Compare commits

..

49 Commits

Author SHA1 Message Date
semantic-release-bot
482fa4c650 chore(release): 1.0.3 [skip ci]
## [1.0.3](https://github.com/ivuorinen/base-configs/compare/v1.0.2...v1.0.3) (2026-02-27)

### Bug Fixes

* **ci:** replace read-all with specific permissions in workflows ([ae49ca9](ae49ca90c6))
2026-02-27 07:05:52 +00:00
ae49ca90c6 fix(ci): replace read-all with specific permissions in workflows
Replace overly broad `permissions: read-all` with minimal
`contents: read` at workflow level in pr-lint.yml and sync-labels.yml.
Job-level permissions already declare specific needs.
2026-02-27 09:02:17 +02:00
semantic-release-bot
98d9f7410d chore(release): 1.0.2 [skip ci]
## [1.0.2](https://github.com/ivuorinen/base-configs/compare/v1.0.1...v1.0.2) (2026-02-26)

### Bug Fixes

* **ci:** consolidate CodeQL workflows with proper permissions ([#473](https://github.com/ivuorinen/base-configs/issues/473)) ([ee3606e](ee3606e3cb))
2026-02-26 21:07:41 +00:00
renovate[bot]
c3e9b156e4 chore(deps): lock file maintenance (#475) 2026-02-26 23:04:07 +02:00
renovate[bot]
8551db8073 chore(deps): update node.js (v24.13.1 → v24.14.0) (#474)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-26 22:28:08 +02:00
ee3606e3cb fix(ci): consolidate CodeQL workflows with proper permissions (#473)
* fix(ci): consolidate CodeQL workflows with proper permissions

Merge codeql.yml and codeql-analysis.yml into a single workflow.
Add top-level permissions block to fix Checkov CKV2_GHA_1.

Changes:
- Add top-level permissions (actions: read, contents: read)
- Add merge_group trigger
- Enable security-and-quality query suite
- Use javascript-typescript language with build-mode: none
- Remove redundant codeql-analysis.yml

* fix(ci): include all required permissions at job level

Job-level permissions override top-level permissions in GitHub Actions
rather than extending them. Add actions: read and contents: read to
the job-level block so the analyze job retains all required permissions.
2026-02-26 22:20:14 +02:00
79ea896d8e chore(deps): update dependencies, release config 2026-02-25 21:41:04 +02:00
renovate[bot]
1dd35376c7 chore(deps): lock file maintenance (#472) 2026-02-23 21:43:58 +02:00
renovate[bot]
9744eabce9 chore(deps): update github/codeql-action action (v4.32.3 → v4.32.4) (#471)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-22 04:46:45 +00:00
dependabot[bot]
78ef670756 chore(deps): bump tar from 7.5.7 to 7.5.9 (#469)
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.7 to 7.5.9.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.7...v7.5.9)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 14:15:51 +02:00
renovate[bot]
e9ae91a8d7 chore(deps): update ivuorinen/actions action (v2026.02.10 → v2026.02.18) (#470)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-20 04:51:31 +00:00
renovate[bot]
914e186966 chore(deps): lock file maintenance (#468) 2026-02-18 00:00:27 +02:00
renovate[bot]
77d4ab15e8 chore(deps): update github/codeql-action action (v4.32.2 → v4.32.3) (#467)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-15 04:50:26 +00:00
renovate[bot]
becac6d7c4 chore(deps): update node.js (v24.13.0 → v24.13.1) (#466)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-12 09:12:11 +00:00
renovate[bot]
ebb6cfce3d chore(deps): update ivuorinen/actions action (v2026.02.03 → v2026.02.10) (#465)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-12 06:31:47 +00:00
renovate[bot]
722fa145d2 chore(deps): update simek/yarn-lock-changes action (v0.14.0 → v0.14.1) (#464)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-09 10:37:35 +00:00
renovate[bot]
acc2da1f37 chore(deps): update github/codeql-action action (v4.32.1 → v4.32.2) (#463)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-07 04:51:24 +00:00
renovate[bot]
3340f5d4e2 chore(deps): update ivuorinen/actions action (v2026.01.21 → v2026.02.03) (#462)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-05 14:00:28 +00:00
renovate[bot]
65ea3e0ffb chore(deps): update github/codeql-action action (v4.32.0 → v4.32.1) (#461)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-04 04:24:28 +00:00
renovate[bot]
6845253eab chore(deps): update simek/yarn-lock-changes action (v0.12.2 → v0.14.0) (#460)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-01 22:08:18 +02:00
renovate[bot]
d48f64b4d9 chore(deps): update actions/cache action (v5.0.2 → v5.0.3) (#459)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-31 18:45:12 +02:00
semantic-release-bot
6764211e73 chore(release): 1.0.1 [skip ci]
## [1.0.1](https://github.com/ivuorinen/base-configs/compare/v1.0.0...v1.0.1) (2026-01-30)

