From 0121c0ec151acc7ca8f9cb3f6520ece2f3813f7b Mon Sep 17 00:00:00 2001 From: Erisu Date: Wed, 19 Aug 2026 18:37:00 +0900 Subject: [PATCH 1/4] chore(dependabot): add configurations --- .github/dependabot.yml | 52 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 52 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..609ac46 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,52 @@ +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. + +version: 2 + +updates: + - package-ecosystem: "github-actions" + directory: "/" + cooldown: + default-days: 5 + schedule: + interval: "weekly" # Every Monday + groups: + gh-actions-patch-minor: + patterns: + - "*" + update-types: + - "patch" + - "minor" + + - package-ecosystem: "npm" + directory: "/" + cooldown: + default-days: 5 + semver-major-days: 14 + schedule: + interval: "weekly" # Every Monday + groups: + npm-patch: + patterns: + - "*" + update-types: + - "patch" + npm-minor: + patterns: + - "*" + update-types: + - "minor" From f731cabaea40f8fd65d9783bae206d96c9799297 Mon Sep 17 00:00:00 2001 From: Erisu Date: Wed, 19 Aug 2026 18:52:45 +0900 Subject: [PATCH 2/4] chore(workflow): release-audit --- .github/workflows/release-audit.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml index 28a6b87..6bceca2 100644 --- a/.github/workflows/release-audit.yml +++ b/.github/workflows/release-audit.yml @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest steps: # Checkout project - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 1 @@ -43,7 +43,7 @@ jobs: - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd # v3.0.0 # Setup environment with node - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 From 1deb0b3a53605369f37a1793831649cff1756da7 Mon Sep 17 00:00:00 2001 From: Erisu Date: Thu, 27 Aug 2026 14:12:43 +0900 Subject: [PATCH 3/4] chore(workflow): update actions --- .github/workflows/ci.yml | 10 +++++----- .github/workflows/draft-release.yml | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6448b83..e1477ca 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,12 +35,12 @@ jobs: security-events: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 1 - - uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5 + - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: languages: javascript queries: security-and-quality @@ -49,7 +49,7 @@ jobs: - coverage - node_modules - - uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5 + - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 test: name: NodeJS ${{ matrix.node.version }} on ${{ matrix.os }} @@ -73,12 +73,12 @@ jobs: options: '' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 1 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: ${{ matrix.node.version }} diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml index d98bbc3..a7a572e 100644 --- a/.github/workflows/draft-release.yml +++ b/.github/workflows/draft-release.yml @@ -31,12 +31,12 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 1 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 package-manager-cache: false From 1ca8d0e216ea287bb2bd3db35b1b4c323f0ecf3d Mon Sep 17 00:00:00 2001 From: Erisu Date: Thu, 27 Aug 2026 14:18:10 +0900 Subject: [PATCH 4/4] chore(workflow): update test matrix --- .github/workflows/ci.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e1477ca..64f45df 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,12 +65,11 @@ jobs: # By default, all matching test files are excluded from the coverage report. # Only Node.js 22.x requires explicitly declaring test file exclusions. node: - - version: 20.x - options: '' - - version: 22.x - options: --test-coverage-exclude=test/**/*.js - - version: 24.x - options: '' + - version: 20 + - version: 22 + options: --test-coverage-exclude="test/**/*.js" + - version: 24 + - version: 26 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1