Update workflow: best practices, permissions, caching, and modern actions

Author: EchoSingh

.github/workflows/todoist-gist.yml

@@ -1,26 +1,33 @@
 name: Update Todoist Gist
 
 on:
+  push:
+    branches:
+      - main
   schedule:
     - cron: '0 * * * *'  # every hour
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+
 jobs:
   update-gist:
     runs-on: ubuntu-latest
-
     steps:
-      - name: Checkout repo
-        uses: actions/checkout@v3
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: '20'
-
-      - name: Install dependencies
-        run: npm install
-
+          node-version: 20
+      - name: Cache node modules
+        uses: actions/cache@v4
+        with:
+          path: node_modules
+          key: node_modules-${{ hashFiles('package-lock.json') }}
+          restore-keys: node_modules-
+      - run: npm install
       - name: Run script
         run: node update-gist.js
         env: