Replace overly broad `permissions: read-all` with minimal
`contents: read` at workflow level in pr-lint.yml and sync-labels.yml.
Job-level permissions already declare specific needs.
* fix(ci): consolidate CodeQL workflows with proper permissions
Merge codeql.yml and codeql-analysis.yml into a single workflow.
Add top-level permissions block to fix Checkov CKV2_GHA_1.
Changes:
- Add top-level permissions (actions: read, contents: read)
- Add merge_group trigger
- Enable security-and-quality query suite
- Use javascript-typescript language with build-mode: none
- Remove redundant codeql-analysis.yml
* fix(ci): include all required permissions at job level
Job-level permissions override top-level permissions in GitHub Actions
rather than extending them. Add actions: read and contents: read to
the job-level block so the analyze job retains all required permissions.
* **ci:** replace read-all with specific permissions in workflows ([ae49ca9](https://github.com/ivuorinen/base-configs/commit/ae49ca90c610e5ee4b31c4fa814571e733834ac7))
* **ci:** add branches to releaserc ([7222d0d](https://github.com/ivuorinen/base-configs/commit/7222d0d2634474a57210d2d9ddb55775ec7433b9))
# Changelog
All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# 1.0.0 (2025-12-06)
* feat!: module & commonjs in base-configs ([02e4f47](https://github.com/ivuorinen/base-configs/commit/02e4f4779c79e5e179b3fb31b9a642d9ec96f862))
* feat!: module & commonjs in browserslist ([93ea840](https://github.com/ivuorinen/base-configs/commit/93ea8404064e62c720460b2d808fc9d39a00ec31))
@@ -16,7 +61,6 @@ All notable changes to this project will be documented in this file. See
* feat!: module & commonjs in stylelint ([e4aed31](https://github.com/ivuorinen/base-configs/commit/e4aed31ef984188923eaedf6d8cff8ab36ecf924))
* feat!: upgrade to eslint 9, update configs ([ad9ed82](https://github.com/ivuorinen/base-configs/commit/ad9ed820d606e7fe484b7b5f553b5dc13277f037))
* skip config creation if one already found ([#110](https://github.com/ivuorinen/base-configs/issues/110)) ([9beafec](https://github.com/ivuorinen/base-configs/commit/9beafec48681768f06ff24029391176d87169261))
### BREAKING CHANGES
* support module, and commonjs types
* support module, and commonjs types
* this changes the configuration format,
also adds support for module, and commonjs types
* this changes the configuration format, also adds support for module, and commonjs types
* support module, and commonjs types
* support module, and commonjs types
* support module, and commonjs types
@@ -353,7 +394,7 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- **deps:** update globals to 16.0.0 ([#342](https://github.com/ivuorinen/base-configs/issues/342)) ([04b333b](https://github.com/ivuorinen/base-configs/commit/04b333b445b6beb4344d2f9102bb5d3dc72ae26a))
* **deps:** update globals to 16.0.0 ([#342](https://github.com/ivuorinen/base-configs/issues/342)) ([04b333b](https://github.com/ivuorinen/base-configs/commit/04b333b445b6beb4344d2f9102bb5d3dc72ae26a))
@@ -437,19 +478,19 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- upgrade browserslist from 4.24.0 to 4.24.2 ([#302](https://github.com/ivuorinen/base-configs/issues/302)) ([cbb1754](https://github.com/ivuorinen/base-configs/commit/cbb17540f3cd7fc81f0032e557568c65ed0a9744))
* upgrade browserslist from 4.24.0 to 4.24.2 ([#302](https://github.com/ivuorinen/base-configs/issues/302)) ([cbb1754](https://github.com/ivuorinen/base-configs/commit/cbb17540f3cd7fc81f0032e557568c65ed0a9744))
## 2.0.6 (2024-10-20)
### Bug Fixes
- upgrade browserslist from 4.23.3 to 4.24.0 ([#297](https://github.com/ivuorinen/base-configs/issues/297)) ([a99c55a](https://github.com/ivuorinen/base-configs/commit/a99c55aab760142b5d77ad80ce5d44b25dde17d7))
* upgrade browserslist from 4.23.3 to 4.24.0 ([#297](https://github.com/ivuorinen/base-configs/issues/297)) ([a99c55a](https://github.com/ivuorinen/base-configs/commit/a99c55aab760142b5d77ad80ce5d44b25dde17d7))
## 2.0.5 (2024-10-19)
### Bug Fixes
- upgrade markdownlint-cli from 0.41.0 to 0.42.0 ([#298](https://github.com/ivuorinen/base-configs/issues/298)) ([f57190d](https://github.com/ivuorinen/base-configs/commit/f57190d55c27101f66583cc0000733b2707c1e5f))
* upgrade markdownlint-cli from 0.41.0 to 0.42.0 ([#298](https://github.com/ivuorinen/base-configs/issues/298)) ([f57190d](https://github.com/ivuorinen/base-configs/commit/f57190d55c27101f66583cc0000733b2707c1e5f))
@@ -905,8 +946,8 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- **base-configs:** convert config from ES module ([88dbe39](https://github.com/ivuorinen/base-configs/commit/88dbe395d1843384edf97eab4ee5c43810deae4f))
* **base-configs:** convert config from ES module ([88dbe39](https://github.com/ivuorinen/base-configs/commit/88dbe395d1843384edf97eab4ee5c43810deae4f))
### Features
- **package:** new pkg: @ivuorinen/base-configs ([#121](https://github.com/ivuorinen/base-configs/issues/121)) ([feddfcf](https://github.com/ivuorinen/base-configs/commit/feddfcfdba391f8ed4bf59589737a340401e4fba))
* **package:** new pkg: @ivuorinen/base-configs ([#121](https://github.com/ivuorinen/base-configs/issues/121)) ([feddfcf](https://github.com/ivuorinen/base-configs/commit/feddfcfdba391f8ed4bf59589737a340401e4fba))
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.