v1.1.1

📜 Changelog

✨ What's Changed in v1.1.1

• Commit Range: ➡️ v1.1.0...v1.1.1

🎨 Styling

• c5e7aeb — 🎨 [style] Add logo SVG for Copy/Paste Detector _{(1 file, +10, -0)}

🧹 Chores

• 20f08f8 — Release v1.1.1 _{(2 files, +3, -3)}

• 6ae1080 — (tooling) Refresh shared validation tooling _{(5 files, +1046, -753)}

👷 CI/CD

• 7152efa — 👷 [ci] Harden release validation workflows _{(3 files, +17, -9)}

  • 🔒️ [ci] Disable dependency lifecycle scripts during CI and release installs, route Vitest through the locked package script, and require HTTPS across Gitleaks redirects.
  • 🚨 [fix] Exempt only the cross-platform-nondeterministic Tombi formatter for the Gitleaks TOML file while retaining TOML rules and runtime validation.

• 429da5a — (release) Guard git-cliff note generation _{(5 files, +153, -121)}

  • Validate the authoritative release tag at HEAD immediately before git-cliff and export GitHub authentication for enriched notes. Standardize Actionlint configuration and direct package CLI usage where applicable.

📦 Dependencies

• e3fbe76 — ⬆️ [build] Refresh dependencies and validation tooling _{(9 files, +4150, -5647)}

  • ⬆️ [build] Update jscpd and the repository's shared lint, test, package, and workflow dependencies, including their npm 12 lockfile normalization.
  • 👷 [ci] Pin current action releases, repair labeler v7 rules, and accept both npm pack JSON shapes when creating release archives.
  • 🔨 [chore] Add local cache cleanup scripts and npm lifecycle approvals while removing the obsolete tsup/esbuild override and incompatible v4 badge reporter peer.
  • 🚨 [fix] Keep generated coverage CSS out of Stylelint, retain a narrow package-controlled filesystem lint exception, and replace the disabled Discussions support link.

• cd264df — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +13, -13)}

• 60748d5 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +6, -6)}

• c9aa438 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +19, -35)}

New Contributors

• @dependabot[bot] made their first contribution in #3

Note

Release comparison: v1.1.0...v1.1.1

⭐ Contributors

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.

v1.1.0

Changelog

All notable changes to this project will be documented in this file.

[1.1.0] - 2026-07-09

• Commit Range: ➡️ c49243e...4051a9f

🛠️ Bug Fixes

• 48fc952 — 🐛 [fix] (jscpd) Stop ignoring tool package directories _{(5 files, +76, -36)}

• Replace broad tool-name ignore globs with explicit config-file patterns so packages such as eslint-plugin-* remain scannable.

• Align shared defaults with jscpd v5 by disabling symlink traversal, suppressing tips, using the 1mb size ceiling, and keeping duplicate reports informational with threshold 100.

• Extend the typed config loader and tests to cover the new noTips option and the safer scan defaults.

• Reorder package scripts with the configured package-json formatter so release verification stays clean.

🧹 Chores

• 4051a9f — Release v1.1.0 _{(2 files, +3, -3)}

• 2f2a4fd — 🔧 [chore] Keep JSCPD and Lychee out of lint all _{(1 file, +1, -1)}

🔧 [chore] Leave the dedicated JSCPD and Lychee scripts available while keeping aggregate CI lint runs focused on existing gates.

• c49243e — 🔧 [chore] Adopt shared validation configs _{(4 files, +140, -375)}

🔧 [chore] Wire JSCPD, git-cliff, and Lychee through shared config packages.

👷 [ci] Point release-note generation at the shared git-cliff config where workflows invoke git-cliff directly.

⭐ Contributors

Thanks to all the contributors for their hard work!

📜 License

This project license is here: Project License
This changelog was automatically generated with git-cliff.

v1.0.0

[1.0.0] - 2026-07-08

• Commit Range: ➡️ 71e5b70...227f914

✨ Features

• a48aa24 — ✨ [feat] (config) Add initial jscpd configuration file

• a27763f — ✨ [feat] (config) Publish shared jscpd config package

✨ [feat] Convert the template package metadata into jscpd-config-nick2bad4u, expose the bundled jscpd.json package subpath, and add typed config loading/validation for consumers that need programmatic access.

🔧 [build] Keep the native jscpd --config node_modules/jscpd-config-nick2bad4u/jscpd.json integration path, include the shared JSON config in the package payload, and update TypeScript/TypeDoc/package lint settings for the config package shape.

📝 [docs] Replace template README and checklist guidance with shared jscpd config installation, native script usage, migration, and release notes.

🧪 [test] Replace placeholder tooling-baseline smoke tests with config loading, reporter coverage, and invalid-input validation.

🛠️ Bug Fixes

• 7ae3901 — 🐛 [fix] (ci) Avoid overwriting checkout during Gitleaks install

🐛 [fix] Extract the pinned Gitleaks release under RUNNER_TEMP before installing the binary so the tarball README and LICENSE cannot overwrite repository files.

👷 [ci] Keep checksum verification and the existing npm run release:verify secret-scan path intact.

🧪 [test] Validated with npm run lint:yaml, npm run lint:actions, and npx prettier .github/workflows/ci.yml --check.

🛡️ Security

• aab7a9e — 🔒️ [fix] (deps) Override vulnerable esbuild resolution

🔒️ [fix] Add an npm override so tsup resolves esbuild 0.28.1 instead of the vulnerable 0.27.x line pulled through prettier-plugin-powershell.

🧹 [chore] Regenerate package-lock.json, removing the nested esbuild 0.27.7 optional package set now that the hoisted safe esbuild version satisfies the tree.

🧪 [test] Verified with npm audit --json and npm run release:verify.

🛠️ Other Changes

• 71e5b70 — Initial commit

📝 Documentation

• 1cc4fb9 — 📝 [docs] (readme) Match shared badge setup

📝 [docs] Add the stars, forks, Codecov, and repository checks badges from the standard README badge block.

📝 [docs] Point every badge and link at jscpd-config-nick2bad4u instead of the source repository the badges were copied from.

🧹 Chores

• 227f914 — Release v1.0.0

👷 CI/CD

• 3edcdb5 — 👷 [ci] (release) Install Gitleaks before publish verify

👷 [ci] Add the same pinned, checksum-verified Gitleaks v8.30.1 install step to the release workflow before npm run release:check.

🔒️ [fix] Preserve the release secret-scan gate without relying on the runner image having a preinstalled gitleaks binary.

🧪 [test] Validated with npm run lint:yaml, npm run lint:actions, and npx prettier .github/workflows/release.yml --check.

• 0fbddcc — 👷 [ci] (verify) Install Gitleaks for release gate

👷 [ci] Add a pinned Gitleaks v8.30.1 install step to the Ubuntu verify job so npm run release:verify can execute lint:gitleaks in GitHub Actions.

🔒️ [fix] Verify the upstream release checksum before installing the binary, preserving the existing secret-scan gate instead of skipping it.

🧪 [test] Validated with npm run lint:yaml, npm run lint:actions, and npx prettier .github/workflows/ci.yml --check.