Skip to content

v7.0.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Jul 01:59
Immutable release. Only release title and notes can be modified.
v7.0.9
2516758

📜 Changelog

✨ What's Changed in v7.0.9

🛠️ Bug Fixes

  • dabbbf8 — 🚨 [fix] Remove source lint warnings and parse multiline fixtures (7 files, +45, -39)

🚨 [fix] Preserve String.raw and AJV regexp behavior without unsafe type assertions, shadowed bindings, or unsupported TSDoc tags.

🐛 [fix] Accept multiline inline configuration comments in Vue fixtures to close the CodeQL correctness finding.

📝 [docs] Regenerate TypeDoc coverage artifacts for the newly documented config-name type.

  • a4065be — 🐛 [fix] Resolve ESM worker paths from module URLs (3 files, +233, -16)

🐛 [fix] Prefer import.meta.url in ESM output so caller-global __filename bindings such as CommonJS node -e cannot redirect worker and schema resolution.

🧪 [test] Pack and install the built package in an isolated consumer, then exercise dynamic import from a CommonJS eval process and the require export.

🛡️ Security

  • f6c0158 — 🔒️ [fix] Repair dependency and audit maintenance (5 files, +89, -378)

🔒️ [fix] Override vulnerable qs with 6.15.2, remove the unused vulnerable npm Gitleaks wrapper, and keep only exact tracked development advisory chains.

🐛 [fix] Sanitize inherited npm policy variables so production and development audit commands work from npm lifecycle scripts on Windows.

🔧 [chore] Consolidate the Gitleaks allowlist for 8.24 compatibility and add the combined dependency-update script.

🧪 Testing

  • 6727b34 — 🧪 [test] Install the ESLint peer in package smoke tests (1 file, +2, -0)

🧪 [test] Make the isolated consumer valid on clean CI hosts by explicitly installing the plugin's supported ESLint 9 lower bound before loading both exports.

🧹 Chores

  • 2516758 — Release v7.0.9 (2 files, +3, -3)

  • abd698d — 🧹 [chore] Adopt shared tooling configs (19 files, +2778, -3579)

🧹 [chore] Replace copied NCU, JSCPD, and TypeDoc helpers with maintained shared packages and refresh tooling dependencies.

🐛 [fix] Preserve AJV, AST analysis, package validation, and documentation behavior under the upgraded lint and type stack.

🧪 [test] Keep intentional integration fixtures outside the aggregate Remark gate.

  • cd0ba1f — 🔧 [chore] Keep JSCPD and Lychee out of lint all (1 file, +1, -1)

🔧 [chore] Leave the dedicated JSCPD and Lychee scripts available while keeping aggregate CI lint runs focused on existing gates.

  • 79f7802 — 🔧 [chore] Adopt shared validation configs (5 files, +166, -969)

🔧 [chore] Wire JSCPD, git-cliff, and Lychee through shared config packages.

👷 [ci] Point release-note generation at the shared git-cliff config where workflows invoke git-cliff directly.

👷 CI/CD

  • d0ff467 — 👷 [ci] Upload coverage only after successful tests (1 file, +1, -1)

  • 9813d33 — 👷 [ci] Harden release automation and update actions (4 files, +30, -17)

👷 [ci] Pin release-job Go tools, reject verification drift before versioning, and stage only intentional version metadata.

🐛 [fix] Accept npm 11 array and npm 12 object pack metadata when creating release assets.

📌 [ci] Refresh harden-runner, CodeQL, and GitHub release action SHAs to their verified tagged revisions.

Note

Release comparison: v7.0.8...v7.0.9

⭐ Contributors

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.

Assets 5
Loading