chore: add dependabot and CODEOWNERS

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @atomicfi/sdk

.github/dependabot.yml

@@ -0,0 +1,74 @@
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    groups:
+      npm-dependencies:
+        patterns:
+          - '*'
+    ignore:
+      # eslint 10 isn't supported by @typescript-eslint/parser v8 yet
+      - dependency-name: 'eslint'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@eslint/js'
+        update-types: ['version-update:semver-major']
+      # typescript 6 deprecates baseUrl and other config we use
+      - dependency-name: 'typescript'
+        update-types: ['version-update:semver-major']
+
+  - package-ecosystem: 'npm'
+    directory: '/example'
+    schedule:
+      interval: 'weekly'
+    groups:
+      npm-dependencies:
+        patterns:
+          - '*'
+    ignore:
+      # Expo SDK 55 manages these via its compatibility matrix — only
+      # patch updates within the SDK's pinned versions are safe. Minor
+      # and major bumps must accompany an Expo SDK upgrade.
+      - dependency-name: 'expo'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: 'expo-*'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: 'eslint-config-expo'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: 'react'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: 'react-native'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: 'react-native-safe-area-context'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: 'react-native-screens'
+        update-types:
+          ['version-update:semver-major', 'version-update:semver-minor']
+      # Same ecosystem-compat issues as the parent package
+      - dependency-name: 'eslint'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'typescript'
+        update-types: ['version-update:semver-major']
+
+  - package-ecosystem: 'gradle'
+    directory: '/android'
+    schedule:
+      interval: 'daily'
+    allow:
+      - dependency-name: 'financial.atomic:transact'
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    groups:
+      github-actions:
+        patterns:
+          - '*'

.github/workflows/build.yml

@@ -45,6 +45,9 @@ jobs:
       - name: 🧹 Run ESLint
         run: yarn lint
 
+      - name: ✅ Run unit tests
+        run: yarn test
+
   build-android:
     needs: lint
     runs-on: ubuntu-latest

.github/workflows/security.yml

@@ -4,7 +4,6 @@ on:
   pull_request:
     branches:
       - master
-    types: [opened, ready_for_review, synchronize]
 
 jobs:
   semgrep:
@@ -24,7 +23,7 @@ jobs:
       - name: Install node
         uses: actions/setup-node@v4
         with:
-          node-version-file: '.nvmrc'
+          node-version-file: ".nvmrc"
           cache: yarn
       - name: yarn install
         run: yarn install --frozen-lockfile

CONTRIBUTING.md

@@ -81,13 +81,9 @@ Our pre-commit hooks verify that the linter and tests pass when committing.
 
 ### Publishing to npm
 
-We use [release-it](https://github.com/release-it/release-it) to make it easier to publish new versions. It handles common tasks like bumping version based on semver, creating tags and releases etc.
+Publishing is automated. Creating a GitHub Release on `master` triggers the [publish workflow](.github/workflows/publish.yml), which updates `package.json` to the release tag and publishes to npm via [trusted publishing](https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions).
 
-To publish new versions, run the following:
-
-```sh
-yarn release
-```
+See [`docs/RELEASE.md`](docs/RELEASE.md) for the full release flow and [`RELEASE_TEMPLATE.md`](RELEASE_TEMPLATE.md) for the release notes format.
 
 ### Scripts
 

android/build.gradle

@@ -37,9 +37,6 @@ def getExtOrIntegerDefault(name) {
   return rootProject.ext.has(name) ? rootProject.ext.get(name) : (project.properties["TransactReactNative_" + name]).toInteger()
 }
 
-// Update this value to the latest Android SDK version published on Maven
-def transact_version = "3.18.2"
-
 android {
   namespace "com.atomicfi.transactreactnative"
   compileSdkVersion getExtOrIntegerDefault("compileSdkVersion")
@@ -52,7 +49,7 @@ android {
     minSdkVersion getExtOrIntegerDefault("minSdkVersion")
     targetSdkVersion getExtOrIntegerDefault("targetSdkVersion")
     buildConfigField "boolean", "IS_NEW_ARCHITECTURE_ENABLED", isNewArchitectureEnabled().toString()
-    buildConfigField "String", "TRANSACT_VERSION", "\"$transact_version\""
+    buildConfigField "String", "TRANSACT_VERSION", "\"$TransactReactNative_transactVersion\""
   }
   buildTypes {
     release {
@@ -86,7 +83,7 @@ dependencies {
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
 
   // transact deps end
-  implementation "financial.atomic:transact:$transact_version"
+  implementation "financial.atomic:transact:$TransactReactNative_transactVersion"
 }
 
 if (isNewArchitectureEnabled()) {

android/gradle.properties

@@ -16,5 +16,6 @@ TransactReactNative_kotlinVersion=2.1.21
 TransactReactNative_minSdkVersion=24
 TransactReactNative_ndkversion=21.4.7075529
 TransactReactNative_targetSdkVersion=35
+TransactReactNative_transactVersion=3.18.2
 android.enableJetifier=true
 android.useAndroidX=true

eslint.config.mjs

@@ -40,16 +40,7 @@ export default [
       ecmaVersion: 'latest',
       sourceType: 'module',
     },
-    settings: {
-      react: {
-        version: 'detect',
-      },
-    },
     rules: {
-      // React rules
-      'react/react-in-jsx-scope': 'off',
-
-      // Relax strict rules - convert to warnings or disable
       'no-undef': 'off',
       'no-unused-vars': 'warn',
       'no-func-assign': 'off',

example/app.json

@@ -29,15 +29,7 @@
       "favicon": "./assets/favicon.png"
     },
     "plugins": [
-      "expo-dev-client",
-      [
-        "expo-build-properties",
-        {
-          "ios": {
-            "useFrameworks": "static"
-          }
-        }
-      ]
+      "expo-dev-client"
     ],
     "developmentClient": {
       "silentLaunch": false

example/package.json

@@ -12,9 +12,9 @@
   },
   "dependencies": {
     "@atomicfi/transact-react-native": "link:..",
-    "@react-navigation/native": "^7.1.14",
-    "@react-navigation/native-stack": "^7.3.21",
-    "expo": "^55.0.0",
+    "@react-navigation/native": "^7.2.2",
+    "@react-navigation/native-stack": "^7.14.12",
+    "expo": "~55.0.18",
     "expo-build-properties": "~55.0.13",
     "expo-dev-client": "~55.0.28",
     "expo-status-bar": "~55.0.5",
@@ -25,14 +25,14 @@
     "react-native-screens": "~4.23.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.25.2",
-    "@types/react": "~19.2.10",
-    "eslint": "^9.0.0",
+    "@babel/core": "^7.29.0",
+    "@types/react": "~19.2.14",
+    "eslint": "^9.39.4",
     "eslint-config-expo": "~55.0.0",
-    "eslint-config-prettier": "^10.1.5",
-    "eslint-plugin-prettier": "^5.5.1",
-    "prettier": "^3.6.2",
-    "typescript": "~5.9.2"
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-prettier": "^5.5.5",
+    "prettier": "^3.8.3",
+    "typescript": "~5.9.3"
   },
   "private": true
 }