### Bug Fixes

* **ci:** add branches to releaserc ([7222d0d](7222d0d263))
2026-01-30 14:47:05 +00:00
7222d0d263 fix(ci): add branches to releaserc 2026-01-30 16:43:50 +02:00
c8bb871b9d chore(deps): update npm packages 2026-01-30 16:38:44 +02:00
f75c5bb8a9 chore(deps): update npm packages 2026-01-30 11:02:13 +02:00
dependabot[bot]
61fc06b7c6 chore(deps): bump tar from 7.5.6 to 7.5.7 (#458)
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.6...v7.5.7)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 20:36:47 +02:00
renovate[bot]
4c06a97439 chore(deps): update github/codeql-action action (v4.31.11 → v4.32.0) (#457)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-28 06:32:40 +00:00
renovate[bot]
fc68ba7fb5 chore(deps): update github/codeql-action action (v4.31.10 → v4.31.11) (#456)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-25 04:45:02 +00:00
renovate[bot]
649bdef76e chore(deps): update actions/checkout action (v6.0.1 → v6.0.2) (#455)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-24 01:25:25 +02:00
renovate[bot]
f920836b58 chore(deps): update ivuorinen/actions action (v2026.01.13 → v2026.01.21) (#454)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-22 11:20:14 +00:00
dependabot[bot]
6bedd1a3fd chore(deps): bump lodash from 4.17.21 to 4.17.23 (#453)
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 13:16:36 +02:00
dependabot[bot]
bda429823f chore(deps): bump tar from 7.5.3 to 7.5.6 (#451) 2026-01-22 10:10:15 +02:00
dependabot[bot]
d582716608 chore(deps): bump lodash-es from 4.17.21 to 4.17.23 (#452) 2026-01-22 10:09:29 +02:00
renovate[bot]
65d80f2a3a chore(deps): update actions/cache action (v5.0.1 → v5.0.2) (#450) 2026-01-18 15:31:31 +02:00
dependabot[bot]
87c4bca3f9 chore(deps): bump tar from 7.4.3 to 7.5.3 (#449)
Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.3.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.3)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-17 12:37:01 +02:00
renovate[bot]
9bf1d397fc chore(deps): update actions/setup-node action (v6.1.0 → v6.2.0) (#448)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-17 04:40:17 +00:00
renovate[bot]
5ff1fd1271 chore(deps): update node.js (v24.12.0 → v24.13.0) (#447)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-15 16:39:12 +00:00
renovate[bot]
c994b011fd chore(deps): update ivuorinen/actions action (v2026.01.09 → v2026.01.13) (#446)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-15 13:15:01 +00:00
renovate[bot]
a7cf077c64 chore(deps): update github/codeql-action action (v4.31.9 → v4.31.10) (#445)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-14 06:36:46 +00:00
renovate[bot]
5c99268e50 chore(deps): update ivuorinen/actions action (v2026.01.06 → v2026.01.09) (#444)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-11 04:29:09 +00:00
renovate[bot]
7c065e968e chore(deps)!: update ivuorinen/actions (v2025.12.31 → v2026.01.06) (#442)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 16:26:47 +02:00
renovate[bot]
a2026b02d5 chore(deps): update ivuorinen/actions action (v2025.12.06 → v2025.12.31) (#443)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 14:24:42 +00:00
d819a7b257 security(ci): update permissions in publish.yml 2026-01-07 16:07:37 +02:00
renovate[bot]
44832a01b5 chore(deps): update github/codeql-action action (v4.31.8 → v4.31.9) (#441) 2025-12-18 09:39:17 +02:00
renovate[bot]
28b230e931 chore(deps): update github/codeql-action action (v4.31.7 → v4.31.8) (#440)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-14 09:39:50 +00:00
renovate[bot]
45603a51e8 chore(deps): update actions/cache action (v5.0.0 → v5.0.1) (#439)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-14 05:57:42 +00:00
renovate[bot]
ad15143559 chore(deps)!: update actions/cache (v4.3.0 → v5.0.0) (#437)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-12 12:14:31 +02:00
renovate[bot]
5b3e008d45 chore(deps): update node.js (v24.11.1 → v24.12.0) (#438)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-12 06:40:52 +00:00
8fb98907cd chore: linting and semantic-commit plugins 2025-12-06 23:54:07 +01:00
15 changed files with 1153 additions and 1441 deletions

6
.github/SECURITY.md vendored
View File

@@ -2,10 +2,8 @@
## Supported Versions
Only the latest versions of the configuration packages and
the base package are as of now supported.
Only the latest versions of the configuration packages and the base package are as of now supported.
## Reporting a Vulnerability
This repository has automatic package update systems in place.
If you find a vulnerability, please send me email and I'll fix it as soon as possible.
This repository has automatic package update systems in place. If you find a vulnerability, please send me email and I'll fix it as soon as possible.

108
.github/labels.yml vendored
View File

@@ -1,88 +1,88 @@
---
- name: "breaking-change"
- name: 'breaking-change'
color: ee0701
description: "A breaking change for existing users."
- name: "bugfix"
description: 'A breaking change for existing users.'
- name: 'bugfix'
color: ee0701
description: "Inconsistencies or issues which will cause a problem for users or implementors."
- name: "documentation"
description: 'Inconsistencies or issues which will cause a problem for users or implementors.'
- name: 'documentation'
color: 0052cc
description: "Solely about the documentation of the project."
- name: "enhancement"
description: 'Solely about the documentation of the project.'
- name: 'enhancement'
color: 1d76db
description: "Enhancement of the code, not introducing new features."
- name: "refactor"
description: 'Enhancement of the code, not introducing new features.'
- name: 'refactor'
color: 1d76db
description: "Improvement of existing code, not introducing new features."
- name: "performance"
description: 'Improvement of existing code, not introducing new features.'
- name: 'performance'
color: 1d76db
description: "Improving performance, not introducing new features."
- name: "new-feature"
description: 'Improving performance, not introducing new features.'
- name: 'new-feature'
color: 0e8a16
description: "New features or options."
- name: "maintenance"
description: 'New features or options.'
- name: 'maintenance'
color: 2af79e
description: "Generic maintenance tasks."
- name: "ci"
description: 'Generic maintenance tasks.'
- name: 'ci'
color: 1d76db
description: "Work that improves the continue integration."
- name: "dependencies"
description: 'Work that improves the continue integration.'
- name: 'dependencies'
color: 1d76db
description: "Upgrade or downgrade of project dependencies."
- name: "translations"
description: 'Upgrade or downgrade of project dependencies.'
- name: 'translations'
color: d4c5f9
description: "Impacts translations."
description: 'Impacts translations.'
- name: "in-progress"
- name: 'in-progress'
color: fbca04
description: "Issue is currently being resolved by a developer."
- name: "stale"
description: 'Issue is currently being resolved by a developer.'
- name: 'stale'
color: fef2c0
description: "There has not been activity on this issue or PR for quite some time."
- name: "no-stale"
description: 'There has not been activity on this issue or PR for quite some time.'
- name: 'no-stale'
color: fef2c0
description: "This issue or PR is exempted from the stable bot."
description: 'This issue or PR is exempted from the stable bot.'
- name: "security"
- name: 'security'
color: ee0701
description: "Marks a security issue that needs to be resolved asap."
- name: "incomplete"
description: 'Marks a security issue that needs to be resolved asap.'
- name: 'incomplete'
color: fef2c0
description: "Marks a PR or issue that is missing information."
- name: "invalid"
description: 'Marks a PR or issue that is missing information.'
- name: 'invalid'
color: fef2c0
description: "Marks a PR or issue that is missing information."
description: 'Marks a PR or issue that is missing information.'
- name: "beginner-friendly"
- name: 'beginner-friendly'
color: 0e8a16
description: "Good first issue for people wanting to contribute to the project."
- name: "help-wanted"
description: 'Good first issue for people wanting to contribute to the project.'
- name: 'help-wanted'
color: 0e8a16
description: "We need some extra helping hands or expertise in order to resolve this."
description: 'We need some extra helping hands or expertise in order to resolve this.'
- name: "hacktoberfest"
description: "Issues/PRs are participating in the Hacktoberfest."
- name: 'hacktoberfest'
description: 'Issues/PRs are participating in the Hacktoberfest.'
color: fbca04
- name: "hacktoberfest-accepted"
description: "Issues/PRs are participating in the Hacktoberfest."
- name: 'hacktoberfest-accepted'
description: 'Issues/PRs are participating in the Hacktoberfest.'
color: fbca04
- name: "priority-critical"
- name: 'priority-critical'
color: ee0701
description: "This should be dealt with ASAP. Not fixing this issue would be a serious error."
- name: "priority-high"
description: 'This should be dealt with ASAP. Not fixing this issue would be a serious error.'
- name: 'priority-high'
color: b60205
description: "After critical issues are fixed, these should be dealt with before any further issues."
- name: "priority-medium"
description: 'After critical issues are fixed, these should be dealt with before any further issues.'
- name: 'priority-medium'
color: 0e8a16
description: "This issue may be useful, and needs some attention."
- name: "priority-low"
description: 'This issue may be useful, and needs some attention.'
- name: 'priority-low'
color: e4ea8a
description: "Nice addition, maybe... someday..."
description: 'Nice addition, maybe... someday...'
- name: "major"
- name: 'major'
color: b60205
description: "This PR causes a major version bump in the version number."
- name: "minor"
description: 'This PR causes a major version bump in the version number.'
- name: 'minor'
color: 0e8a16
description: "This PR causes a minor version bump in the version number."
description: 'This PR causes a minor version bump in the version number.'

View File

@@ -1,46 +0,0 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: "CodeQL"
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
schedule:
- cron: "30 1 * * 0" # Run at 1:30 AM UTC every Sunday
merge_group:
permissions:
actions: read
contents: read
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
security-events: write
strategy:
fail-fast: false
matrix:
language: ["javascript", "actions"] # Add languages used in your actions
steps:
- name: Checkout repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- name: Initialize CodeQL
uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
with:
languages: ${{ matrix.language }}
queries: security-and-quality
- name: Autobuild
uses: github/codeql-action/autobuild@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
with:
category: "/language:${{matrix.language}}"

51
.github/workflows/codeql.yml vendored Normal file
View File

@@ -0,0 +1,51 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: 'CodeQL Advanced'
on:
push:
branches: ['main']
pull_request:
branches: ['main']
schedule:
- cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
merge_group:
permissions:
actions: read
contents: read
jobs:
analyze:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
packages: read
strategy:
fail-fast: false
matrix:
include:
- language: actions
build-mode: none
- language: javascript-typescript
build-mode: none
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Initialize CodeQL
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
queries: security-and-quality
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
with:
category: '/language:${{matrix.language}}'

