CI hardening: remove npm-publish.yml, add Python 3.13, project.urls, persist-credentials, permissions (#22)

Author: Coding-Dev-Tools

.github/workflows/ci.yml

@@ -7,15 +7,20 @@ on:
   pull_request:
     branches: [master]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.11", "3.12"]
+        python-version: ["3.11", "3.12", "3.13"]
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
@@ -42,6 +47,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5

.github/workflows/npm-publish.yml

@@ -10,7 +10,6 @@ readme = "README.md"
 requires-python = ">=3.10"
 license = "MIT"
 authors = [{name = "Revenue Holdings"}]
-urls = {Homepage = "https://github.com/Coding-Dev-Tools/deadcode", Repository = "https://github.com/Coding-Dev-Tools/deadcode"}
 keywords = ["dead-code", "unused-exports", "typescript", "react", "nextjs", "cli", "css", "tree-shaking"]
 classifiers = [
     "Development Status :: 4 - Beta",
@@ -38,6 +37,13 @@ dev = [
     "ruff>=0.4.0",
 ]
 
+[project.urls]
+Homepage = "https://github.com/Coding-Dev-Tools/deadcode"
+Documentation = "https://coding-dev-tools.github.io/deadcode"
+Repository = "https://github.com/Coding-Dev-Tools/deadcode"
+Issues = "https://github.com/Coding-Dev-Tools/deadcode/issues"
+Changelog = "https://github.com/Coding-Dev-Tools/deadcode/releases"
+
 [project.scripts]
 deadcode = "deadcode.cli:cli"