ci: migrate codeql to composable workflow

## [1.0.5](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.4...v1.0.5) (2026-03-07)

.github/workflows/codeql.yml

@@ -1,14 +1,13 @@
 ---
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-name: 'CodeQL'
-
+name: "CodeQL"
 on:
   push:
-    branches: ['main']
+    branches: ["main"]
   pull_request:
-    branches: ['main']
+    branches: ["main"]
   schedule:
-    - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
+    - cron: "    - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday"
   merge_group:
 
 permissions:
@@ -21,26 +20,12 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       security-events: write
-
     strategy:
       fail-fast: false
       matrix:
-        language: ['javascript'] # Add languages used in your actions
-
+        language: ["actions", "javascript-typescript"]
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
+      - name: CodeQL Analysis
+        uses: ivuorinen/actions/codeql-analysis@main
         with:
-          languages: ${{ matrix.language }}
-          queries: security-and-quality
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
-        with:
-          category: '/language:${{matrix.language}}'
+          language: ${{ matrix.language }}

.github/workflows/publish.yml

@@ -46,7 +46,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js Environment
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           always-auth: true
           node-version-file: ".nvmrc"

.pre-commit-config.yaml

@@ -51,12 +51,12 @@ repos:
         args: ['-shellcheck=']
 
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 43.4.2
+    rev: 43.56.0
     hooks:
       - id: renovate-config-validator
 
   - repo: https://github.com/bridgecrewio/checkov.git
-    rev: '3.2.506'
+    rev: '3.2.507'
     hooks:
       - id: checkov
         args:

CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.0.5](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.4...v1.0.5) (2026-03-07)
+
+## [1.0.4](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.3...v1.0.4) (2026-03-07)
+
+## [1.0.3](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.2...v1.0.3) (2026-03-05)
+
 ## [1.0.2](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.1...v1.0.2) (2026-03-05)
 
 ## [1.0.1](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.0...v1.0.1) (2026-02-26)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ivuorinen/prettier-config",
-  "version": "1.0.2",
+  "version": "1.0.5",
   "type": "module",
   "description": "ivuorinen's shareable configuration for Prettier.",
   "author": {