mirror of
https://github.com/ivuorinen/f2b.git
synced 2026-03-07 13:58:15 +00:00
* fix: repair Renovate config and convert Makefile to go run (#117) - Remove non-existent `github>renovatebot/presets:golang` preset that broke Renovate PR creation - Replace deprecated `fileMatch` with `managerFilePatterns` in customManagers - Rewrite regex to match new Makefile pattern (renovate comment above version variable assignment) - Fix `matchFileNames` glob pattern (`*.mk` -> `**/*.mk`) - Convert all tool invocations from `go install` + global binary to `go run tool@version` for reproducible builds - Convert npm global tools to `npx --yes` invocations - Remove `dev-deps` and `check-deps` targets (tools auto-download) - Add mdformat pre-commit hook with GFM support and config - Add `fmt-md` Makefile target for manual markdown formatting - Update local golangci-lint pre-commit hook to use `go run` - Apply golangci-lint v2.10.1 auto-fixes (fmt.Fprintf optimization) - Add nolint:gosec annotations for legitimate exec.Command usage - Exclude .serena/ from mdformat and megalinter - Add markdown indent_size=unset in .editorconfig for CommonMark compat * chore(deps): update GitHub Actions to latest versions - anthropics/claude-code-action: v1.0.34 -> v1.0.64 - actions/setup-go: v6.2.0 -> v6.3.0 - actions/upload-artifact: v6.0.0 -> v7.0.0 - goreleaser/goreleaser-action: v6.4.0 -> v7.0.0 - docker/login-action: v3.6.0 -> v3.7.0 - ivuorinen/actions: v2026.01.21 -> v2026.02.24 * fix: address code review feedback - Fix issue template YAML frontmatter (replace underscore separators with proper --- delimiters); exclude templates from mdformat - Replace string(rune(n)) with strconv.Itoa(n) in test files to produce deterministic numeric directory names instead of Unicode characters - Remove stale `make dev-deps` reference in README, replace with `make dev-setup` - Extract ban/unban format strings into shared.MetricsFmtBanOperations and shared.MetricsFmtUnbanOperations constants - Replace hardcoded coverage percentages in README with evergreen phrasing * fix: address round 2 code review feedback for PR #120 - Fix corrupted path traversal example in docs/security.md - Fix Renovate .mk regex to match nested paths (.*\.mk$) - Update checkmake pre-commit hook to v0.3.2 to match Makefile - Add sync.WaitGroup to unsynchronized goroutines in security tests - Fix fmt-md target to use pre-commit run mdformat - Pin markdownlint-cli2 to v0.21.0 in lint-md target - Standardize //nolint:gosec to // #nosec annotations for gosec CLI * fix(ci): install PyYAML dependency for PR lint workflow The pr-lint workflow uses ivuorinen/actions/pr-lint which internally calls validate-inputs running a Python script that imports yaml. Python was set up but PyYAML was never installed, causing ModuleNotFoundError at runtime. * fix: address round 3 code review feedback for PR #120 - Wrap Windows-style path traversal example in backtick code span so backslashes render literally in docs/security.md - Add Renovate-managed MARKDOWNLINT_CLI2_VERSION variable in Makefile to match the pattern used by all other tool versions
93 lines
2.3 KiB
YAML
93 lines
2.3 KiB
YAML
---
|
|
# yaml-language-server: $schema=https://json.schemastore.org/pre-commit-config.json
|
|
# Require at least the feature set shipped with pre-commit 3.4
|
|
minimum_pre_commit_version: "3.4.0"
|
|
|
|
repos:
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v6.0.0
|
|
hooks:
|
|
- id: trailing-whitespace
|
|
- id: end-of-file-fixer
|
|
- id: mixed-line-ending
|
|
- id: check-yaml
|
|
- id: check-added-large-files
|
|
- id: check-merge-conflict
|
|
- id: check-json
|
|
- id: check-shebang-scripts-are-executable
|
|
|
|
- repo: https://github.com/pre-commit/sync-pre-commit-deps
|
|
rev: v0.0.3
|
|
hooks:
|
|
- id: sync-pre-commit-deps
|
|
|
|
- repo: local
|
|
hooks:
|
|
- id: golangci-lint
|
|
name: golangci-lint
|
|
entry: go run github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1 run
|
|
language: system
|
|
types: [go]
|
|
pass_filenames: false
|
|
|
|
- repo: https://github.com/google/yamlfmt
|
|
rev: v0.21.0
|
|
hooks:
|
|
- id: yamlfmt
|
|
|
|
- repo: https://github.com/igorshubovych/markdownlint-cli
|
|
rev: v0.47.0
|
|
hooks:
|
|
- id: markdownlint
|
|
args: [-c, .markdownlint.json, --fix]
|
|
|
|
- repo: https://github.com/tcort/markdown-link-check
|
|
rev: v3.14.2
|
|
hooks:
|
|
- id: markdown-link-check
|
|
args: [-q, -c, .markdown-link-check.json]
|
|
|
|
- repo: https://github.com/rhysd/actionlint
|
|
rev: v1.7.11
|
|
hooks:
|
|
- id: actionlint
|
|
args: ["-shellcheck="]
|
|
|
|
- repo: https://github.com/scop/pre-commit-shfmt
|
|
rev: v3.12.0-2
|
|
hooks:
|
|
- id: shfmt
|
|
|
|
- repo: https://github.com/checkmake/checkmake
|
|
rev: v0.3.2
|
|
hooks:
|
|
- id: checkmake
|
|
name: Makefile Linter
|
|
files: ^Makefile$
|
|
|
|
- repo: https://github.com/bridgecrewio/checkov.git
|
|
rev: "3.2.506"
|
|
hooks:
|
|
- id: checkov
|
|
args:
|
|
- "--quiet"
|
|
|
|
- repo: https://github.com/python-jsonschema/check-jsonschema
|
|
rev: 0.37.0
|
|
hooks:
|
|
- id: check-github-workflows
|
|
args: ["--verbose"]
|
|
|
|
- repo: https://github.com/editorconfig-checker/editorconfig-checker
|
|
rev: v3.6.1
|
|
hooks:
|
|
- id: editorconfig-checker
|
|
|
|
- repo: https://github.com/hukkin/mdformat
|
|
rev: 1.0.0
|
|
hooks:
|
|
- id: mdformat
|
|
additional_dependencies:
|
|
- mdformat-gfm
|
|
exclude: ^(\.serena/|\.github/ISSUE_TEMPLATE/)
|