chore(release): 1.1.12 [skip ci]

## [1.1.12](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.11...v1.1.12) (2026-03-12)
chore(deps): bump tar from 7.5.10 to 7.5.11 (#137 )
2026-03-13 06:58:59 +00:00 · 2026-03-12 09:08:57 +00:00 · 2026-03-12 11:06:37 +02:00 · 2026-03-10 23:03:07 +00:00 · 2026-03-07 17:52:39 +02:00 · 2026-03-07 02:47:30 +00:00
9 changed files with 47 additions and 43 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -8,39 +8,27 @@ on:
  pull_request:
    branches: ["main"]
  schedule:
-    - cron: "30 1 * * 0" # Run at 1:30 AM UTC every Sunday
+    - cron: "30 1 * * 0"
  merge_group:

-permissions:
-  actions: read
-  contents: read
+permissions: {}

 jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    permissions:
+      actions: read
+      contents: read
+      packages: read
      security-events: write
-
    strategy:
      fail-fast: false
      matrix:
-        language: ["javascript"] # Add languages used in your actions
-
+        language: ["actions", "javascript"]
    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+      - name: CodeQL Analysis
+        uses: ivuorinen/actions/codeql-analysis@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10
        with:
-          languages: ${{ matrix.language }}
+          language: ${{ matrix.language }}
          queries: security-and-quality
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
-        with:
-          category: "/language:${{matrix.language}}"
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -27,4 +27,4 @@ jobs:
    steps:
      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
+        uses: ivuorinen/actions/pr-lint@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -26,7 +26,7 @@ jobs:
    steps:
      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
+        uses: ivuorinen/actions/pr-lint@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10

  publish:
    name: Publish
@@ -46,7 +46,7 @@ jobs:
          fetch-depth: 0

      - name: Setup Node.js Environment
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          always-auth: true
          node-version-file: ".nvmrc"
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -23,4 +23,4 @@ jobs:
      issues: write
      pull-requests: write
    steps:
-      - uses: ivuorinen/actions/stale@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
+      - uses: ivuorinen/actions/stale@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -38,4 +38,4 @@ jobs:
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: ⤵️ Sync Latest Labels Definitions
-        uses: ivuorinen/actions/sync-labels@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
+        uses: ivuorinen/actions/sync-labels@9b5ae9da1b4cb135aee0ca52403e3924fba6e84f # v2026.03.10
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -17,7 +17,7 @@ repos:
        args: [--autofix, --no-sort-keys]

  - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.47.0
+    rev: v0.48.0
    hooks:
      - id: markdownlint
        args: [-c, .markdownlint.json, --fix]
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.1.12](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.11...v1.1.12) (2026-03-12)
+
+## [1.1.11](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.10...v1.1.11) (2026-03-07)
+
+## [1.1.10](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.9...v1.1.10) (2026-03-05)
+
+## [1.1.9](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.8...v1.1.9) (2026-03-05)
+
+## [1.1.8](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.7...v1.1.8) (2026-03-05)
+
+## [1.1.7](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.6...v1.1.7) (2026-03-05)
+
+## [1.1.6](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.5...v1.1.6) (2026-03-05)
+
+## [1.1.5](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.4...v1.1.5) (2026-03-04)
+
 ## [1.1.4](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.3...v1.1.4) (2026-03-02)

 ## [1.1.3](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.2...v1.1.3) (2026-02-26)
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@ivuorinen/semantic-release-config",
-  "version": "1.1.4",
+  "version": "1.1.12",
  "description": "ivuorinen's shareable configuration for semantic-release.",
  "author": {
    "name": "Ismo Vuorinen",
--- a/yarn.lock
+++ b/yarn.lock
@@ -1100,17 +1100,17 @@ __metadata:
  linkType: hard

