": [],
     "license": "Apache-2.0",
     "devDependencies": {
-        "@types/async": "^3.2.20",
-        "@types/better-sqlite3": "^7.6.4",
-        "@types/chai": "^4.3.6",
-        "@types/inquirer": "^8.2.6",
-        "@types/mocha": "^10.0.1",
-        "@types/node": "^18.17.14",
-        "@typescript-eslint/eslint-plugin": "^6.6.0",
-        "@typescript-eslint/parser": "^6.6.0",
-        "chai": "^4.3.8",
-        "eslint": "^8.48.0",
-        "eslint-config-prettier": "^9.0.0",
-        "eslint-plugin-import": "^2.28.1",
+        "@types/async": "^3.2.24",
+        "@types/better-sqlite3": "^7.6.8",
+        "@types/chai": "^4.3.11",
+        "@types/inquirer": "^8.2.10",
+        "@types/mocha": "^10.0.6",
+        "@types/node": "^18.19.7",
+        "@typescript-eslint/eslint-plugin": "^6.19.0",
+        "@typescript-eslint/parser": "^6.19.0",
+        "chai": "^4.4.1",
+        "eslint": "^8.56.0",
+        "eslint-config-prettier": "^9.1.0",
+        "eslint-plugin-import": "^2.29.1",
         "husky": "^8.0.3",
         "mocha": "^10.2.0",
         "pkg": "^5.8.1",
         "prettier": "^3.0.3",
-        "ts-node": "^10.9.1",
+        "ts-node": "^10.9.2",
         "typescript": "^5.2.2"
     },
     "dependencies": {
-        "@json2csv/plainjs": "^7.0.3",
-        "@json2csv/transforms": "^7.0.3",
+        "@json2csv/plainjs": "^7.0.4",
+        "@json2csv/transforms": "^7.0.4",
         "@napi-rs/clipboard": "^1.1.1",
         "@napi-rs/keyring": "^1.1.3",
-        "@node-rs/argon2": "^1.5.2",
-        "better-sqlite3": "^8.6.0",
-        "commander": "^11.0.0",
+        "@node-rs/argon2": "^1.7.1",
+        "better-sqlite3": "^8.7.0",
+        "commander": "^11.1.0",
         "got": "^11.8.6",
         "inquirer": "^8.2.6",
         "inquirer-search-list": "^1.2.6",
         "jsonpath-plus": "^7.2.0",
         "otplib": "^12.0.1",
-        "playwright-core": "^1.37.1",
-        "winston": "^3.10.0",
+        "playwright-core": "^1.40.1",
+        "winston": "^3.11.0",
         "xml-js": "^1.6.11",
         "zlib": "^1.0.5"
     },
     "engines": {
         "node": ">=18",
-        "yarn": ">=3.6.0"
+        "yarn": ">=4.0.0"
     },
-    "packageManager": "yarn@3.6.3"
+    "packageManager": "yarn@4.0.2"
 }

.yarn/releases/yarn-3.6.3.cjs

@@ -1,6 +1,6 @@
 import { CliVersion } from './types';
 
-export const CLI_VERSION: CliVersion = { major: 1, minor: 15, patch: 1 };
+export const CLI_VERSION: CliVersion = { major: 1, minor: 15, patch: 2 };
 export const breakingChangesVersions: CliVersion[] = [];
 
 export const cliVersionToString = (version: CliVersion): string => {