Skip to content

v2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jul 20:14
v2.0.0
9416540
This commit was signed with the committer’s verified signature.
Nick2bad4u Typpi
GPG key ID: CF975FEFD36D2AF5
Verified
Learn about vigilant mode.

[1.0.6] - 2026-07-04

️ Bug Fixes

  • 3fa08dc — 🐛 [fix] (skills) Install bundled resources from GitHub

🐛 [fix] Move the Bundlephobia skill payload under skills/bundle-size-analysis so npx skills installs SKILL.md together with agents, assets, references, scripts, and LICENSE.txt instead of treating the repository root as a single-file skill.

🔧 [chore] Update package files, codexSkill.path, validation checks, Python quality commands, and release bundle creation for the nested skill layout.

🧪 [test] Adjust helper tests and Python tooling paths for the moved script, disable the problematic global xonsh pytest plugin, and use a repo-local pytest temp directory.

📝 [docs] Refresh README, contributing, PR template, issue template, and labeler paths to match the nested skill structure.

CI/CD

  • 9416540 — 💚 [ci] Fix Linux Python quality checks

💚 [ci] Keep the moved helper executable with a shebang so Ruff passes on Linux.

🧪 [test] Move pytest basetemp to pytest-tmp and ignore it so fresh Linux runners can create the temporary directory without requiring a pre-existing .cache parent.

  • 1b08692 — 💚 [ci] Remove shebang from Python helper

💚 [ci] Remove the shebang from the Bundlephobia helper because the documented entrypoint is python scripts/bundle_size_analysis.py, and Windows core.filemode settings prevented a reliable mode-only fix for Linux Ruff EXE001.

  • f8f4468 — 💚 [ci] Mark bundle helper executable

💚 [ci] Preserve the executable bit for the nested Bundlephobia helper so Ruff EXE001 passes on Linux CI while keeping the shebang valid.

  • 8131ab8 — 💚 [ci] Preserve helper executable mode after move

💚 [ci] Restore executable permissions on the moved Bundlephobia helper so Linux Ruff no longer reports EXE001.

🧪 [test] Point tests and Python tool paths at the moved script module directly, avoiding the old nested scripts namespace after the skill layout change.

[1.0.5] - 2026-06-29

️ Bug Fixes

  • fd95440 — Clear Sonar and Codecov CI failures

  • 7e3cec9 — 🐛 [fix] Upload Python coverage as LCOV

Switch the Python coverage artifact uploaded to Codecov from Cobertura XML to LCOV while preserving the same pytest-cov coverage gate.

Codecov was accepting the XML upload command but marking the processed coverage upload as ERROR; LCOV avoids that parser failure and still reports the same source-only coverage data.

  • 4f71924 — 🐛 [fix] Avoid Codecov flag path filtering

Remove the top-level python flag path filter from codecov.yml.

Coverage.py now emits a source-only report with repo-relative scripts/ paths, so Codecov can rely on the uploaded python flag without a second server-side path filter that was producing errored coverage uploads.

  • cebcef5 — 🐛 [fix] Stop Codecov from rewriting reports

Set Codecov upload plugins to noop for both pytest JUnit and coverage uploads.

The workflow already produces explicit test and coverage report files, and disabling preparation plugins prevents the uploader from regenerating coverage XML during upload processing.

  • 9f9992b — 🐛 [fix] Emit repo-relative coverage paths

Switch pytest-cov to measure the repository root while omitting tests so Cobertura XML paths stay repo-relative under scripts/.

This lets Codecov map the python-flagged coverage report to the configured scripts/ path instead of processing an unmapped bundle_size_analysis.py report.

CI/CD

  • 1644d4b — 📈 [ci] Unblock Codecov status reporting

📈 [ci] Let Codecov process coverage independently from unrelated external check providers so accepted Python coverage uploads can report status without waiting on non-CodeCov integrations.

