@flowfuse/driver-localfs 2.25.1-f1af484-202601121521.0 → 2.26.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,2 @@
1
+ # Trivy Ignore File
2
+ # Add patterns here to exclude from security scanning
@@ -0,0 +1,29 @@
1
+ # Trivy Security Scanner Configuration
2
+ # Documentation: https://aquasecurity.github.io/trivy/latest/docs/configuration/
3
+
4
+ scan:
5
+ scanners:
6
+ - vuln
7
+ - secret
8
+
9
+ skip-dirs:
10
+ - node_modules
11
+ - .git
12
+ - coverage
13
+ - ci
14
+
15
+ severity:
16
+ - CRITICAL
17
+ - HIGH
18
+ - MEDIUM
19
+ - LOW
20
+
21
+ pkg:
22
+ types:
23
+ - os
24
+ - library
25
+ include-dev-deps: true
26
+
27
+ format: "sarif"
28
+ ignorefile: ".github/.trivyignore.yaml"
29
+ exit-code: 0
@@ -13,6 +13,6 @@ jobs:
13
13
  with:
14
14
  node-version: 18
15
15
  - run: npm ci --omit=dev
16
- - uses: JS-DevTools/npm-publish@8f08ec0dafe29acea4e9efe18e67ebde86904ad1 # v4.1.2
16
+ - uses: JS-DevTools/npm-publish@d2fef917d9aa6e1f0ee5eac28ed023eb4921ce51 # v4.1.3
17
17
  with:
18
18
  token: ${{ secrets.NPM_PUBLISH_TOKEN }}
@@ -0,0 +1,19 @@
1
+ name: SAST Scan
2
+
3
+ on:
4
+ push:
5
+ branches:
6
+ - main
7
+ pull_request:
8
+ branches:
9
+ - main
10
+ workflow_dispatch:
11
+
12
+ concurrency:
13
+ group: ${{ github.workflow }}-${{ github.ref }}
14
+ cancel-in-progress: true
15
+
16
+ jobs:
17
+ scan:
18
+ name: SAST Scan
19
+ uses : flowfuse/github-actions-workflows/.github/workflows/sast_scan.yaml@v0.46.0
package/CHANGELOG.md CHANGED
@@ -1,3 +1,13 @@
1
+ #### 2.26.0: Release
2
+
3
+ - Bump JS-DevTools/npm-publish from 4.1.2 to 4.1.3 (#228)
4
+ - ci: Enable SAST (#230) @ppawlowski
5
+ - Bump JS-DevTools/npm-publish from 4.1.1 to 4.1.2 (#226) @app/dependabot
6
+ - fix eqeqeq and quotes rules (#225) @hardillb
7
+ - convert to eslint v9 (#224) @hardillb
8
+ - Bump flowfuse/github-actions-workflows/.github/workflows/build_node_package.yml from 0.44.0 to 0.45.0 (#222) @app/dependabot
9
+ - Bump flowfuse/github-actions-workflows/.github/workflows/publish_node_package.yml from 0.44.0 to 0.45.0 (#221) @app/dependabot
10
+
1
11
  #### 2.25.0: Release
2
12
 
3
13
  - Bump flowfuse/github-actions-workflows/.github/workflows/publish_node_package.yml (#218)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@flowfuse/driver-localfs",
3
- "version": "2.25.1-f1af484-202601121521.0",
3
+ "version": "2.26.0",
4
4
  "description": "Local Filesystem FlowFuse Project driver",
5
5
  "main": "localfs.js",
6
6
  "scripts": {
@@ -22,7 +22,7 @@
22
22
  "license": "Apache-2.0",
23
23
  "dependencies": {
24
24
  "@flowfuse/mqtt-schema-agent": "^1.0.0",
25
- "@flowfuse/nr-launcher": "2.25.1-6ae36ca-202601121520.0",
25
+ "@flowfuse/nr-launcher": "^2.26.0",
26
26
  "form-data": "^4.0.0",
27
27
  "got": "^11.8.5",
28
28
  "semver": "~7.6.0",