55
.github/workflows/pr-lint.yml vendored Normal file
View File

@@ -0,0 +1,55 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Lint PR Code Base
on:
pull_request:
branches: [master, main]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
env:
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
GITHUB_TOKEN: ${{ github.token }}
jobs:
Linter:
name: PR Lint
runs-on: ubuntu-latest
timeout-minutes: 15
permissions:
contents: read
issues: write
packages: read
pull-requests: write
statuses: write
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
token: ${{ secrets.GITHUB_TOKEN }}
- name: Install and enable corepack
shell: sh
run: npm install -g corepack --force && corepack enable
- name: Yarn Lock Changes
uses: Simek/yarn-lock-changes@59f47ee499424d2c2437c5aebf863b5c6d50a5bc # v0.14.1
with:
token: ${{ secrets.GITHUB_TOKEN }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
- name: Run PR Lint
# https://github.com/ivuorinen/actions
uses: ivuorinen/actions/pr-lint@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

View File

@@ -16,20 +16,20 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 0
- name: Setup Node.js Environment
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
always-auth: true
node-version-file: ".nvmrc"
registry-url: "https://registry.npmjs.org"
scope: "@ivuorinen"
node-version-file: '.nvmrc'
registry-url: 'https://registry.npmjs.org'
scope: '@ivuorinen'
- name: Cache Node Modules
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
id: cache
with:
path: node_modules
@@ -45,6 +45,6 @@ jobs:
run: yarn install
- name: Yarn Lock Changes
uses: Simek/yarn-lock-changes@61d1a0595070b79c1abdc8e1e5a5f5d98b18918c # v0.12.2
uses: Simek/yarn-lock-changes@59f47ee499424d2c2437c5aebf863b5c6d50a5bc # v0.14.1
with:
token: ${{ secrets.GITHUB_TOKEN }}

View File

@@ -6,7 +6,8 @@ on:
branches:
- main
permissions: read-all
permissions:
contents: read
env:
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -26,7 +27,7 @@ jobs:
steps:
- name: Run PR Lint
# https://github.com/ivuorinen/actions
uses: ivuorinen/actions/pr-lint@a52399cf74eac2b0963591ab2c6c8eb0f7f50b2d # v2025.12.06
uses: ivuorinen/actions/pr-lint@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
publish:
name: Publish
@@ -41,24 +42,24 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 0
- name: Setup Node.js Environment
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
always-auth: true
node-version-file: ".nvmrc"
registry-url: "https://registry.npmjs.org"
scope: "@ivuorinen"
node-version-file: '.nvmrc'
registry-url: 'https://registry.npmjs.org'
scope: '@ivuorinen'
- name: Install and enable corepack
shell: sh
run: npm install -g corepack --force && corepack enable
- name: Cache Node Modules
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
id: cache
with:
path: node_modules
@@ -71,6 +72,11 @@ jobs:
- name: Semantic Release
uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
with:
extra_plugins: |
@semantic-release/changelog
@semantic-release/github
@semantic-release/npm
env:
GITHUB_TOKEN: ${{ secrets.PAT }}
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

View File

@@ -4,7 +4,7 @@ name: Stale
on:
schedule:
- cron: '0 8 * * *' # Every day at 08:00
- cron: "0 8 * * *" # Every day at 08:00
workflow_call:
workflow_dispatch:
@@ -23,4 +23,4 @@ jobs:
issues: write
pull-requests: write
steps:
- uses: ivuorinen/actions/stale@a52399cf74eac2b0963591ab2c6c8eb0f7f50b2d # v2025.12.06
- uses: ivuorinen/actions/stale@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24

42
.github/workflows/sync-labels.yml vendored Normal file
View File

@@ -0,0 +1,42 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Sync Labels
on:
push:
branches:
- main
- master
paths:
- ".github/labels.yml"
- ".github/workflows/sync-labels.yml"
schedule:
- cron: "34 5 * * *" # Run every day at 05:34 AM UTC
workflow_call:
workflow_dispatch:
merge_group:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
labels:
name: ♻️ Sync Labels
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
contents: read
issues: write
steps:
- name: ⤵️ Checkout Repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
token: ${{ secrets.GITHUB_TOKEN }}
- name: ⤵️ Sync Latest Labels Definitions
uses: ivuorinen/actions/sync-labels@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24

2
.nvmrc
View File

@@ -1 +1 @@
24.11.1
24.14.0

View File

@@ -1,3 +1,4 @@
{
"extends": ["@ivuorinen/semantic-release-config"]
"extends": ["@ivuorinen/semantic-release-config"],
"branches": ["main"]
}

