chore(release): 1.0.16 [skip ci]

## [1.0.16](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.15...v1.0.16) (2026-03-14)
chore(deps): bump undici from 6.23.0 to 6.24.0 (#168 )
2026-03-14 12:59:14 +00:00 · 2026-03-14 08:01:41 +00:00 · 2026-03-14 09:59:09 +02:00 · 2026-03-13 19:41:47 +02:00 · 2026-03-12 09:08:11 +00:00 · 2026-03-12 11:05:38 +02:00
10 changed files with 44 additions and 36 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,14 +1,14 @@
 ---
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-name: 'CodeQL'
+name: "CodeQL"

 on:
  push:
-    branches: ['main']
+    branches: ["main"]
  pull_request:
-    branches: ['main']
+    branches: ["main"]
  schedule:
-    - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
+    - cron: "30 1 * * 0"
  merge_group:

 permissions: {}
@@ -20,27 +20,15 @@ jobs:
    permissions:
      actions: read
      contents: read
+      packages: read
      security-events: write
-
    strategy:
      fail-fast: false
      matrix:
-        language: ['javascript'] # Add languages used in your actions
-
+        language: ["actions", "javascript"]
    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+      - name: CodeQL Analysis
+        uses: ivuorinen/actions/codeql-analysis@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
        with:
-          languages: ${{ matrix.language }}
+          language: ${{ matrix.language }}
          queries: security-and-quality
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
-        with:
-          category: '/language:${{matrix.language}}'
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -35,4 +35,4 @@ jobs:

      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+        uses: ivuorinen/actions/pr-lint@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -26,7 +26,7 @@ jobs:
    steps:
      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+        uses: ivuorinen/actions/pr-lint@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11

  publish:
    name: Publish
@@ -46,7 +46,7 @@ jobs:
          fetch-depth: 0

      - name: Setup Node.js Environment
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          always-auth: true
          node-version-file: ".nvmrc"
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -20,4 +20,4 @@ jobs:
      issues: write
      pull-requests: write
    steps:
-      - uses: ivuorinen/actions/stale@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+      - uses: ivuorinen/actions/stale@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -38,4 +38,4 @@ jobs:
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: ⤵️ Sync Latest Labels Definitions
-        uses: ivuorinen/actions/sync-labels@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+        uses: ivuorinen/actions/sync-labels@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
--- a/.github/workflows/update-browserslist.yaml
+++ b/.github/workflows/update-browserslist.yaml
@@ -22,7 +22,7 @@ jobs:
          fetch-depth: 0

      - name: Setup Node.js Environment
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          always-auth: true
          node-version-file: '.nvmrc'
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -23,7 +23,7 @@ repos:
        args: [--autofix, --no-sort-keys]

  - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.47.0
+    rev: v0.48.0
    hooks:
      - id: markdownlint
        args: [-c, .markdownlint.json, --fix]
@@ -56,7 +56,7 @@ repos:
      - id: renovate-config-validator

  - repo: https://github.com/bridgecrewio/checkov.git
-    rev: '3.2.506'
+    rev: '3.2.508'
    hooks:
      - id: checkov
        args:
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.0.16](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.15...v1.0.16) (2026-03-14)
+
+## [1.0.15](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.14...v1.0.15) (2026-03-12)
+
+## [1.0.14](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.13...v1.0.14) (2026-03-09)
+
+## [1.0.13](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.12...v1.0.13) (2026-03-07)
+
+## [1.0.12](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.11...v1.0.12) (2026-03-07)
+
+## [1.0.11](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.10...v1.0.11) (2026-03-06)
+
+## [1.0.10](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.9...v1.0.10) (2026-03-05)
+
+## [1.0.9](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.8...v1.0.9) (2026-03-05)
+
+## [1.0.8](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.7...v1.0.8) (2026-03-05)
+
+## [1.0.7](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.6...v1.0.7) (2026-03-04)
+
 ## [1.0.6](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.5...v1.0.6) (2026-03-02)

 ## [1.0.5](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.4...v1.0.5) (2026-03-01)
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@ivuorinen/browserslist-config",
-  "version": "1.0.6",
+  "version": "1.0.16",
  "description": "ivuorinen's shareable configuration for Browserslist.",
  "type": "module",
  "author": {
--- a/yarn.lock
+++ b/yarn.lock
@@ -3730,15 +3730,15 @@ __metadata:
  linkType: hard

 "tar@npm:^7.4.3, tar@npm:^7.5.1, tar@npm:^7.5.4, tar@npm:^7.5.9":
-  version: 7.5.9
-  resolution: "tar@npm:7.5.9"
+  version: 7.5.11
+  resolution: "tar@npm:7.5.11"
  dependencies:
    "@isaacs/fs-minipass": "npm:^4.0.0"
    chownr: "npm:^3.0.0"
    minipass: "npm:^7.1.2"
    minizlib: "npm:^3.1.0"
    yallist: "npm:^5.0.0"
-  checksum: 10c0/e870beb1b2477135ca2abe86b2d18f7b35d0a4e3a37bbc523d3b8f7adca268dfab543f26528a431d569897f8c53a7cac745cdfbc4411c2f89aeeacc652b81b0a
+  checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
  languageName: node
  linkType: hard

