v3.0.2

📜 Changelog

✨ What's Changed in v3.0.2

• Commit Range: ➡️ v3.0.1...v3.0.2

🛠️ Bug Fixes

• 3b7f1bc — (config) Add evidence-backed bot route exclusions _{(3 files, +89, -1)}
  • 🐛 [fix] Exclude Medium, blocked Stack Overflow Q&A routes, Package Phobia pages, and the main Reddit host while preserving same-host controls.
  • 🧪 [test] Evaluate packaged exclusion expressions against excluded and checkable URL fixtures.
  • 📝 [docs] Clarify that bot-hostile route exclusions require narrow evidence.

🧹 Chores

• 8afbb02 — 🔖 [chore] Release v3.0.2 _{(2 files, +3, -3)}

Note

Release comparison: v3.0.1...v3.0.2

⭐ Contributors

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.

v3.0.1

📜 Changelog

✨ What's Changed in v3.0.1

• Commit Range: ➡️ v3.0.0...v3.0.1

🛠️ Bug Fixes

• 6e385dc — (config) Exclude deliberate Google fixture URLs _{(2 files, +22, -0)}
  • 🐛 [fix] Add value-specific exclusions for known fake Apps Script and Google Photos fixture IDs while preserving checks for real deployment and share IDs.
  • 🧪 [test] Lock the three narrow patterns into the shared preset regression suite.

🧹 Chores

• 9316876 — 🔖 [chore] Release v3.0.1 _{(2 files, +3, -3)}

Note

Release comparison: v3.0.0...v3.0.1

⭐ Contributors

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.

v3.0.0

📜 Changelog

✨ What's Changed in v3.0.0

• Commit Range: ➡️ v2.0.0...v3.0.0

✨ Features

• 0bddeec — (config) Modernize shared Lychee defaults _{(2 files, +183, -134)}
  • 💥 [feat] Tighten the public link-checking baseline with GET requests, transient failure cache exclusions, explicit mail handling, safer generated-path filters, and narrowly scoped exclusions for consistently blocked services.
• Keep GitHub-heavy CI concurrency conservative while adding targeted host throttles for APIs and documentation sites.
• Clarify every public default and preserve strict TLS, HTTPS, private-address, and failure-status behavior.
  • 🧪 [test] Expand the package-surface regression assertions to cover the new request, cache, report, mail, host, and credential-safety defaults.
  • BREAKING CHANGE: The published lychee.toml baseline changes request behavior, cache policy, exclusions, and host throttling for every consumer.

🛠️ Bug Fixes

• 3e81db4 — (lint) Make Tombi formatting portable _{(1 file, +21, -0)}

  • 🐛 [fix] Check in the TOML formatting rules previously inherited from the local user profile.
    🧪 [test] Keep Windows and clean Linux ESLint/Tombi results identical.

• a585747 — (labeler) Use supported branch matchers _{(1 file, +52, -121)}

  • 🐛 [fix] Replace unsupported PR title and body matchers with actions/labeler head-branch rules that follow the repository's type/description branch convention.
  • 🔧 [chore] Preserve path-based build, documentation, testing, configuration, dependency, and shared-rule labeling while composing branch alternatives with supported any matchers.

🧹 Chores

• 88a8b52 — 🔖 [chore] Release v3.0.0 _{(2 files, +3, -3)}

• af9b0a8 — (tooling) Remove the legacy JSCPD config _{(1 file, +0, -111)}

• 04a5a04 — (tooling) Refresh shared validation tooling _{(5 files, +1046, -753)}

👷 CI/CD

• 65293f8 — (release) Guard git-cliff note generation _{(5 files, +153, -121)}
  • Validate the authoritative release tag at HEAD immediately before git-cliff and export GitHub authentication for enriched notes. Standardize Actionlint configuration and direct package CLI usage where applicable.

📦 Dependencies

• 4ce146b — (deps) Refresh Node and validation toolchain _{(7 files, +2671, -4289)}

  • ⬆️ [build] Update Node to 26.7.0, npm to 12.0.2, shared lint presets, validation CLIs, and compatible transitive packages; retain TypeScript 6 while the configured policy rejects the 7.x major.
  • 🔒️ [ci] Refresh pinned checkout, setup-node, CodeQL, harden-runner, and release action SHAs to their verified release commits.
  • 🔨 [chore] Make dependency updates clear the machine-level npm allow-scripts setting for the update command so the repository's package policy remains authoritative.
  • 🐛 [fix] Consume eslint-plugin-yamllint 1.0.5 through eslint-config-nick2bad4u, restoring ESLint 10 native YAML linting without adding a duplicate direct dependency.

