Update ast-cli to 2.3.55 and address vulnerability fixes (#1028)

* updating ast-cli version to 2.3.55

* vulnerability fixes

* brace expansion cve fix

* changing variable name

* removing bot review actions

Author: cx-atish-jadhav

.github/workflows/ast-cli-team-review.yml

@@ -34,8 +34,16 @@ jobs:
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 22.11.0
-          registry-url: https://npm.pkg.github.com/
+          registry-url: https://npm.echohq.com/
+      - name: Configure echohq auth (both hosts)
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
+        run: |
+          npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
+          npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
       - run: npm ci
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
       - name: Code Linting
         run: npm run lint
       - run: npm run build --if-present

.github/workflows/auto-merge-pr.yml

@@ -101,6 +101,14 @@ jobs:
           node-version: 22.11.0
           registry-url: https://npm.echohq.com/
 
+      # CONFIGURE ECHOHQ AUTH
+      - name: Configure echohq auth (both hosts)
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
+        run: |
+          npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
+          npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
+
       # CONFIGURE GITHUB PACKAGES AUTH FOR PUBLISH
       - name: Configure GitHub Packages auth
         env:
@@ -145,6 +153,8 @@ jobs:
 
       # RUN NPM INSTALL AND BUILD
       - name: NPM ci and build
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
         run: |
           npm ci
           npm run build

.github/workflows/ci.yml

@@ -1,4 +1,6 @@
 # Default registry for most packages
 registry=https://npm.echohq.com/
-
+//npm.echohq.com/:_authToken=
+//packages.echohq.com/:_authToken=
+always-auth=true
 ignore-scripts=true

.github/workflows/pr-automation.yml

@@ -1 +1 @@
-2.3.54
+2.3.55

.github/workflows/release.yml

@@ -44,10 +44,10 @@
     "flatted": "^3.4.2",
     "picomatch": "2.3.2",
     "serialize-javascript": "6.0.2",
-    "brace-expansion": "2.0.3",
+    "brace-expansion": "5.0.7",
     "lodash": "4.18.0",
     "uuid": "14.0.0",
-    "js-yaml": "4.2.0"
+    "js-yaml": "4.3.0"
   },
   "publishConfig": {
     "registry": "https://npm.pkg.github.com"

.npmrc

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:776d9864c0104e1d0023641ef931bd1c58478cf56768ce77f2bfbfd6e9e64493
-size 80568482
+oid sha256:d76d1d464af46b0dc5976f8c79560344d86e1641b6eb1959e7a8120f5eab7293
+size 83103906