4 Commits

Author SHA1 Message Date
semantic-release-bot
1ec1389448 chore(release): 1.1.12 [skip ci]
## [1.1.12](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.11...v1.1.12) (2026-03-12)
2026-03-12 09:08:57 +00:00
dependabot[bot]
ecaca02251 chore(deps): bump tar from 7.5.10 to 7.5.11 (#137)
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.10 to 7.5.11.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.10...v7.5.11)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-12 11:06:37 +02:00
renovate[bot]
4bc6306b61 chore(actions): update ivuorinen/actions action to v2026.03.10 (#136)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-10 23:03:07 +00:00
114284910a ci: migrate CodeQL to ivuorinen/actions/codeql-analysis (#135)
* ci: migrate codeql to composable workflow

* fix: correct codeql workflow language, queries, permissions, and action ref

- Use 'javascript' instead of 'javascript-typescript' for CodeQL language
- Add queries: security-and-quality parameter
- Set root-level permissions to {}
- Add job-level permissions (actions, contents, packages, security-events)
- Pin action ref to commit hash with version comment
- Fix mangled cron schedule
2026-03-07 17:52:39 +02:00
8 changed files with 19 additions and 29 deletions

View File

@@ -8,39 +8,27 @@ on:
pull_request:
branches: ["main"]
schedule:
- cron: "30 1 * * 0" # Run at 1:30 AM UTC every Sunday
- cron: "30 1 * * 0"
merge_group:
permissions:
actions: read
contents: read
permissions: {}
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
packages: read
security-events: write
strategy:
fail-fast: false
matrix:
language: ["javascript"] # Add languages used in your actions
language: ["actions", "javascript"]
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Initialize CodeQL
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
- name: CodeQL Analysis
uses: ivuorinen/actions/codeql-analysis@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10
with:
languages: ${{ matrix.language }}
language: ${{ matrix.language }}
queries: security-and-quality
- name: Autobuild
uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
with:
category: "/language:${{matrix.language}}"

View File

@@ -27,4 +27,4 @@ jobs:
steps:
- name: Run PR Lint
# https://github.com/ivuorinen/actions
uses: ivuorinen/actions/pr-lint@6e8f2aae9d0846d901d9eba15b8e94a2900573dc # v2026.03.02
uses: ivuorinen/actions/pr-lint@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10

View File

@@ -26,7 +26,7 @@ jobs:
steps:
- name: Run PR Lint
# https://github.com/ivuorinen/actions
uses: ivuorinen/actions/pr-lint@6e8f2aae9d0846d901d9eba15b8e94a2900573dc # v2026.03.02
uses: ivuorinen/actions/pr-lint@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10
publish:
name: Publish

View File

@@ -23,4 +23,4 @@ jobs:
issues: write
pull-requests: write
steps:
- uses: ivuorinen/actions/stale@6e8f2aae9d0846d901d9eba15b8e94a2900573dc # v2026.03.02
- uses: ivuorinen/actions/stale@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10

View File

@@ -38,4 +38,4 @@ jobs:
with:
token: ${{ secrets.GITHUB_TOKEN }}
- name: ⤵️ Sync Latest Labels Definitions
uses: ivuorinen/actions/sync-labels@6e8f2aae9d0846d901d9eba15b8e94a2900573dc # v2026.03.02
uses: ivuorinen/actions/sync-labels@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10

View File

@@ -3,6 +3,8 @@
All notable changes to this project will be documented in this file. See
[Conventional Commits](https://conventionalcommits.org) for commit guidelines.
## [1.1.12](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.11...v1.1.12) (2026-03-12)
## [1.1.11](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.10...v1.1.11) (2026-03-07)
## [1.1.10](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.9...v1.1.10) (2026-03-05)

View File

@@ -1,6 +1,6 @@
{
"name": "@ivuorinen/semantic-release-config",
"version": "1.1.11",
"version": "1.1.12",
"description": "ivuorinen's shareable configuration for semantic-release.",
"author": {
"name": "Ismo Vuorinen",

View File

@@ -3674,15 +3674,15 @@ __metadata:
linkType: hard
"tar@npm:^7.4.3, tar@npm:^7.5.1, tar@npm:^7.5.4, tar@npm:^7.5.9":
version: 7.5.10
resolution: "tar@npm:7.5.10"
version: 7.5.11
resolution: "tar@npm:7.5.11"
dependencies:
"@isaacs/fs-minipass": "npm:^4.0.0"
chownr: "npm:^3.0.0"
minipass: "npm:^7.1.2"
minizlib: "npm:^3.1.0"
yallist: "npm:^5.0.0"
checksum: 10c0/ed905e4b33886377df6e9206e5d1bd34458c21666e27943f946799416f86348c938590d573d6a69312cb29c583b122647a64ec92782f2b7e24e68d985dd72531
checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
languageName: node
linkType: hard