Update readme following security changes + bump dependencies

.github/PULL_REQUEST_TEMPLATE.md

@@ -9,6 +9,6 @@ If it's a _feature_, list things to check and what's impacted
 
 - [ ] Your branch is based on `master`
 - [ ] Your code is unit tested
-- [ ] CircleCI builds are green (coverage and lint)
+- [ ] Github actions are green
 - [ ] Add team "CTI" as "Reviewer" for the PR
 - [ ] Name your PR with the convention `fix|feat|impr(<subject>): description`.

.github/workflows/build-deploy.yml

@@ -0,0 +1,56 @@
+# This workflow will do a clean installation of node dependencies, cache/restore them, build the source code and run tests across different versions of node
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-nodejs
+
+name: Node.js CI
+
+on:
+  push:
+    branches: ['master']
+
+jobs:
+  bootstrap:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '18.x'
+          cache: 'npm'
+      - uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: aircall-everywhere-node-modules{{ checksum "package.json" }}
+      - run: npm ci
+
+  approve:
+    runs-on: ubuntu-latest
+    needs: bootstrap
+    steps:
+      - uses: trstringer/manual-approval@v1
+        with:
+          secret: ${{ secrets.BOT_CREDENTIALS_GITHUB }}
+          approvers: litil
+          minimum-approvals: 1
+          issue-title: 'Deploying to prod from master'
+          issue-body: 'Please approve or deny the deployment of the latest version'
+          exclude-workflow-initiator-as-approver: false
+
+  npm-publish:
+    runs-on: ubuntu-latest
+    needs: approve
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '18.x'
+          cache: 'npm'
+      - uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: aircall-everywhere-node-modules{{ checksum "package.json" }}
+      - run: npm run build
+      - run: ssh-keyscan -H github.com >> ~/.ssh/known_hosts
+      - run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/aircall-everywhere/.npmrc
+      - run: git config --global user.email "[email protected]"
+      - run: git config --global user.name "Guillaume Lambert"
+      - run: npm publish

.github/workflows/test-build.yml

@@ -4,28 +4,72 @@
 name: Node.js CI
 
 on:
-  push:
-    branches: [ "master" ]
   pull_request:
-    branches: [ "master" ]
+    branches: ['master']
 
 jobs:
-  build:
+  bootstrap:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '18.x'
+          cache: 'npm'
+      - uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: aircall-everywhere-node-modules{{ checksum "package.json" }}
+      - run: npm ci
 
+  test:
     runs-on: ubuntu-latest
+    needs: bootstrap
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '18.x'
+          cache: 'npm'
+      - uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: aircall-everywhere-node-modules{{ checksum "package.json" }}
+      - name: Test
+        run: npm test
 
-    strategy:
-      matrix:
-        node-version: [14.x, 16.x, 18.x]
-        # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
+  coverage:
+    runs-on: ubuntu-latest
+    needs: test
+    env:
+      BOT_CREDENTIALS_GITHUB: ${{ secrets.BOT_CREDENTIALS_GITHUB }}
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '18.x'
+          cache: 'npm'
+      - uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: aircall-everywhere-node-modules{{ checksum "package.json" }}
+      - run: sudo apt-get install libjq1 jq bc
+      - run: npm run coverage
+      - run: export PATH="$PATH:~/.local/bin"
+      - run: bash ./scripts/post-coverage-to-github.sh $GITHUB_HEAD_REF
 
+  build-prod:
+    runs-on: ubuntu-latest
+    needs: bootstrap
     steps:
-    - uses: actions/checkout@v3
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
-      with:
-        node-version: ${{ matrix.node-version }}
-        cache: 'npm'
-    - run: npm ci
-    - run: npm run build --if-present
-    - run: npm test
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '18.x'
+          cache: 'npm'
+      - uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: aircall-everywhere-node-modules{{ checksum "package.json" }}
+      - name: Build
+        run: npm run build

README.md

@@ -187,6 +187,9 @@ You can remove a listener added by `on` with this method.
 
 ## `<iframe>` authorizations
 
+> **Notice Regarding Iframing Authorization:** for *security* purpose, we are now whitelisting domains that are iframing us. If you are a customer, please contact [support](https://support.aircall.io/) in order to whitelist your requested domain(s).<br> 
+If you are a *partner* creating an integration, you can ask for permission using [email protected].
+
 Please be aware that `aircall-everywhere` will generate an iframe with following `allow` attributes.
 
 ```html

demo/demo.scss

@@ -308,7 +308,7 @@ pre {
   }
 
   // specific stuff
-  #installation {
+  #iframing-authorization {
     padding-top: 40px;
   }
 

demo/index.html

@@ -52,7 +52,16 @@ <h1>Aircall Everywhere SDK</h1>
       </div>
 
       <div class="container">
-        <h2 id="installation">Installation</h2>
+        <h2 id="iframing-authorization">Iframing Authorization</h2>
+
+        <div class="row">
+            <p>
+              For security purposes, we are now whitelisting domains that use Aircall Everywhere SDK. If you are a customer,  please contact <a href="https://support.aircall.io/">Aircall Support</a>.<br> 
+              If you are a partner creating an integration, you can ask for permission using [email protected].
+            </p>
+        </div>
+
+        <h2>Installation</h2>
 
         <div class="row">
           <div class="left">