Skip to content

Commit 146ba25

Browse files
shuuji3shuuji3
committed
Merge remote-tracking branch 'upstream/main' into shuuji3/fix/filter-out-security-holding-packages
2 parents 42555f9 + cbcdc54 commit 146ba25

File tree

553 files changed

+48675
-15644
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

553 files changed

+48675
-15644
lines changed

‎.coderabbit.yaml‎

Lines changed: 83 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,83 @@
1+
language: en-GB
2+
3+
reviews:
4+
profile: chill
5+
# Keep the high-level summary enabled (default), but place it in the
6+
# walkthrough comment instead of relying on PR description updates.
7+
high_level_summary_in_walkthrough: true
8+
review_status: true
9+
review_details: false
10+
changed_files_summary: true
11+
sequence_diagrams: true
12+
estimate_code_review_effort: false
13+
assess_linked_issues: true
14+
related_issues: true
15+
related_prs: true
16+
suggested_labels: false
17+
suggested_reviewers: true
18+
in_progress_fortune: false
19+
poem: false
20+
21+
slop_detection:
22+
enabled: true
23+
label: '007'
24+
25+
auto_review:
26+
auto_pause_after_reviewed_commits: 5
27+
labels:
28+
- '!release'
29+
ignore_title_keywords:
30+
- 'WIP'
31+
- '[skip-review]'
32+
- 'chore(release)'
33+
ignore_usernames:
34+
- 'renovate[bot]'
35+
- 'dependabot[bot]'
36+
- 'github-actions[bot]'
37+
38+
# Built-in PR metadata/content checks. Modes are: off, warning, error.
39+
pre_merge_checks:
40+
docstrings:
41+
mode: off
42+
title:
43+
mode: error
44+
description:
45+
mode: warning
46+
issue_assessment:
47+
mode: warning
48+
49+
tools:
50+
gitleaks:
51+
enabled: true
52+
osvScanner:
53+
enabled: true
54+
actionlint:
55+
enabled: true
56+
yamllint:
57+
enabled: true
58+
shellcheck:
59+
enabled: true
60+
dotenvLint:
61+
enabled: true
62+
63+
# Disable tools redundant with our own CI
64+
eslint:
65+
enabled: false
66+
biome:
67+
enabled: false
68+
oxc:
69+
enabled: false
70+
markdownlint:
71+
enabled: false
72+
languagetool:
73+
enabled: false
74+
github-checks:
75+
enabled: false
76+
77+
# Security-related, but not a good fit for this repo
78+
checkov:
79+
enabled: false
80+
trivy:
81+
enabled: false
82+
opengrep:
83+
enabled: false

‎.env.example‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
#secure password, can use openssl rand -hex 32
22
NUXT_SESSION_PASSWORD=""
33

4-
#HMAC secret for image proxy URL signing, can use openssl rand -hex 32
4+
#HMAC secret for image-proxy and OG image URL signing, can use openssl rand -hex 32
55
NUXT_IMAGE_PROXY_SECRET=""

‎.github/ISSUE_TEMPLATE/bug-report.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
name: "\U0001F41E Bug report"
22
description: Create a report to help us improve npmx
3+
type: bug
4+
labels: ['pending triage']
35
body:
46
- type: markdown
57
attributes:

‎.github/ISSUE_TEMPLATE/feature-request.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
name: '🚀 Feature request'
22
description: Suggest a feature that will improve npmx
3+
type: feature
34
labels: ['pending triage']
45
body:
56
- type: markdown

‎.github/workflows/autofix.yml‎

Lines changed: 6 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -20,26 +20,21 @@ jobs:
2020
steps:
2121
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222

23-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
23+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
2424
with:
2525
node-version: lts/*
26-
27-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
28-
name: 🟧 Install pnpm
29-
30-
- name: 📦 Install dependencies
31-
run: pnpm install
26+
cache: true
3227

3328
- name: 🎨 Check for non-RTL/non-a11y CSS classes
34-
run: pnpm lint:css
29+
run: vp run lint:css
3530

3631
- name: 🌐 Compare translations
37-
run: pnpm i18n:check
32+
run: vp run i18n:check
3833

3934
- name: 🌍 Update lunaria data
40-
run: pnpm build:lunaria
35+
run: vp run build:lunaria
4136

4237
- name: 🔠 Fix lint errors
43-
run: pnpm lint:fix
38+
run: vp run lint:fix
4439

4540
- uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 # 635ffb0c9798bd160680f18fd73371e355b85f27

‎.github/workflows/chromatic.yml‎

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -26,18 +26,16 @@ jobs:
2626
repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
2727
ref: ${{ github.event.pull_request.head.sha || github.sha }}
2828

29-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
29+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
3030
with:
3131
node-version: lts/*
32+
cache: true
3233

33-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
34-
name: 🟧 Install pnpm
35-
36-
- name: 📦 Install dependencies
37-
run: pnpm install
34+
- name: 🟧 Install pnpm globally
35+
run: vp install -g pnpm
3836

3937
- name: 🧪 Run Chromatic Visual and Accessibility Tests
40-
uses: chromaui/action@5ec258af08deb3e8c36653bd618cb7fe52090031 # v15.2.0
38+
uses: chromaui/action@f191a0224b10e1a38b2091cefb7b7a2337009116 # v16.0.0
4139
env:
4240
CHROMATIC_BRANCH: ${{ github.event.pull_request.head.ref || github.ref_name }}
4341
CHROMATIC_SHA: ${{ github.event.pull_request.head.sha || github.sha }}

