4 Commits

Author SHA1 Message Date
dependabot[bot]
3807ab1f39 chore(deps): bump tar from 7.5.10 to 7.5.11
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.10 to 7.5.11.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.10...v7.5.11)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-11 21:35:39 +00:00
semantic-release-bot
6c1b52310a chore(release): 1.0.6 [skip ci]
## [1.0.6](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.5...v1.0.6) (2026-03-09)
2026-03-09 19:21:51 +00:00
renovate[bot]
a9a1046999 chore(deps): update pre-commit hook bridgecrewio/checkov (3.2.507 → 3.2.508) (#140) 2026-03-09 21:19:32 +02:00
5c135f50dd ci: migrate CodeQL to ivuorinen/actions/codeql-analysis (#139)
* ci: migrate codeql to composable workflow

* fix: correct codeql workflow permissions, cron, and action ref

- Set root-level permissions to {}
- Add job-level permissions (actions, contents, packages, security-events)
- Pin action ref to commit hash with version comment
- Fix mangled cron schedule
- Clean up workflow structure

* fix: correct codeql workflow language, queries, permissions, and action ref

- Use 'javascript' instead of 'javascript-typescript' for CodeQL language
- Add queries: security-and-quality parameter
- Set root-level permissions to {}
- Add job-level permissions (actions, contents, packages, security-events)
- Pin action ref to commit hash with version comment
- Fix mangled cron schedule
2026-03-07 17:59:43 +02:00
5 changed files with 19 additions and 29 deletions

View File

@@ -1,46 +1,34 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: 'CodeQL'
name: "CodeQL"
on:
push:
branches: ['main']
branches: ["main"]
pull_request:
branches: ['main']
branches: ["main"]
schedule:
- cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
- cron: "30 1 * * 0"
merge_group:
permissions:
actions: read
contents: read
permissions: {}
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
packages: read
security-events: write
strategy:
fail-fast: false
matrix:
language: ['javascript'] # Add languages used in your actions
language: ["actions", "javascript"]
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Initialize CodeQL
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
- name: CodeQL Analysis
uses: ivuorinen/actions/codeql-analysis@97105fc2a909360678588cb50caf0be5144be486 # v2026.03.06
with:
languages: ${{ matrix.language }}
language: ${{ matrix.language }}
queries: security-and-quality
- name: Autobuild
uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
with:
category: '/language:${{matrix.language}}'

View File

@@ -56,7 +56,7 @@ repos:
- id: renovate-config-validator
- repo: https://github.com/bridgecrewio/checkov.git
rev: '3.2.507'
rev: '3.2.508'
hooks:
- id: checkov
args:

View File

@@ -3,6 +3,8 @@
All notable changes to this project will be documented in this file. See
[Conventional Commits](https://conventionalcommits.org) for commit guidelines.
## [1.0.6](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.5...v1.0.6) (2026-03-09)
## [1.0.5](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.4...v1.0.5) (2026-03-07)
## [1.0.4](https://github.com/ivuorinen/base-configs-prettier/compare/v1.0.3...v1.0.4) (2026-03-07)

View File

@@ -1,6 +1,6 @@
{
"name": "@ivuorinen/prettier-config",
"version": "1.0.5",
"version": "1.0.6",
"type": "module",
"description": "ivuorinen's shareable configuration for Prettier.",
"author": {

View File

@@ -3694,15 +3694,15 @@ __metadata:
linkType: hard
"tar@npm:^7.4.3, tar@npm:^7.5.1, tar@npm:^7.5.4, tar@npm:^7.5.9":
version: 7.5.10
resolution: "tar@npm:7.5.10"
version: 7.5.11
resolution: "tar@npm:7.5.11"
dependencies:
"@isaacs/fs-minipass": "npm:^4.0.0"
chownr: "npm:^3.0.0"
minipass: "npm:^7.1.2"
minizlib: "npm:^3.1.0"
yallist: "npm:^5.0.0"
checksum: 10c0/ed905e4b33886377df6e9206e5d1bd34458c21666e27943f946799416f86348c938590d573d6a69312cb29c583b122647a64ec92782f2b7e24e68d985dd72531
checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
languageName: node
linkType: hard