• 1d78a94 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +10, -10)}

• d55cdef — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +6, -6)}

• f438448 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +19, -35)}

🛡️ Security

• e72d108 — (supply-chain) Harden workflow dependency installs _{(2 files, +9, -9)}
  • 🔒️ [ci] Block dependency lifecycle scripts during clean CI and release installs.
    📌 [ci] Pin Gitleaks to the immutable commit behind v8.30.1.
    🧪 [test] Require the lockfile-installed Vitest binary instead of permitting npx downloads.

New Contributors

• @dependabot[bot] made their first contribution in #3

Note

Release comparison: v2.0.0...v3.0.0

⭐ Contributors

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.

v2.0.0

Changelog

All notable changes to this project will be documented in this file.

[2.0.0] - 2026-07-09

• Commit Range: ➡️ a3cecad...6859e61

🧹 Chores

• 6859e61 — 🔖 [chore] Release v2.0.0 _{(2 files, +3, -3)}

• 031b901 — 🔧 [chore] Stop accepting Lychee rate limits _{(2 files, +4, -4)}

🔧 [chore] Remove 429 from the shared Lychee accepted-status range so rate-limited links fail instead of passing while cache exclusion still avoids storing transient rate-limit responses.

🧪 [test] Update the preset regression test to assert that 429 remains cache-excluded without being accepted as a successful link check.

• d01e192 — 🔧 [chore] Keep JSCPD and Lychee out of lint all _{(1 file, +1, -1)}

🔧 [chore] Leave the dedicated JSCPD and Lychee scripts available while keeping aggregate CI lint runs focused on existing gates.

• 133a640 — 🔧 [chore] Adopt shared validation configs _{(3 files, +142, -375)}

🔧 [chore] Wire JSCPD, git-cliff, and Lychee through shared config packages.

👷 [ci] Point release-note generation at the shared git-cliff config where workflows invoke git-cliff directly.

👷 CI/CD

• a3cecad — 👷 [ci] Match release commit message rules _{(1 file, +1, -1)}

👷 [ci] Use the repository emoji and [type] format for workflow-generated release commits.

✅ [test] Verified actionlint, YAML lint, and Lychee after the release workflow update.

⭐ Contributors

Thanks to all the contributors for their hard work!

📜 License

This project license is here: Project License
This changelog was automatically generated with git-cliff.

v1.0.0

[1.0.0] - 2026-07-08

• Commit Range: ➡️ 2e2d1bf...dfb216a

✨ Features

• c8773e5 — ✨ [feat] Add shared Lychee link checker configuration

• 7c94080 — ✨ [feat] Publish shared Lychee config package

✨ [feat] Convert the template package metadata into lychee-config-nick2bad4u, publish lychee.toml in npm package files, and expose a typed configPath resolver for scripts.

🧪 [test] Replace the tooling-baseline smoke test with package-surface tests that verify the resolver, manifest metadata, and CI-friendly Lychee defaults.

📝 [docs] Rewrite README, update checklist, contributing guidance, agent instructions, issue templates, and changelog metadata for the shared Lychee config workflow.

🧹 [chore] Ignore Lychee report/cache artifacts and align TypeDoc, TypeScript, changelog, labeler, and node config with the new package surface.

🛠️ Bug Fixes

• 2030580 — 🐛 [fix] Harden shared Lychee exclusions

🐛 [fix] Make exclude_path patterns match Windows paths so lockfiles and generated directories are skipped locally and in CI.

🐛 [fix] Exclude templated URLs, npm package pages, and low-value GitHub social pages that produce false link-check failures.

📝 [docs] Point issue-template support at Issues and refresh the Tera docs URL.

📦 Dependencies

• 97a5152 — ⬆️ [chore] Override esbuild to patched release

🔒 [chore] Force transitive esbuild consumers onto 0.28.1 to clear GHSA-g7r4-m6w7-qqqr.

✅ [test] Verified with npm audit --audit-level=low and npm run release:verify.

🛠️ Other Changes

• 2e2d1bf — Initial commit

📝 Documentation

• d334b94 — 📝 [docs] Match README badge layout

📝 [docs] Use the preferred single-line badge row for lychee-config-nick2bad4u, including forks, Codecov, and repository checks badges pointed at this package repository.

🧹 Chores

• dfb216a — Release v1.0.0

👷 CI/CD

• 0c00603 — 👷 [ci] Use Gitleaks Go module path

👷 [ci] Install Gitleaks from its declared Go module path so the verify job can fetch the pinned CLI version.

✅ [test] Verified actionlint, YAML lint, and Lychee after the correction.

• a46cfc4 — 👷 [ci] Install Gitleaks for verification jobs

👷 [ci] Install a pinned Gitleaks CLI before CI and release jobs run npm release verification.

✅ [test] Verified actionlint, YAML lint, and Lychee after the workflow update.