Release code-scan-action v0.1.5

[promptfoobot]

Automated release mirror for @promptfoo/code-scan-action v0.1.5.

Source: promptfoo/promptfoo@7b078eb
Source tag: code-scan-action-0.1.5

This PR is generated from the monorepo release workflow. The mirror repository validation workflow rebuilds from .release-source.json and checks that the generated artifacts match.

[chatgpt-codex-connector]

💡 Codex Review

https://github.com/promptfoo/code-scan-action/blob/5d39eda2b13a57a557fad57bb3a981911e0afd9b/dist/index.js#L1
Ship a CommonJS-compatible action entrypoint

The new bundle now starts with an ESM import in dist/index.js, but this repository still exposes dist/index.js as a node20 action entrypoint without a package.json declaring "type": "module". On Node 20 runtimes that do not enable ambiguous-module syntax detection (for example older 20.x builds on self-hosted runners, or environments with --no-experimental-detect-module), the action fails immediately with SyntaxError: Cannot use import statement outside a module, so no scan can run.

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[mldangelo]

Superseded by v0.1.6 (#8). v0.1.6's changelog spans code-scan-action-0.1.5...0.1.6, so it includes everything this PR would have shipped. The mirror-sync bug that blocked this PR's validate-release-pr check is fixed in promptfoo/promptfoo#9363. Closing as obsolete.