@@ -3903,9 +3903,9 @@ __metadata:
  linkType: hard

 "undici@npm:^6.23.0":
-  version: 6.23.0
-  resolution: "undici@npm:6.23.0"
-  checksum: 10c0/d846b3fdfd05aa6081ba1eab5db6bbc21b283042c7a43722b86d1ee2bf749d7c990ceac0c809f9a07ffd88b1b0f4c0f548a8362c035088cb1997d63abdda499c
+  version: 6.24.0
+  resolution: "undici@npm:6.24.0"
+  checksum: 10c0/a97d7f1214b34c5b2802558d06cbed97ff96a27ab6548972ba9d07c13951c69e2e9f2f01581f71c86b74755d2bf92e64091cf8f2c6eba4184f10c6d583e60388
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
semantic-release-bot	1c2d6bccfb	chore(release): 1.0.16 [skip ci] ## [1.0.16](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.15...v1.0.16) (2026-03-14)	2026-03-14 08:01:41 +00:00
dependabot[bot]	a69d6dfceb	chore(deps): bump undici from 6.23.0 to 6.24.0 (#168 )	2026-03-14 09:59:09 +02:00
renovate[bot]	e0deb29ce5	chore(actions): update ivuorinen/actions action to v2026.03.11 (#167 )	2026-03-13 19:41:47 +02:00
semantic-release-bot	06b22ac404	chore(release): 1.0.15 [skip ci] ## [1.0.15](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.14...v1.0.15) (2026-03-12)	2026-03-12 09:08:11 +00:00
dependabot[bot]	79baa500df	chore(deps): bump tar from 7.5.10 to 7.5.11 (#166 ) Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.10 to 7.5.11. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.10...v7.5.11) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.11 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-12 11:05:38 +02:00
semantic-release-bot	33f11bb897	chore(release): 1.0.14 [skip ci] ## [1.0.14](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.13...v1.0.14) (2026-03-09)	2026-03-09 19:22:31 +00:00
renovate[bot]	a94c316cb2	chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.507 → 3.2.508) (#165 )	2026-03-09 21:19:57 +02:00
Ismo Vuorinen	23844bf23e	ci: migrate CodeQL to ivuorinen/actions/codeql-analysis (#162 ) * ci: migrate codeql to composable workflow * fix: correct codeql workflow permissions, cron, and action ref - Set root-level permissions to {} - Add job-level permissions (actions, contents, packages, security-events) - Pin action ref to commit hash with version comment - Fix mangled cron schedule - Clean up workflow structure * fix: correct codeql workflow language, queries, permissions, and action ref - Use 'javascript' instead of 'javascript-typescript' for CodeQL language - Add queries: security-and-quality parameter - Set root-level permissions to {} - Add job-level permissions (actions, contents, packages, security-events) - Pin action ref to commit hash with version comment - Fix mangled cron schedule	2026-03-07 17:52:02 +02:00
semantic-release-bot	073fde30a2	chore(release): 1.0.13 [skip ci] ## [1.0.13](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.12...v1.0.13) (2026-03-07)	2026-03-07 15:47:00 +00:00
renovate[bot]	8c591ffe28	chore(deps): update github/codeql-action action (v4.32.5 → v4.32.6) (#163 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-07 15:44:32 +00:00
semantic-release-bot	49399dea73	chore(release): 1.0.12 [skip ci] ## [1.0.12](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.11...v1.0.12) (2026-03-07)	2026-03-07 15:33:46 +00:00
renovate[bot]	213ddcc1ee	chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.506 → 3.2.507) (#164 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-07 17:31:15 +02:00
semantic-release-bot	3268947c00	chore(release): 1.0.11 [skip ci] ## [1.0.11](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.10...v1.0.11) (2026-03-06)	2026-03-06 14:05:45 +00:00
renovate[bot]	546289b56a	chore(deps): update actions/setup-node action (v6.2.0 → v6.3.0) (#161 )	2026-03-06 16:03:15 +02:00
semantic-release-bot	78e1f33322	chore(release): 1.0.10 [skip ci] ## [1.0.10](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.9...v1.0.10) (2026-03-05)	2026-03-05 10:07:48 +00:00
renovate[bot]	90433a0c2c	chore(deps): update pre-commit hook igorshubovych/markdownlint-cli (v0.47.0 → v0.48.0) (#159 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-05 12:05:12 +02:00
semantic-release-bot	eed32be114	chore(release): 1.0.9 [skip ci] ## [1.0.9](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.8...v1.0.9) (2026-03-05)	2026-03-05 10:02:11 +00:00
dependabot[bot]	88cd3b2fd9	chore(deps): bump tar from 7.5.9 to 7.5.10 (#160 ) Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.9 to 7.5.10. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.9...v7.5.10) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.10 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-05 11:59:26 +02:00
semantic-release-bot	0927c0d942	chore(release): 1.0.8 [skip ci] ## [1.0.8](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.7...v1.0.8) (2026-03-05)	2026-03-05 08:48:57 +00:00
renovate[bot]	bf99721bff	chore(deps): update ivuorinen/actions action (v2026.02.24 → v2026.03.02) (#158 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-05 08:46:21 +00:00
semantic-release-bot	4b960a26e5	chore(release): 1.0.7 [skip ci] ## [1.0.7](https://github.com/ivuorinen/base-configs-browserslist/compare/v1.0.6...v1.0.7) (2026-03-04)	2026-03-04 02:17:08 +00:00
renovate[bot]	5a9f197ceb	chore(deps): update github/codeql-action action (v4.32.4 → v4.32.5) (#157 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-04 02:15:00 +00:00