  • 2e4a136 — 👷 [ci] Configure Codecov coverage gates

Add a repository Codecov configuration for the Python coverage upload, including explicit project and patch statuses for the python flag at the 75% threshold.

Keep Codecov notifications tied to CI completion, configure the Python flag path, and ignore tests in coverage reporting. Fetch full history in the Python Quality workflow so Codecov can compare commits reliably.

[1.0.4] - 2026-06-29

✨ Features

  • c8f4f78 — ✨ [feat] Add strict Python coverage and Codecov CI

✨ [feat] Harden the Bundlephobia helper for strict Python validation with typed query options, safer JSON boundaries, validated API URLs, deterministic npm pack parsing, and CLI output helpers.

🧪 [test] Replace the legacy unittest coverage with pytest scenarios for package scanning, Bundlephobia endpoint handling, threshold failures, npm pack parsing, audit composition, and text rendering; enforce 75 percent coverage with pytest-cov and Codecov-ready XML/JUnit outputs.

👷 [ci] Add a Python Quality workflow that runs lint, mypy, Pyright, pytest coverage, compile checks, and Codecov OIDC uploads for test results and coverage; update the release workflow to install Python dependencies before release verification.

🔧 [chore] Add strict Python, Pyright, Ruff, pytest, coverage, VS Code, skillcheck, and pinned requirements configuration so local and CI gates use the same commands.

📝 [docs] Move detailed Bundlephobia helper guidance into a reference file and link it from the skill and README to keep SKILL.md compact.

[1.0.3] - 2026-06-27

️ Bug Fixes

  • 3061946 — 🔒️ [fix] Mark Bundlephobia API text as untrusted

Dependencies

[dependabot]actions: [dependency] Update actions/dependency-review-action 5.0.0

  • 22854e9 — (deps) [dependency] Update actions/dependency-review-action

️ Security

  • ff7f770 — 👷 [ci] Use shared workflow callers

👷 [ci] Switches the Dependabot auto-merge caller to workflow-templates@main and replaces local security and maintenance workflows with shared reusable callers.

⬆️ [build] Updates eslint-config-nick2bad4u to the published caller override version and records any peer dependency needed for the shared ESLint config to load.

Testing

CI/CD

  • 6659699 — Update Dependabot auto-merge workflow pin

  • 3b2b121 — Add Dependabot auto-merge workflow

[1.0.2] - 2026-05-29

Documentation

  • 7c7faf1 — Document universal skill installs

[1.0.1] - 2026-05-29

✨ Features

  • 8de6f6e — ✨ [feat] (bundle-size-analysis) Introduce Bundlephobia skill for package size analysis

  • Added a new Python script for querying Bundlephobia, npm pack, and local artifact sizes.

  • Implemented functionality to fetch package sizes, dependencies, and export data from Bundlephobia.

  • Included commands for scanning package.json files and measuring local build artifacts.

  • Enhanced documentation to reflect the new skill and its capabilities.

  • Updated release workflow to package the new skill correctly.

  • Changed repository references from SonarCloud to Bundlephobia throughout documentation and scripts.

️ Other Changes

  • 09cc39a — Use git-cliff release notes and npm publish

  • 74c91c9 — Add SonarLint project binding

  • 342de4d — Reduce Bundlephobia helper complexity

  • 1a3c94b — Fix SonarCloud findings

  • ef3b130 — Rename npm package for skill publishing

  • 7e10752 — Move skill package to repository root

  • 046f94c — Allow npm package publishing

  • 8e4f1f1 — Use staged npm publishing for skill releases

  • c834ea6 — Add npm trusted publishing release setup

  • b839467 — Remove stale Sonar skill payload

  • 4cfca14 — Add Codex skill metadata

  • 372df90 — Initial commit

⭐ Contributors

Thanks to all the contributors for their hard work!

License

This project is licensed under the Unlicense.
This changelog was automatically generated with git-cliff.

Assets 3
Loading