View File

@@ -3,9 +3,31 @@
All notable changes to this project will be documented in this file. See
[Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# 1.0.0 (2025-12-06)
## [1.0.3](https://github.com/ivuorinen/base-configs/compare/v1.0.2...v1.0.3) (2026-02-27)
### Bug Fixes
* **ci:** replace read-all with specific permissions in workflows ([ae49ca9](https://github.com/ivuorinen/base-configs/commit/ae49ca90c610e5ee4b31c4fa814571e733834ac7))
## [1.0.2](https://github.com/ivuorinen/base-configs/compare/v1.0.1...v1.0.2) (2026-02-26)
### Bug Fixes
* **ci:** consolidate CodeQL workflows with proper permissions ([#473](https://github.com/ivuorinen/base-configs/issues/473)) ([ee3606e](https://github.com/ivuorinen/base-configs/commit/ee3606e3cb811b17b89271e9e176e466dbf61511))
## [1.0.1](https://github.com/ivuorinen/base-configs/compare/v1.0.0...v1.0.1) (2026-01-30)
### Bug Fixes
* **ci:** add branches to releaserc ([7222d0d](https://github.com/ivuorinen/base-configs/commit/7222d0d2634474a57210d2d9ddb55775ec7433b9))
# Changelog
All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# 1.0.0 (2025-12-06)
* feat!: module & commonjs in base-configs ([02e4f47](https://github.com/ivuorinen/base-configs/commit/02e4f4779c79e5e179b3fb31b9a642d9ec96f862))
* feat!: module & commonjs in browserslist ([93ea840](https://github.com/ivuorinen/base-configs/commit/93ea8404064e62c720460b2d808fc9d39a00ec31))
* feat!: module & commonjs in commitlint ([2de156e](https://github.com/ivuorinen/base-configs/commit/2de156e2c0f474fe19d23cc2b4b9b6eaba97e258))
@@ -16,7 +38,6 @@ All notable changes to this project will be documented in this file. See
* feat!: module & commonjs in stylelint ([e4aed31](https://github.com/ivuorinen/base-configs/commit/e4aed31ef984188923eaedf6d8cff8ab36ecf924))
* feat!: upgrade to eslint 9, update configs ([ad9ed82](https://github.com/ivuorinen/base-configs/commit/ad9ed820d606e7fe484b7b5f553b5dc13277f037))
### Bug Fixes
* add {commitlint,semantic-release}-config ([332f994](https://github.com/ivuorinen/base-configs/commit/332f9942b2c05fa7477f048b282f7e6a75679c77))
@@ -291,7 +312,6 @@ All notable changes to this project will be documented in this file. See
* **workflows:** commit lint fix ([3cc07cf](https://github.com/ivuorinen/base-configs/commit/3cc07cf3ffd8743860a07bb85aa4d275bb63094e))
* **workflows:** tweak publish jobs run order ([bbbbdf0](https://github.com/ivuorinen/base-configs/commit/bbbbdf049f9d954e9cbabd6644fb207b06ea0908))
### Features
* add `eslint-config-prettier` ([1a40d9b](https://github.com/ivuorinen/base-configs/commit/1a40d9b0ada76d32a8fe34d2a0eb98856f678dee))
@@ -315,13 +335,11 @@ All notable changes to this project will be documented in this file. See
* release pipeline, packages, yarn upgrade ([5400c02](https://github.com/ivuorinen/base-configs/commit/5400c02639d027ee73fef887fbc6c2ce906ec7ad))
* skip config creation if one already found ([#110](https://github.com/ivuorinen/base-configs/issues/110)) ([9beafec](https://github.com/ivuorinen/base-configs/commit/9beafec48681768f06ff24029391176d87169261))
### BREAKING CHANGES
* support module, and commonjs types
* support module, and commonjs types
* this changes the configuration format,
also adds support for module, and commonjs types
* this changes the configuration format, also adds support for module, and commonjs types
* support module, and commonjs types
* support module, and commonjs types
* support module, and commonjs types
@@ -353,7 +371,7 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- **deps:** update globals to 16.0.0 ([#342](https://github.com/ivuorinen/base-configs/issues/342)) ([04b333b](https://github.com/ivuorinen/base-configs/commit/04b333b445b6beb4344d2f9102bb5d3dc72ae26a))
* **deps:** update globals to 16.0.0 ([#342](https://github.com/ivuorinen/base-configs/issues/342)) ([04b333b](https://github.com/ivuorinen/base-configs/commit/04b333b445b6beb4344d2f9102bb5d3dc72ae26a))
## [2.0.26](https://github.com/ivuorinen/base-configs/compare/@ivuorinen/base-configs@2.0.25...@ivuorinen/base-configs@2.0.26) (2025-02-20)
@@ -379,7 +397,7 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- **deps:** update eslint-config-prettier to 10.0.1 ([#324](https://github.com/ivuorinen/base-configs/issues/324)) ([8a0d38e](https://github.com/ivuorinen/base-configs/commit/8a0d38e173df40b771d42b694a24145559200506))
