Skip to content

v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jul 05:47
· 13 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.0.0
227f914

[1.0.0] - 2026-07-08

✨ Features

  • a48aa24 — ✨ [feat] (config) Add initial jscpd configuration file

  • a27763f — ✨ [feat] (config) Publish shared jscpd config package

✨ [feat] Convert the template package metadata into jscpd-config-nick2bad4u, expose the bundled jscpd.json package subpath, and add typed config loading/validation for consumers that need programmatic access.

🔧 [build] Keep the native jscpd --config node_modules/jscpd-config-nick2bad4u/jscpd.json integration path, include the shared JSON config in the package payload, and update TypeScript/TypeDoc/package lint settings for the config package shape.

📝 [docs] Replace template README and checklist guidance with shared jscpd config installation, native script usage, migration, and release notes.

🧪 [test] Replace placeholder tooling-baseline smoke tests with config loading, reporter coverage, and invalid-input validation.

🛠️ Bug Fixes

  • 7ae3901 — 🐛 [fix] (ci) Avoid overwriting checkout during Gitleaks install

🐛 [fix] Extract the pinned Gitleaks release under RUNNER_TEMP before installing the binary so the tarball README and LICENSE cannot overwrite repository files.

👷 [ci] Keep checksum verification and the existing npm run release:verify secret-scan path intact.

🧪 [test] Validated with npm run lint:yaml, npm run lint:actions, and npx prettier .github/workflows/ci.yml --check.

🛡️ Security

  • aab7a9e — 🔒️ [fix] (deps) Override vulnerable esbuild resolution

🔒️ [fix] Add an npm override so tsup resolves esbuild 0.28.1 instead of the vulnerable 0.27.x line pulled through prettier-plugin-powershell.

🧹 [chore] Regenerate package-lock.json, removing the nested esbuild 0.27.7 optional package set now that the hoisted safe esbuild version satisfies the tree.

🧪 [test] Verified with npm audit --json and npm run release:verify.

🛠️ Other Changes

📝 Documentation

  • 1cc4fb9 — 📝 [docs] (readme) Match shared badge setup

📝 [docs] Add the stars, forks, Codecov, and repository checks badges from the standard README badge block.

📝 [docs] Point every badge and link at jscpd-config-nick2bad4u instead of the source repository the badges were copied from.

🧹 Chores

👷 CI/CD

  • 3edcdb5 — 👷 [ci] (release) Install Gitleaks before publish verify

👷 [ci] Add the same pinned, checksum-verified Gitleaks v8.30.1 install step to the release workflow before npm run release:check.

🔒️ [fix] Preserve the release secret-scan gate without relying on the runner image having a preinstalled gitleaks binary.

🧪 [test] Validated with npm run lint:yaml, npm run lint:actions, and npx prettier .github/workflows/release.yml --check.

  • 0fbddcc — 👷 [ci] (verify) Install Gitleaks for release gate

👷 [ci] Add a pinned Gitleaks v8.30.1 install step to the Ubuntu verify job so npm run release:verify can execute lint:gitleaks in GitHub Actions.

🔒️ [fix] Verify the upstream release checksum before installing the binary, preserving the existing secret-scan gate instead of skipping it.

🧪 [test] Validated with npm run lint:yaml, npm run lint:actions, and npx prettier .github/workflows/ci.yml --check.

Assets 5
Loading