chore(release): 1.0.7 [skip ci]

## [1.0.7](https://github.com/ivuorinen/base-configs/compare/v1.0.6...v1.0.7) (2026-03-04) ### Bug Fixes * **deps:** resolve peer dependency warnings and minimatch vulnerability ([#480](https://github.com/ivuorinen/base-configs/issues/480)) ([81812c1](81812c163a))
fix(deps): resolve peer dependency warnings and minimatch vulnerability (#480 )
2026-03-04 16:55:08 +00:00 · 2026-03-04 11:57:02 +00:00 · 2026-03-04 13:53:03 +02:00 · 2026-03-04 10:07:59 +00:00 · 2026-03-04 12:00:23 +02:00
5 changed files with 727 additions and 58 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -39,13 +39,13 @@ jobs:
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
        with:
          languages: ${{ matrix.language }}
          build-mode: ${{ matrix.build-mode }}
          queries: security-and-quality

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
        with:
          category: '/language:${{matrix.language}}'
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -1 +1,10 @@
 nodeLinker: node-modules
+
+packageExtensions:
+  "@commitlint/load@*":
+    dependencies:
+      typescript: "*"
+      "@types/node": "*"
+  "eslint-plugin-n@*":
+    dependencies:
+      typescript: "*"
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,15 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.0.7](https://github.com/ivuorinen/base-configs/compare/v1.0.6...v1.0.7) (2026-03-04)
+
+
+### Bug Fixes
+
+* **deps:** resolve peer dependency warnings and minimatch vulnerability ([#480](https://github.com/ivuorinen/base-configs/issues/480)) ([81812c1](https://github.com/ivuorinen/base-configs/commit/81812c163a6cbfbfdafa3b8adad939b1488b47a9))
+
+## [1.0.6](https://github.com/ivuorinen/base-configs/compare/v1.0.5...v1.0.6) (2026-03-04)
+
 ## [1.0.5](https://github.com/ivuorinen/base-configs/compare/v1.0.4...v1.0.5) (2026-03-03)

 ## [1.0.4](https://github.com/ivuorinen/base-configs/compare/v1.0.3...v1.0.4) (2026-03-03)
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@ivuorinen/base-configs",
-  "version": "1.0.5",
+  "version": "1.0.7",
  "type": "module",
  "description": "ivuorinen's shareable configurations meta package",
  "author": {
@@ -48,17 +48,23 @@
    "prettier:fix": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
    "prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
  },
-  "devDependencies": {
+  "dependencies": {
    "@ivuorinen/browserslist-config": "^1.0.1",
    "@ivuorinen/commitlint-config": "^1.0.0",
    "@ivuorinen/eslint-config": "^1.0.0",
    "@ivuorinen/markdownlint-config": "^1.0.1",
    "@ivuorinen/prettier-config": "^1.0.0",
    "@ivuorinen/semantic-release-config": "^1.1.1",
+    "@ivuorinen/stylelint-config": "^1.0.6"
+  },
+  "devDependencies": {
    "@types/node": "*",
    "npm-run-all2": "^8.0.4",
    "simple-git-hooks": "^2.13.1",
    "typescript": ">=4.2.0"
  },
+  "resolutions": {
+    "minimatch": "^10.2.4"
+  },
  "packageManager": "yarn@4.12.0"
 }
--- a/yarn.lock
+++ b/yarn.lock
Author	SHA1	Message	Date
semantic-release-bot	69e646c10d	chore(release): 1.0.7 [skip ci] ## [1.0.7](https://github.com/ivuorinen/base-configs/compare/v1.0.6...v1.0.7) (2026-03-04) ### Bug Fixes * deps: resolve peer dependency warnings and minimatch vulnerability ([#480](https://github.com/ivuorinen/base-configs/issues/480)) ([`81812c1`](`81812c163a`))	2026-03-04 11:57:02 +00:00
Ismo Vuorinen	81812c163a	fix(deps): resolve peer dependency warnings and minimatch vulnerability (#480 ) * fix(deps): resolve peer dependency warnings and minimatch vulnerability Add packageExtensions to .yarnrc.yml for @commitlint/load and eslint-plugin-n peer dependency warnings. Add resolutions to package.json to force minimatch >=10.2.4, fixing 3 HIGH ReDoS CVEs (CVE-2026-26996, CVE-2026-27903, CVE-2026-27904). * chore(deps): add missing stylelint-config package	2026-03-04 13:53:03 +02:00
semantic-release-bot	94e8eba521	chore(release): 1.0.6 [skip ci] ## [1.0.6](https://github.com/ivuorinen/base-configs/compare/v1.0.5...v1.0.6) (2026-03-04)	2026-03-04 10:07:59 +00:00
renovate[bot]	cbe077330f	chore(deps): update github/codeql-action action (v4.32.4 → v4.32.5) (#479 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-04 12:00:23 +02:00