* **deps:** update eslint-config-prettier to 10.0.1 ([#324](https://github.com/ivuorinen/base-configs/issues/324)) ([8a0d38e](https://github.com/ivuorinen/base-configs/commit/8a0d38e173df40b771d42b694a24145559200506))
## [2.0.20](https://github.com/ivuorinen/base-configs/compare/@ivuorinen/base-configs@2.0.19...@ivuorinen/base-configs@2.0.20) (2025-01-01)
@@ -437,19 +455,19 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- upgrade browserslist from 4.24.0 to 4.24.2 ([#302](https://github.com/ivuorinen/base-configs/issues/302)) ([cbb1754](https://github.com/ivuorinen/base-configs/commit/cbb17540f3cd7fc81f0032e557568c65ed0a9744))
* upgrade browserslist from 4.24.0 to 4.24.2 ([#302](https://github.com/ivuorinen/base-configs/issues/302)) ([cbb1754](https://github.com/ivuorinen/base-configs/commit/cbb17540f3cd7fc81f0032e557568c65ed0a9744))
## 2.0.6 (2024-10-20)
### Bug Fixes
- upgrade browserslist from 4.23.3 to 4.24.0 ([#297](https://github.com/ivuorinen/base-configs/issues/297)) ([a99c55a](https://github.com/ivuorinen/base-configs/commit/a99c55aab760142b5d77ad80ce5d44b25dde17d7))
* upgrade browserslist from 4.23.3 to 4.24.0 ([#297](https://github.com/ivuorinen/base-configs/issues/297)) ([a99c55a](https://github.com/ivuorinen/base-configs/commit/a99c55aab760142b5d77ad80ce5d44b25dde17d7))
## 2.0.5 (2024-10-19)
### Bug Fixes
- upgrade markdownlint-cli from 0.41.0 to 0.42.0 ([#298](https://github.com/ivuorinen/base-configs/issues/298)) ([f57190d](https://github.com/ivuorinen/base-configs/commit/f57190d55c27101f66583cc0000733b2707c1e5f))
* upgrade markdownlint-cli from 0.41.0 to 0.42.0 ([#298](https://github.com/ivuorinen/base-configs/issues/298)) ([f57190d](https://github.com/ivuorinen/base-configs/commit/f57190d55c27101f66583cc0000733b2707c1e5f))
## [2.0.4](https://github.com/ivuorinen/base-configs/compare/@ivuorinen/base-configs@2.0.3...@ivuorinen/base-configs@2.0.4) (2024-09-17)
@@ -469,11 +487,11 @@ All notable changes to this project will be documented in this file. See [Conven
## [2.0.0](https://github.com/ivuorinen/base-configs/compare/@ivuorinen/base-configs@1.1.106...@ivuorinen/base-configs@2.0.0) (2024-08-21)
- feat!: module & commonjs in base-configs ([02e4f47](https://github.com/ivuorinen/base-configs/commit/02e4f4779c79e5e179b3fb31b9a642d9ec96f862))
* feat!: module & commonjs in base-configs ([02e4f47](https://github.com/ivuorinen/base-configs/commit/02e4f4779c79e5e179b3fb31b9a642d9ec96f862))
### BREAKING CHANGES
- support module, and commonjs types
* support module, and commonjs types
## [1.1.106](https://github.com/ivuorinen/base-configs/compare/@ivuorinen/base-configs@1.1.105...@ivuorinen/base-configs@1.1.106) (2024-08-21)
@@ -515,7 +533,7 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- **workflows:** commit lint fix ([3cc07cf](https://github.com/ivuorinen/base-configs/commit/3cc07cf3ffd8743860a07bb85aa4d275bb63094e))
* **workflows:** commit lint fix ([3cc07cf](https://github.com/ivuorinen/base-configs/commit/3cc07cf3ffd8743860a07bb85aa4d275bb63094e))
## [1.1.96](https://github.com/ivuorinen/base-configs/compare/@ivuorinen/base-configs@1.1.95...@ivuorinen/base-configs@1.1.96) (2024-06-18)
@@ -905,8 +923,8 @@ All notable changes to this project will be documented in this file. See [Conven
### Bug Fixes
- **base-configs:** convert config from ES module ([88dbe39](https://github.com/ivuorinen/base-configs/commit/88dbe395d1843384edf97eab4ee5c43810deae4f))
* **base-configs:** convert config from ES module ([88dbe39](https://github.com/ivuorinen/base-configs/commit/88dbe395d1843384edf97eab4ee5c43810deae4f))
### Features
- **package:** new pkg: @ivuorinen/base-configs ([#121](https://github.com/ivuorinen/base-configs/issues/121)) ([feddfcf](https://github.com/ivuorinen/base-configs/commit/feddfcfdba391f8ed4bf59589737a340401e4fba))
* **package:** new pkg: @ivuorinen/base-configs ([#121](https://github.com/ivuorinen/base-configs/issues/121)) ([feddfcf](https://github.com/ivuorinen/base-configs/commit/feddfcfdba391f8ed4bf59589737a340401e4fba))

