diff --git a/.github/actions/prepare/action.yml b/.github/actions/prepare/action.yml index 1c10c25..1135bc2 100644 --- a/.github/actions/prepare/action.yml +++ b/.github/actions/prepare/action.yml @@ -7,7 +7,7 @@ runs: - uses: pnpm/action-setup@v2 with: version: 9 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: cache: pnpm node-version: "20" diff --git a/.github/workflows/accessibility-alt-text-bot.yml b/.github/workflows/accessibility-alt-text-bot.yml index 96af67f..dc2a2c8 100644 --- a/.github/workflows/accessibility-alt-text-bot.yml +++ b/.github/workflows/accessibility-alt-text-bot.yml @@ -3,7 +3,7 @@ jobs: if: ${{ !endsWith(github.actor, '[bot]') }} runs-on: ubuntu-latest steps: - - uses: github/accessibility-alt-text-bot@v1.4.0 + - uses: github/accessibility-alt-text-bot@602a5efcf386c52ef8b9a11ead9bfa6ef8d56ba5 # v1.4.0 name: Accessibility Alt Text Bot diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 057fc54..c7752e9 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -2,7 +2,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm build - run: node ./lib/index.js diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index 9d22aa1..75840cd 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -2,13 +2,13 @@ jobs: contributors: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 0 - uses: ./.github/actions/prepare - env: GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }} - uses: JoshuaKGoldberg/all-contributors-auto-action@v0.4.3 + uses: JoshuaKGoldberg/all-contributors-auto-action@da2f2aa14f945bd45c882b83356f24e6dce91629 # v0.4.3 name: Contributors diff --git a/.github/workflows/lint-knip.yml b/.github/workflows/lint-knip.yml index 781d52e..f70fdc1 100644 --- a/.github/workflows/lint-knip.yml +++ b/.github/workflows/lint-knip.yml @@ -2,7 +2,7 @@ jobs: lint_knip: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:knip diff --git a/.github/workflows/lint-markdown.yml b/.github/workflows/lint-markdown.yml index acac714..4490f5c 100644 --- a/.github/workflows/lint-markdown.yml +++ b/.github/workflows/lint-markdown.yml @@ -2,7 +2,7 @@ jobs: lint_markdown: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:md diff --git a/.github/workflows/lint-packages.yml b/.github/workflows/lint-packages.yml index 87520ca..e99c602 100644 --- a/.github/workflows/lint-packages.yml +++ b/.github/workflows/lint-packages.yml @@ -2,7 +2,7 @@ jobs: lint_packages: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:packages diff --git a/.github/workflows/lint-spelling.yml b/.github/workflows/lint-spelling.yml index ef020b6..d24c32f 100644 --- a/.github/workflows/lint-spelling.yml +++ b/.github/workflows/lint-spelling.yml @@ -2,7 +2,7 @@ jobs: lint_spelling: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:spelling diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index f174caa..6e23079 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -2,7 +2,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm lint diff --git a/.github/workflows/post-release.yml b/.github/workflows/post-release.yml index 277b3a1..e0841d3 100644 --- a/.github/workflows/post-release.yml +++ b/.github/workflows/post-release.yml @@ -2,11 +2,11 @@ jobs: post_release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 0 - run: echo "npm_version=$(npm pkg get version | tr -d '"')" >> "$GITHUB_ENV" - - uses: apexskier/github-release-commenter@v1 + - uses: apexskier/github-release-commenter@e7813a9625eabd79a875b4bc4046cfcae377ab34 # v1 with: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} comment-template: | diff --git a/.github/workflows/pr-review-requested.yml b/.github/workflows/pr-review-requested.yml index e2e518c..6fbec03 100644 --- a/.github/workflows/pr-review-requested.yml +++ b/.github/workflows/pr-review-requested.yml @@ -2,7 +2,7 @@ jobs: pr_review_requested: runs-on: ubuntu-latest steps: - - uses: actions-ecosystem/action-remove-labels@v1 + - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1 with: labels: "status: waiting for author" - if: failure() diff --git a/.github/workflows/prettier.yml b/.github/workflows/prettier.yml index ae43fc4..95781c4 100644 --- a/.github/workflows/prettier.yml +++ b/.github/workflows/prettier.yml @@ -2,7 +2,7 @@ jobs: prettier: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm format --list-different diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f1f8e39..8c18489 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,7 +5,7 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 0 ref: main @@ -14,7 +14,7 @@ jobs: - env: GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - uses: JoshuaKGoldberg/release-it-action@v0.2.2 + uses: JoshuaKGoldberg/release-it-action@77373cfc2535e21149518381cb09e1c04c6068fe # v0.2.2 name: Release diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 747261b..04d7e83 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -2,7 +2,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm run test --coverage - name: Codecov diff --git a/.github/workflows/tsc.yml b/.github/workflows/tsc.yml index 3b20f24..d4ca26d 100644 --- a/.github/workflows/tsc.yml +++ b/.github/workflows/tsc.yml @@ -2,7 +2,7 @@ jobs: type_check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/prepare - run: pnpm tsc diff --git a/package.json b/package.json index 0abd0b3..526420c 100644 --- a/package.json +++ b/package.json @@ -40,41 +40,41 @@ "prettier": "3.3.2" }, "devDependencies": { - "@eslint-community/eslint-plugin-eslint-comments": "^4.3.0", - "@eslint/js": "^9.5.0", - "@types/eslint-plugin-markdown": "^2.0.2", + "@eslint-community/eslint-plugin-eslint-comments": "4.3.0", + "@eslint/js": "9.5.0", + "@types/eslint-plugin-markdown": "2.0.2", "@types/jscodeshift": "0.12.0", "@types/node": "20.14.9", - "@vitest/coverage-v8": "^1.6.0", - "console-fail-test": "^0.2.3", - "cspell": "^8.9.1", - "eslint": "^9.5.0", - "eslint-plugin-jsdoc": "^48.5.0", - "eslint-plugin-jsonc": "^2.16.0", - "eslint-plugin-markdown": "^5.0.0", - "eslint-plugin-n": "^17.9.0", - "eslint-plugin-package-json": "^0.15.0", - "eslint-plugin-perfectionist": "^2.11.0", - "eslint-plugin-regexp": "^2.6.0", - "eslint-plugin-vitest": "^0.5.4", - "eslint-plugin-yml": "^1.14.0", - "husky": "^9.0.11", + "@vitest/coverage-v8": "1.6.0", + "console-fail-test": "0.2.3", + "cspell": "8.9.1", + "eslint": "9.5.0", + "eslint-plugin-jsdoc": "48.5.0", + "eslint-plugin-jsonc": "2.16.0", + "eslint-plugin-markdown": "5.0.0", + "eslint-plugin-n": "17.9.0", + "eslint-plugin-package-json": "0.15.0", + "eslint-plugin-perfectionist": "2.11.0", + "eslint-plugin-regexp": "2.6.0", + "eslint-plugin-vitest": "0.5.4", + "eslint-plugin-yml": "1.14.0", + "husky": "9.0.11", "jscodeshift": "17.0.0", - "jsonc-eslint-parser": "^2.4.0", - "knip": "^5.23.1", - "lint-staged": "^15.2.7", - "markdownlint": "^0.34.0", - "markdownlint-cli": "^0.41.0", - "prettier-plugin-curly": "^0.2.1", - "prettier-plugin-packagejson": "^2.5.0", - "prettier-plugin-sh": "^0.14.0", - "release-it": "^17.4.0", - "sentences-per-line": "^0.2.1", - "tsup": "^8.1.0", - "tsx": "^4.16.0", - "typescript": "^5.5.2", - "typescript-eslint": "^7.14.1", - "vitest": "^1.6.0" + "jsonc-eslint-parser": "2.4.0", + "knip": "5.23.1", + "lint-staged": "15.2.7", + "markdownlint": "0.34.0", + "markdownlint-cli": "0.41.0", + "prettier-plugin-curly": "0.2.1", + "prettier-plugin-packagejson": "2.5.0", + "prettier-plugin-sh": "0.14.0", + "release-it": "17.4.0", + "sentences-per-line": "0.2.1", + "tsup": "8.1.0", + "tsx": "4.16.0", + "typescript": "5.5.2", + "typescript-eslint": "7.14.1", + "vitest": "1.6.0" }, "packageManager": "pnpm@9.10.0+sha512.73a29afa36a0d092ece5271de5177ecbf8318d454ecd701343131b8ebc0c1a91c487da46ab77c8e596d6acf1461e3594ced4becedf8921b074fbd8653ed7051c", "engines": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3cfb950..b4cc296 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -19,13 +19,13 @@ importers: version: 3.3.2 devDependencies: '@eslint-community/eslint-plugin-eslint-comments': - specifier: ^4.3.0 + specifier: 4.3.0 version: 4.3.0(eslint@9.5.0) '@eslint/js': - specifier: ^9.5.0 + specifier: 9.5.0 version: 9.5.0 '@types/eslint-plugin-markdown': - specifier: ^2.0.2 + specifier: 2.0.2 version: 2.0.2 '@types/jscodeshift': specifier: 0.12.0 @@ -34,94 +34,94 @@ importers: specifier: 20.14.9 version: 20.14.9 '@vitest/coverage-v8': - specifier: ^1.6.0 + specifier: 1.6.0 version: 1.6.0(vitest@1.6.0(@types/node@20.14.9)) console-fail-test: - specifier: ^0.2.3 + specifier: 0.2.3 version: 0.2.3 cspell: - specifier: ^8.9.1 + specifier: 8.9.1 version: 8.9.1 eslint: - specifier: ^9.5.0 + specifier: 9.5.0 version: 9.5.0 eslint-plugin-jsdoc: - specifier: ^48.5.0 + specifier: 48.5.0 version: 48.5.0(eslint@9.5.0) eslint-plugin-jsonc: - specifier: ^2.16.0 + specifier: 2.16.0 version: 2.16.0(eslint@9.5.0) eslint-plugin-markdown: - specifier: ^5.0.0 + specifier: 5.0.0 version: 5.0.0(eslint@9.5.0) eslint-plugin-n: - specifier: ^17.9.0 + specifier: 17.9.0 version: 17.9.0(eslint@9.5.0) eslint-plugin-package-json: - specifier: ^0.15.0 + specifier: 0.15.0 version: 0.15.0(eslint@9.5.0)(jsonc-eslint-parser@2.4.0) eslint-plugin-perfectionist: - specifier: ^2.11.0 + specifier: 2.11.0 version: 2.11.0(eslint@9.5.0)(typescript@5.5.2) eslint-plugin-regexp: - specifier: ^2.6.0 + specifier: 2.6.0 version: 2.6.0(eslint@9.5.0) eslint-plugin-vitest: - specifier: ^0.5.4 + specifier: 0.5.4 version: 0.5.4(eslint@9.5.0)(typescript@5.5.2)(vitest@1.6.0(@types/node@20.14.9)) eslint-plugin-yml: - specifier: ^1.14.0 + specifier: 1.14.0 version: 1.14.0(eslint@9.5.0) husky: - specifier: ^9.0.11 + specifier: 9.0.11 version: 9.0.11 jscodeshift: specifier: 17.0.0 version: 17.0.0 jsonc-eslint-parser: - specifier: ^2.4.0 + specifier: 2.4.0 version: 2.4.0 knip: - specifier: ^5.23.1 + specifier: 5.23.1 version: 5.23.1(@types/node@20.14.9)(typescript@5.5.2) lint-staged: - specifier: ^15.2.7 + specifier: 15.2.7 version: 15.2.7 markdownlint: - specifier: ^0.34.0 + specifier: 0.34.0 