-
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* fix: updated all deps * fix: updated node version in the readme and lock * chore: lock update * fix: fixed pnpm audit * ci: update semantic check * ci: moved audit to audit-ci
- Loading branch information
Showing
10 changed files
with
14,833 additions
and
15,908 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,49 +1,3 @@ | ||
| { | ||
| $schema: "https://docs.renovatebot.com/renovate-schema.json", | ||
| extends: ["config:base", "schedule:earlyMondays", "group:allNonMajor", ":prHourlyLimitNone", "helpers:pinGitHubActionDigests"], | ||
| labels: ["c: dependencies"], | ||
| reviewersFromCodeOwners: true, | ||
| rangeStrategy: "bump", | ||
| packageRules: [ | ||
| { | ||
| groupName: "devDependencies", | ||
| matchDepTypes: ["devDependencies"], | ||
| rangeStrategy: "bump", | ||
| }, | ||
| { | ||
| groupName: "dependencies", | ||
| matchDepTypes: ["dependencies"], | ||
| rangeStrategy: "replace", | ||
| }, | ||
| { | ||
| groupName: "peerDependencies", | ||
| matchDepTypes: ["peerDependencies"], | ||
| rangeStrategy: "widen", | ||
| }, | ||
| { | ||
| groupName: "engines", | ||
| matchDepTypes: ["engines"], | ||
| rangeStrategy: "replace", | ||
| }, | ||
| { | ||
| groupName: "typescript-eslint", | ||
| matchPackagePrefixes: ["@typescript-eslint/"], | ||
| }, | ||
| { | ||
| groupName: "vitest", | ||
| matchPackageNames: ["@vitest/coverage-c8", "@vitest/ui", "vitest"], | ||
| }, | ||
| { | ||
| groupName: "prettier", | ||
| matchPackageNames: ["@types/prettier", "prettier"], | ||
| }, | ||
| { | ||
| groupName: "typescript", | ||
| matchPackageNames: ["typescript"], | ||
| }, | ||
| ], | ||
| vulnerabilityAlerts: { | ||
| labels: ["c: security"], | ||
| assignees: ["team:maintainers"], | ||
| }, | ||
| extends: ["github>anolilab/renovate-config"], | ||
| } |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| name: "Require 'Allow Edits'" | ||
|
|
||
| on: ["pull_request_target"] # yamllint disable-line rule:truthy | ||
|
|
||
| permissions: | ||
| contents: "read" | ||
|
|
||
| jobs: | ||
| check_allow_edits: | ||
| permissions: | ||
| pull-requests: "read" # for ljharb/require-allow-edits to check 'allow edits' on PR | ||
|
|
||
| name: "Require “Allow Edits”" | ||
|
|
||
| runs-on: "ubuntu-latest" | ||
|
|
||
| steps: | ||
| - uses: "ljharb/require-allow-edits@main" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,73 @@ | ||
| # https://help.github.com/en/categories/automating-your-workflow-with-github-actions | ||
|
|
||
| name: "Semantic Pull Request" | ||
|
|
||
| on: # yamllint disable-line rule:truthy | ||
| pull_request_target: | ||
| types: | ||
| - "opened" | ||
| - "reopened" | ||
| - "edited" | ||
| - "synchronize" | ||
|
|
||
| permissions: {} | ||
|
|
||
| jobs: | ||
| main: | ||
| permissions: | ||
| pull-requests: "write" # to analyze PRs (amannn/action-semantic-pull-request) | ||
| statuses: "write" # to mark status of analyzed PR (amannn/action-semantic-pull-request) | ||
| runs-on: "ubuntu-latest" | ||
| name: "Semantic Pull Request" | ||
| steps: | ||
| - name: "Harden Runner" | ||
| uses: "step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895" # v2.6.1 | ||
| with: | ||
| egress-policy: "audit" | ||
|
|
||
| - name: "Validate PR title" | ||
| id: "lint_pr_title" | ||
| uses: "amannn/action-semantic-pull-request@e9fabac35e210fea40ca5b14c0da95a099eff26f" # v5.4.0 | ||
| env: | ||
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
| with: | ||
| types: | | ||
| build | ||
| chore | ||
| ci | ||
| deps | ||
| docs | ||
| feat | ||
| fix | ||
| perf | ||
| refactor | ||
| revert | ||
| security | ||
| style | ||
| test | ||
| translation | ||
| - uses: "marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd" # v2.8.0 | ||
| # When the previous steps fails, the workflow would stop. By adding this | ||
| # condition you can continue the execution with the populated error message. | ||
| if: "always() && (steps.lint_pr_title.outputs.error_message != null)" | ||
| with: | ||
| header: "pr-title-lint-error" | ||
| message: | | ||
| Hey there and thank you for opening this pull request! 👋🏼 | ||
| We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/) and it looks like your proposed title needs to be adjusted. | ||
| Details: | ||
| ``` | ||
| ${{ steps.lint_pr_title.outputs.error_message }} | ||
| ``` | ||
| # Delete a previous comment when the issue has been resolved | ||
| - if: "${{ steps.lint_pr_title.outputs.error_message == null }}" | ||
| uses: "marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd" # v2.8.0 | ||
| with: | ||
| header: "pr-title-lint-error" | ||
| message: | | ||
| Thank you for following the naming conventions! 🙏 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| { | ||
| // $schema provides code completion hints to IDEs. | ||
| "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json", | ||
| "low": true, | ||
| "package-manager": "pnpm", | ||
| "report-type": "important", | ||
| "allowlist": [ | ||
| // @TODO: check if node-ip will be updated to fix the vulnerability | ||
| "GHSA-78xj-cgh5-2h22|. > *", | ||
| ], | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.