chore(release): 1.0.12 [skip ci]

## [1.0.12](https://github.com/ivuorinen/base-configs/compare/v1.0.11...v1.0.12) (2026-03-13)
chore(deps): bump flatted from 3.3.4 to 3.4.1 (#490 )
2026-03-14 13:59:14 +00:00 · 2026-03-13 19:02:28 +00:00 · 2026-03-13 20:58:40 +02:00 · 2026-03-13 20:18:43 +02:00 · 2026-03-12 09:13:14 +00:00 · 2026-03-12 11:09:17 +02:00
8 changed files with 26 additions and 39 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,51 +1,34 @@
 ---
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-name: 'CodeQL Advanced'
+name: "CodeQL"

 on:
  push:
-    branches: ['main']
+    branches: ["main"]
  pull_request:
-    branches: ['main']
+    branches: ["main"]
  schedule:
-    - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
+    - cron: "30 1 * * 0"
  merge_group:

-permissions:
-  actions: read
-  contents: read
+permissions: {}

 jobs:
  analyze:
-    name: Analyze (${{ matrix.language }})
+    name: Analyze
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
-      security-events: write
      packages: read
-
+      security-events: write
    strategy:
      fail-fast: false
      matrix:
-        include:
-          - language: actions
-            build-mode: none
-          - language: javascript-typescript
-            build-mode: none
-
+        language: ["actions", "javascript"]
    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+      - name: CodeQL Analysis
+        uses: ivuorinen/actions/codeql-analysis@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
        with:
-          languages: ${{ matrix.language }}
-          build-mode: ${{ matrix.build-mode }}
+          language: ${{ matrix.language }}
          queries: security-and-quality
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
-        with:
-          category: '/language:${{matrix.language}}'
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -49,7 +49,7 @@ jobs:

      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@d1af04260d903f572ee953cc790ff7c1410709a6 # v2026.03.05
+        uses: ivuorinen/actions/pr-lint@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,7 +27,7 @@ jobs:
    steps:
      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@d1af04260d903f572ee953cc790ff7c1410709a6 # v2026.03.05
+        uses: ivuorinen/actions/pr-lint@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11

  publish:
    name: Publish
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -23,4 +23,4 @@ jobs:
      issues: write
      pull-requests: write
    steps:
-      - uses: ivuorinen/actions/stale@d1af04260d903f572ee953cc790ff7c1410709a6 # v2026.03.05
+      - uses: ivuorinen/actions/stale@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -39,4 +39,4 @@ jobs:
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: ⤵️ Sync Latest Labels Definitions
-        uses: ivuorinen/actions/sync-labels@d1af04260d903f572ee953cc790ff7c1410709a6 # v2026.03.05
+        uses: ivuorinen/actions/sync-labels@7f6a23b59316795c4b3cb3b3b28dd53e53655a33 # v2026.03.11
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.0.12](https://github.com/ivuorinen/base-configs/compare/v1.0.11...v1.0.12) (2026-03-13)
+
+## [1.0.11](https://github.com/ivuorinen/base-configs/compare/v1.0.10...v1.0.11) (2026-03-12)
+
 ## [1.0.10](https://github.com/ivuorinen/base-configs/compare/v1.0.9...v1.0.10) (2026-03-06)

 ## [1.0.9](https://github.com/ivuorinen/base-configs/compare/v1.0.8...v1.0.9) (2026-03-05)
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@ivuorinen/base-configs",
-  "version": "1.0.10",
+  "version": "1.0.12",
  "type": "module",
  "description": "ivuorinen's shareable configurations meta package",
  "author": {
--- a/yarn.lock
+++ b/yarn.lock
@@ -3329,9 +3329,9 @@ __metadata:
  linkType: hard

 "flatted@npm:^3.2.9, flatted@npm:^3.3.3":
-  version: 3.3.4
-  resolution: "flatted@npm:3.3.4"
-  checksum: 10c0/d1f33426e9714063a65a90940acdb2897eceb810230a58e496d90334dcecfa81a90135bbc660df6827939865d57cb4a2afab14dcd3d505e16a8484fd73bf9642
+  version: 3.4.1
+  resolution: "flatted@npm:3.4.1"
+  checksum: 10c0/3987a7f1e39bc7215cece001354313b462cdb4fb2dde0df4f7acd9e5016fbae56ee6fb3f0870b2150145033be8bda4f01af6f87a00946049651131bbfca7dfa6
  languageName: node
  linkType: hard

@@ -7820,15 +7820,15 @@ __metadata:
  linkType: hard

 "tar@npm:^7.4.3, tar@npm:^7.5.1, tar@npm:^7.5.4, tar@npm:^7.5.9":
-  version: 7.5.10
-  resolution: "tar@npm:7.5.10"
+  version: 7.5.11
+  resolution: "tar@npm:7.5.11"
  dependencies:
    "@isaacs/fs-minipass": "npm:^4.0.0"
    chownr: "npm:^3.0.0"
    minipass: "npm:^7.1.2"
    minizlib: "npm:^3.1.0"
    yallist: "npm:^5.0.0"
-  checksum: 10c0/ed905e4b33886377df6e9206e5d1bd34458c21666e27943f946799416f86348c938590d573d6a69312cb29c583b122647a64ec92782f2b7e24e68d985dd72531
+  checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
semantic-release-bot	175ecd757c	chore(release): 1.0.12 [skip ci] ## [1.0.12](https://github.com/ivuorinen/base-configs/compare/v1.0.11...v1.0.12) (2026-03-13)	2026-03-13 19:02:28 +00:00
dependabot[bot]	98a8be3ad1	chore(deps): bump flatted from 3.3.4 to 3.4.1 (#490 ) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.4 to 3.4.1. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.4...v3.4.1) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-13 20:58:40 +02:00
renovate[bot]	01b7cbd873	chore(actions): update ivuorinen/actions action (v2026.03.10 → v2026.03.11) (#489 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-13 20:18:43 +02:00
semantic-release-bot	45b0eec451	chore(release): 1.0.11 [skip ci] ## [1.0.11](https://github.com/ivuorinen/base-configs/compare/v1.0.10...v1.0.11) (2026-03-12)	2026-03-12 09:13:14 +00:00
dependabot[bot]	570acfb37b	chore(deps): bump tar from 7.5.10 to 7.5.11 (#488 ) Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.10 to 7.5.11. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.10...v7.5.11) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.11 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-12 11:09:17 +02:00
renovate[bot]	c7b34723ef	chore(actions): update ivuorinen/actions action to v2026.03.10 (#487 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-11 01:36:04 +02:00
Ismo Vuorinen	66ddc6a9db	ci: migrate CodeQL to ivuorinen/actions/codeql-analysis (#486 ) * ci: migrate codeql to composable workflow * fix: correct codeql workflow permissions, cron, and action ref - Set root-level permissions to {} - Add job-level permissions (actions, contents, packages, security-events) - Pin action ref to commit hash with version comment - Fix mangled cron schedule - Clean up workflow structure * fix: correct codeql workflow language, queries, permissions, and action ref - Use 'javascript' instead of 'javascript-typescript' for CodeQL language - Add queries: security-and-quality parameter - Set root-level permissions to {} - Add job-level permissions (actions, contents, packages, security-events) - Pin action ref to commit hash with version comment - Fix mangled cron schedule	2026-03-07 17:49:19 +02:00