version: 0.34.0 markdownlint-cli: - specifier: ^0.41.0 + specifier: 0.41.0 version: 0.41.0 prettier-plugin-curly: - specifier: ^0.2.1 + specifier: 0.2.1 version: 0.2.1(prettier@3.3.2) prettier-plugin-packagejson: - specifier: ^2.5.0 + specifier: 2.5.0 version: 2.5.0(prettier@3.3.2) prettier-plugin-sh: - specifier: ^0.14.0 + specifier: 0.14.0 version: 0.14.0(prettier@3.3.2) release-it: - specifier: ^17.4.0 + specifier: 17.4.0 version: 17.4.0(typescript@5.5.2) sentences-per-line: - specifier: ^0.2.1 + specifier: 0.2.1 version: 0.2.1 tsup: - specifier: ^8.1.0 + specifier: 8.1.0 version: 8.1.0(postcss@8.4.38)(typescript@5.5.2) tsx: - specifier: ^4.16.0 + specifier: 4.16.0 version: 4.16.0 typescript: - specifier: ^5.5.2 + specifier: 5.5.2 version: 5.5.2 typescript-eslint: - specifier: ^7.14.1 + specifier: 7.14.1 version: 7.14.1(eslint@9.5.0)(typescript@5.5.2) vitest: - specifier: ^1.6.0 + specifier: 1.6.0 version: 1.6.0(@types/node@20.14.9) packages: @@ -538,6 +538,7 @@ packages: '@ericcornelissen/bash-parser@0.5.3': resolution: {integrity: sha512-9Z0sGuXqf6En19qmwB0Syi1Mc8TYl756dNuuaYal9mrypKa0Jq/IX6aJfh6Rk2S3z66KBisWTqloDo7weYj4zg==} engines: {node: '>=4'} + deprecated: Support for this package will stop 2025-12-31 '@es-joy/jsdoccomment@0.43.1': resolution: {integrity: sha512-I238eDtOolvCuvtxrnqtlBaw0BwdQuYqK7eA6XIonicMdOOOb75mqdIzkGDUbS04+1Di007rgm9snFRNeVrOog==} @@ -1746,6 +1747,7 @@ packages: eslint-plugin-markdown@5.0.0: resolution: {integrity: sha512-kY2u9yDhzvfZ0kmRTsvgm3mTnvZgTSGIIPeHg3yesSx4R5CTCnITUjCPhzCD1MUhNcqHU5Tr6lzx+02EclVPbw==} engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0} + deprecated: Please use @eslint/markdown instead peerDependencies: eslint: '>=8' @@ -2049,11 +2051,12 @@ packages: glob@10.4.2: resolution: {integrity: sha512-GwMlUF6PkPo3Gk21UxkCohOv0PLcIXVtKyLlpEI28R/cO/4eNOdmLk3CMW1wROV/WR/EsZOWAfBbBOqYvs88/w==} engines: {node: '>=16 || 14 >=14.18'} + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me hasBin: true glob@7.2.3: resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==} - deprecated: Glob versions prior to v9 are no longer supported + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me global-directory@4.0.1: resolution: {integrity: sha512-wHTUcDUoZ1H5/0iVqEudYW4/kAlN5cZ3j/bXn0Dpbizl9iaUVeWSHqiOjsgk6OW2bkLclbBjzewBz6weQ1zA2Q==} @@ -2829,6 +2832,7 @@ packages: mvdan-sh@0.10.1: resolution: {integrity: sha512-kMbrH0EObaKmK3nVRKUIIya1dpASHIEusM13S4V1ViHFuxuNxCo+arxoa6j/dbV22YBGjl7UKJm9QQKJ2Crzhg==} + deprecated: See https://github.com/mvdan/sh/issues/1145 mz@2.7.0: resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==} @@ -2858,6 +2862,7 @@ packages: node-domexception@1.0.0: resolution: {integrity: sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==} engines: {node: '>=10.5.0'} + deprecated: Use your platform's native DOMException instead node-fetch@2.7.0: resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==} @@ -3482,6 +3487,7 @@ packages: source-map@0.8.0-beta.0: resolution: {integrity: sha512-2ymg6oRBpebeZi9UUNsgQ89bhx01TcTkmNTGnNO88imTmbSgy4nfujrgVEFKWpMTEGA11EDkTt7mqObTPdigIA==} engines: {node: '>= 8'} + deprecated: The work that was done in this beta branch won't be included in future versions spdx-exceptions@2.5.0: resolution: {integrity: sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==}