View File

@@ -32,7 +32,7 @@ yarn add @ivuorinen/base-configs --dev
## Available Configurations
| Tool | Package | Version |
|-------------------------------------------|----------------------------------------------------|---------------------------------------------------------------------------------------|
| ----------------------------------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------- |
| [Browserslist][browserslist-link] | [@ivuorinen/browserslist-config][pkg-browserlist] | [![@ivuorinen/browserslist-config][browserslist-badge]][browserslist-npm] |
| [CommitLint][commitlint-link] | [@ivuorinen/commitlint-config][pkg-commitlint] | [![@ivuorinen/commitlint-config][commitlint-badge]][commitlint-npm] |
| [ESLint][eslint-link] | [@ivuorinen/eslint-config][pkg-eslint] | [![@ivuorinen/eslint-config][eslint-badge]][eslint-npm] |

View File

@@ -1,6 +1,6 @@
{
"name": "@ivuorinen/base-configs",
"version": "1.0.0",
"version": "1.0.3",
"type": "module",
"description": "ivuorinen's shareable configurations meta package",
"author": {
@@ -49,12 +49,12 @@
"prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
},
"devDependencies": {
"@ivuorinen/browserslist-config": "^1.0.0",
"@ivuorinen/browserslist-config": "^1.0.1",
"@ivuorinen/commitlint-config": "^1.0.0",
"@ivuorinen/eslint-config": "^1.0.0",
"@ivuorinen/markdownlint-config": "^1.0.0",
"@ivuorinen/markdownlint-config": "^1.0.1",
"@ivuorinen/prettier-config": "^1.0.0",
"@ivuorinen/semantic-release-config": "^1.0.0",
"@ivuorinen/semantic-release-config": "^1.1.1",
"@types/node": "*",
"npm-run-all2": "^8.0.4",
"simple-git-hooks": "^2.13.1",

2181
yarn.lock

File diff suppressed because it is too large Load Diff