 "conventional-changelog-angular@npm:^8.0.0":
-  version: 8.2.0
-  resolution: "conventional-changelog-angular@npm:8.2.0"
+  version: 8.3.0
+  resolution: "conventional-changelog-angular@npm:8.3.0"
  dependencies:
    compare-func: "npm:^2.0.0"
-  checksum: 10c0/15f4d455df3152db62d3a7e92c83abe2438721e4b6736cae20b1ce17162fa0aca098b3a62f4f50d3541e4aa300f89f8768d7ba45b83cca77336ffb3700669e9e
+  checksum: 10c0/bab87fa741a25e4fb623e2629912a5e592de5ed616398bee0cd9779dc950aae2a78ac48a6f4268cbb5f5544bb33644e01c7b40cea378bb9763ae5304cc22efc2
  languageName: node
  linkType: hard

 "conventional-changelog-writer@npm:^8.0.0":
-  version: 8.3.0
-  resolution: "conventional-changelog-writer@npm:8.3.0"
+  version: 8.4.0
+  resolution: "conventional-changelog-writer@npm:8.4.0"
  dependencies:
    "@simple-libs/stream-utils": "npm:^1.2.0"
    conventional-commits-filter: "npm:^5.0.0"
@@ -1119,7 +1119,7 @@ __metadata:
    semver: "npm:^7.5.2"
  bin:
    conventional-changelog-writer: dist/cli/index.js
-  checksum: 10c0/e0ce001c54085a72504c1af6a6eade4ddf2ccf1e155ba8bf80bb03228b36c719b8a1f389d222c13f32f224d0ac448e0bed40222ebfbfe9a813e0b23d6162d258
+  checksum: 10c0/d657bf74c470e5d515d3a07814d266e6e2aea018e6867bfefa4bc486bb3f948b47b01936d65e46b3090111823364c21c201f9fbe875b1fc805cdf884bb032bc1
  languageName: node
  linkType: hard

@@ -1157,8 +1157,8 @@ __metadata:
  linkType: hard

 "cosmiconfig@npm:^9.0.0":
-  version: 9.0.0
-  resolution: "cosmiconfig@npm:9.0.0"
+  version: 9.0.1
+  resolution: "cosmiconfig@npm:9.0.1"
  dependencies:
    env-paths: "npm:^2.2.1"
    import-fresh: "npm:^3.3.0"
@@ -1169,7 +1169,7 @@ __metadata:
  peerDependenciesMeta:
    typescript:
      optional: true
-  checksum: 10c0/1c1703be4f02a250b1d6ca3267e408ce16abfe8364193891afc94c2d5c060b69611fdc8d97af74b7e6d5d1aac0ab2fb94d6b079573146bc2d756c2484ce5f0ee
+  checksum: 10c0/a5d4d95599687532ee072bca60170133c24d4e08cd795529e0f22c6ce5fde9409eaf4f26e36e3d671f43270ef858fc68f3c7b0ec28e58fac7ddebda5b7725306
  languageName: node
  linkType: hard

@@ -1488,13 +1488,13 @@ __metadata:
  linkType: hard

 "fs-extra@npm:^11.0.0":
-  version: 11.3.3
-  resolution: "fs-extra@npm:11.3.3"
+  version: 11.3.4
+  resolution: "fs-extra@npm:11.3.4"
  dependencies:
    graceful-fs: "npm:^4.2.0"
    jsonfile: "npm:^6.0.1"
    universalify: "npm:^2.0.0"
-  checksum: 10c0/984924ff4104e3e9f351b658a864bf3b354b2c90429f57aec0acd12d92c4e6b762cbacacdffb4e745b280adce882e1f980c485d9f02c453f769ab4e7fc646ce3
+  checksum: 10c0/e08276f767a62496ae97d711aaa692c6a478177f24a85979b6a2881c9db9c68b8c2ad5da0bcf92c0b2a474cea6e935ec245656441527958fd8372cb647087df0
  languageName: node
  linkType: hard

