0.4.0

.github/dependabot.yml

@@ -13,5 +13,15 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-      cooldown:
-          default-days: 15
+    cooldown:
+      default-days: 15
+    groups:
+      dev-dependencies:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+      prod-dependencies:
+        dependency-type: "production"
+        update-types:
+          - "patch"

.github/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@datastream/github-workflows",
-	"version": "0.3.2",
+	"version": "0.4.0",
 	"private": true,
 	"engines": {
 		"node": ">=24.0"

.github/workflows/test-dco.yml

@@ -11,5 +11,5 @@ jobs:
     name: Tests (dco)
     runs-on: ubuntu-latest
     steps:
-      - name: Check for Developer Certificate of Origin (DCO) compiance
+      - name: Check for Developer Certificate of Origin (DCO) compliance
         uses: KineticCafe/actions-dco@6e1652ef3027ce128e65e6edd215ae053350bd16 # v2.1.1

.github/workflows/test-lint.yml

@@ -27,4 +27,4 @@ jobs:
           npm ci --ignore-scripts
       - name: Linting
         run: |
-          ./node_modules/.bin/biome ci --no-errors-on-unmatched
+          npm run test:lint

.github/workflows/test-sast.yml

@@ -73,6 +73,28 @@ jobs:
   #         ort-cli-args: "-P ort.analyzer.enabledPackageManagers=NPM"
   #         fail-on: "violations"
 
+  license:
+    name: "License headers"
+    runs-on: ubuntu-latest
+    if: (github.actor != 'dependabot[bot]')
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Setup Node.js ${{ env.NODE_VERSION }}
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: https://registry.npmjs.org
+          cache: npm
+      - name: Install dependencies
+        run: |
+          npm ci --ignore-scripts
+      - name: License check
+        run: |
+          npm run test:sast:license
+
   lockfile:
     name: "lockfile-lint: SAST package-lock.json"
     runs-on: ubuntu-latest

license.json → .license.config.json

@@ -1,5 +1,5 @@
 {
-	"license": "license.template",
+	"license": ".license.template",
 	"licenseFormats": {
 		"js|ts": {
 			"eachLine": {
@@ -16,7 +16,7 @@
 		"commitlint.config.cjs",
 		"docs/**/*",
 		"LICENSE",
-		"license.template",
+		".license.template",
 		"**/.gitignore",
 		"**/*.fuzz.js",
 		"**/*.perf.js",