‎.github/workflows/ci.yml‎

Lines changed: 32 additions & 69 deletions
Original file line numberDiff line numberDiff line change
@@ -28,18 +28,16 @@ jobs:
2828
steps:
2929
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3030

31-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
31+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
3232
with:
3333
node-version: lts/*
34-
35-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
36-
name: 🟧 Install pnpm
34+
run-install: false
3735

3836
- name: 📦 Install dependencies (root only, no scripts)
39-
run: pnpm install --filter . --ignore-scripts
37+
run: vp install --filter . --ignore-scripts
4038

4139
- name: 🔠 Lint project
42-
run: pnpm lint
40+
run: vp run lint
4341

4442
types:
4543
name: 💪 Type check
@@ -48,18 +46,13 @@ jobs:
4846
steps:
4947
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5048

51-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
49+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
5250
with:
5351
node-version: lts/*
54-
55-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
56-
name: 🟧 Install pnpm
57-
58-
- name: 📦 Install dependencies
59-
run: pnpm install
52+
cache: true
6053

6154
- name: 💪 Type check
62-
run: pnpm test:types
55+
run: vp run test:types
6356

6457
unit:
6558
name: 🧪 Unit tests
@@ -68,18 +61,13 @@ jobs:
6861
steps:
6962
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7063

71-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
64+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
7265
with:
7366
node-version: lts/*
74-
75-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
76-
name: 🟧 Install pnpm
77-
78-
- name: 📦 Install dependencies
79-
run: pnpm install
67+
cache: true
8068

8169
- name: 🧪 Unit tests
82-
run: pnpm test:unit run --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml
70+
run: vp test --project unit --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml
8371

8472
- name: ⬆︎ Upload test results to Codecov
8573
if: ${{ !cancelled() }}
@@ -94,31 +82,26 @@ jobs:
9482
steps:
9583
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9684

97-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
85+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
9886
with:
9987
node-version: lts/*
100-
101-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
102-
name: 🟧 Install pnpm
103-
104-
- name: 📦 Install dependencies
105-
run: pnpm install
88+
cache: true
10689

10790
- name: 🌐 Install browser
108-
run: pnpm playwright install chromium-headless-shell
91+
run: vp exec playwright install chromium-headless-shell
10992

11093
- name: 🧪 Component tests
111-
run: pnpm test:nuxt run --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml
94+
run: vp test --project nuxt --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml
11295

11396
- name: ⬆︎ Upload coverage reports to Codecov
114-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
97+
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
11598
with:
11699
report_type: test_results
117100
env:
118101
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
119102

120103
- name: ⬆︎ Upload coverage reports to Codecov
121-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
104+
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
122105
env:
123106
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
124107

@@ -131,23 +114,18 @@ jobs:
131114
steps:
132115
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
133116

134-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
117+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
135118
with:
136119
node-version: lts/*
137-
138-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
139-
name: 🟧 Install pnpm
140-
141-
- name: 📦 Install dependencies
142-
run: pnpm install
120+
cache: true
143121

144122
- name: 🏗️ Build project
145-
run: pnpm build:test
123+
run: vp run build:test
146124
env:
147125
VALIDATE_HTML: true
148126

149127
- name: 🖥️ Test project (browser)
150-
run: pnpm test:browser:prebuilt
128+
run: vp run test:browser:prebuilt
151129

152130
a11y:
153131
name: ♿ Accessibility audit
@@ -159,21 +137,16 @@ jobs:
159137
steps:
160138
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
161139

162-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
140+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
163141
with:
164142
node-version: lts/*
165-
166-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
167-
name: 🟧 Install pnpm
168-
169-
- name: 📦 Install dependencies
170-
run: pnpm install
143+
cache: true
171144

172145
- name: 🏗️ Build project
173-
run: pnpm build:test
146+
run: vp run build:test
174147

175148
- name: ♿ Accessibility audit (Lighthouse - ${{ matrix.mode }} mode)
176-
run: pnpm test:a11y:prebuilt
149+
run: vp run test:a11y:prebuilt
177150
env:
178151
LHCI_GITHUB_APP_TOKEN: ${{ secrets.LHCI_GITHUB_APP_TOKEN }}
179152
LIGHTHOUSE_COLOR_MODE: ${{ matrix.mode }}
@@ -185,21 +158,13 @@ jobs:
185158
steps:
186159
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
187160

188-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
161+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
189162
with:
190163
node-version: lts/*
191-
192-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
193-
name: 🟧 Install pnpm
194-
195-
- name: 📦 Install dependencies
196-
run: pnpm install
164+
cache: true
197165

198166
- name: 🧹 Check for unused code
199-
run: pnpm knip
200-
201-
- name: 🧹 Check for unused production code
202-
run: pnpm knip --production
167+
run: vp run knip
203168

204169
i18n:
205170
name: 🌐 i18n validation
@@ -208,20 +173,18 @@ jobs:
208173
steps:
209174
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
210175

211-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
176+
- uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
212177
with:
213178
node-version: lts/*
214-
215-
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
216-
name: 🟧 Install pnpm
179+
run-install: false
217180

218181
- name: 📦 Install dependencies (root only, no scripts)
219-
run: pnpm install --filter . --ignore-scripts
182+
run: vp install --filter . --ignore-scripts
220183

221184
- name: 🌐 Check for missing or dynamic i18n keys
222-
run: pnpm i18n:report
185+
run: vp run i18n:report
223186

224187
- name: 🌐 Check i18n schema is up to date
225188
run: |
226-
pnpm i18n:schema
189+
vp run i18n:schema
227190
git diff --exit-code i18n/schema.json

0 commit comments

Comments
 (0)