@@ -3674,15 +3674,15 @@ __metadata:
  linkType: hard

 "tar@npm:^7.4.3, tar@npm:^7.5.1, tar@npm:^7.5.4, tar@npm:^7.5.9":
-  version: 7.5.9
-  resolution: "tar@npm:7.5.9"
+  version: 7.5.11
+  resolution: "tar@npm:7.5.11"
  dependencies:
    "@isaacs/fs-minipass": "npm:^4.0.0"
    chownr: "npm:^3.0.0"
    minipass: "npm:^7.1.2"
    minizlib: "npm:^3.1.0"
    yallist: "npm:^5.0.0"
-  checksum: 10c0/e870beb1b2477135ca2abe86b2d18f7b35d0a4e3a37bbc523d3b8f7adca268dfab543f26528a431d569897f8c53a7cac745cdfbc4411c2f89aeeacc652b81b0a
+  checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
semantic-release-bot	1ec1389448	chore(release): 1.1.12 [skip ci] ## [1.1.12](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.11...v1.1.12) (2026-03-12)	2026-03-12 09:08:57 +00:00
dependabot[bot]	ecaca02251	chore(deps): bump tar from 7.5.10 to 7.5.11 (#137 ) Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.10 to 7.5.11. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.10...v7.5.11) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.11 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-12 11:06:37 +02:00
renovate[bot]	4bc6306b61	chore(actions): update ivuorinen/actions action to v2026.03.10 (#136 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-10 23:03:07 +00:00
Ismo Vuorinen	114284910a	ci: migrate CodeQL to ivuorinen/actions/codeql-analysis (#135 ) * ci: migrate codeql to composable workflow * fix: correct codeql workflow language, queries, permissions, and action ref - Use 'javascript' instead of 'javascript-typescript' for CodeQL language - Add queries: security-and-quality parameter - Set root-level permissions to {} - Add job-level permissions (actions, contents, packages, security-events) - Pin action ref to commit hash with version comment - Fix mangled cron schedule	2026-03-07 17:52:39 +02:00
semantic-release-bot	3c167fd3e3	chore(release): 1.1.11 [skip ci] ## [1.1.11](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.10...v1.1.11) (2026-03-07)	2026-03-07 02:47:30 +00:00
renovate[bot]	c6ec8a5c0a	chore(deps): update github/codeql-action action (v4.32.5 → v4.32.6) (#134 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-07 02:45:04 +00:00
semantic-release-bot	e791e42cb6	chore(release): 1.1.10 [skip ci] ## [1.1.10](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.9...v1.1.10) (2026-03-05)	2026-03-05 20:27:23 +00:00
renovate[bot]	1fa6a32d88	chore(deps): lock file maintenance (#133 )	2026-03-05 22:24:39 +02:00
semantic-release-bot	211b7cfff8	chore(release): 1.1.9 [skip ci] ## [1.1.9](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.8...v1.1.9) (2026-03-05)	2026-03-05 19:59:02 +00:00
renovate[bot]	993aab6da6	chore(deps): update actions/setup-node action (v6.2.0 → v6.3.0) (#132 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-05 19:56:24 +00:00
semantic-release-bot	0675e1cd21	chore(release): 1.1.8 [skip ci] ## [1.1.8](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.7...v1.1.8) (2026-03-05)	2026-03-05 10:23:24 +00:00
dependabot[bot]	80ebd88e85	chore(deps): bump tar from 7.5.9 to 7.5.10 (#131 ) Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.9 to 7.5.10. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.9...v7.5.10) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.10 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-05 12:21:01 +02:00
semantic-release-bot	60e6cd4df9	chore(release): 1.1.7 [skip ci] ## [1.1.7](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.6...v1.1.7) (2026-03-05)	2026-03-05 10:15:58 +00:00
renovate[bot]	b6ac1135fb	chore(deps): update ivuorinen/actions action (v2026.02.28 → v2026.03.02) (#129 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-05 12:13:03 +02:00
semantic-release-bot	de9a212e12	chore(release): 1.1.6 [skip ci] ## [1.1.6](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.5...v1.1.6) (2026-03-05)	2026-03-05 10:08:51 +00:00
renovate[bot]	706cd0487c	chore(deps): update pre-commit hook igorshubovych/markdownlint-cli (v0.47.0 → v0.48.0) (#130 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-05 12:06:27 +02:00
semantic-release-bot	2a727729bc	chore(release): 1.1.5 [skip ci] ## [1.1.5](https://github.com/ivuorinen/base-configs-semantic-release/compare/v1.1.4...v1.1.5) (2026-03-04)	2026-03-04 01:20:44 +00:00
renovate[bot]	c9eebc9479	chore(deps): update github/codeql-action action (v4.32.4 → v4.32.5) (#128 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-04 01:17:47 +00:00