@ivuorinen/base-configs 1.1.105 → 1.2.0

package/.browserslistrc

@@ -0,0 +1 @@
+extends @ivuorinen/browserslist-config

package/.coderabbit.yaml

@@ -0,0 +1,13 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+---
+reviews:
+  path_instructions:
+    - path: 'package.json'
+      instructions: |-
+        This repository IS the `@ivuorinen/base-configs` meta-package; its sole
+        purpose is to list the seven individual `@ivuorinen/*` config packages
+        as dependencies. Do NOT flag those entries or suggest collapsing them
+        into a single `@ivuorinen/base-configs` dependency, which would be a
+        circular self-dependency. The "install the meta-package instead of the
+        individual configs" rule applies only to consumer repositories, not to
+        this repo.

package/.commitlintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@ivuorinen/commitlint-config"]
+}

package/.editorconfig

@@ -0,0 +1,17 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+max_line_length = 120
+
+[*.md]
+max_line_length = off
+trim_trailing_whitespace = false

package/.github/CODEOWNERS

@@ -0,0 +1 @@
+* @ivuorinen

package/.github/SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest versions of the configuration packages and the base package are as of now supported.
+
+## Reporting a Vulnerability
+
+This repository has automatic package update systems in place. If you find a vulnerability, please send me email and I'll fix it as soon as possible.

package/.github/labels.yml

@@ -0,0 +1,88 @@
+---
+- name: 'breaking-change'
+  color: ee0701
+  description: 'A breaking change for existing users.'
+- name: 'bugfix'
+  color: ee0701
+  description: 'Inconsistencies or issues which will cause a problem for users or implementors.'
+- name: 'documentation'
+  color: 0052cc
+  description: 'Solely about the documentation of the project.'
+- name: 'enhancement'
+  color: 1d76db
+  description: 'Enhancement of the code, not introducing new features.'
+- name: 'refactor'
+  color: 1d76db
+  description: 'Improvement of existing code, not introducing new features.'
+- name: 'performance'
+  color: 1d76db
+  description: 'Improving performance, not introducing new features.'
+- name: 'new-feature'
+  color: 0e8a16
+  description: 'New features or options.'
+- name: 'maintenance'
+  color: 2af79e
+  description: 'Generic maintenance tasks.'
+- name: 'ci'
+  color: 1d76db
+  description: 'Work that improves the continue integration.'
+- name: 'dependencies'
+  color: 1d76db
+  description: 'Upgrade or downgrade of project dependencies.'
+- name: 'translations'
+  color: d4c5f9
+  description: 'Impacts translations.'
+
+- name: 'in-progress'
+  color: fbca04
+  description: 'Issue is currently being resolved by a developer.'
+- name: 'stale'
+  color: fef2c0
+  description: 'There has not been activity on this issue or PR for quite some time.'
+- name: 'no-stale'
+  color: fef2c0
+  description: 'This issue or PR is exempted from the stable bot.'
+
+- name: 'security'
+  color: ee0701
+  description: 'Marks a security issue that needs to be resolved asap.'
+- name: 'incomplete'
+  color: fef2c0
+  description: 'Marks a PR or issue that is missing information.'
+- name: 'invalid'
+  color: fef2c0
+  description: 'Marks a PR or issue that is missing information.'
+
+- name: 'beginner-friendly'
+  color: 0e8a16
+  description: 'Good first issue for people wanting to contribute to the project.'
+- name: 'help-wanted'
+  color: 0e8a16
+  description: 'We need some extra helping hands or expertise in order to resolve this.'
+
+- name: 'hacktoberfest'
+  description: 'Issues/PRs are participating in the Hacktoberfest.'
+  color: fbca04
+- name: 'hacktoberfest-accepted'
+  description: 'Issues/PRs are participating in the Hacktoberfest.'
+  color: fbca04
+
+- name: 'priority-critical'
+  color: ee0701
+  description: 'This should be dealt with ASAP. Not fixing this issue would be a serious error.'
+- name: 'priority-high'
+  color: b60205
+  description: 'After critical issues are fixed, these should be dealt with before any further issues.'
+- name: 'priority-medium'
+  color: 0e8a16
+  description: 'This issue may be useful, and needs some attention.'
+- name: 'priority-low'
+  color: e4ea8a
+  description: 'Nice addition, maybe... someday...'
+
+- name: 'major'
+  color: b60205
+  description: 'This PR causes a major version bump in the version number.'
+- name: 'minor'
+  color: 0e8a16
+  description: 'This PR causes a minor version bump in the version number.'

package/.github/renovate.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>ivuorinen/renovate-config"]
+}

package/.github/workflows/codeql.yml

@@ -0,0 +1,38 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: 'CodeQL'
+
+on:
+  push:
+    branches: ['main']
+  pull_request:
+    branches: ['main']
+  schedule:
+    - cron: '30 1 * * 0'
+  merge_group:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read # read workflow run metadata
+      contents: read # checkout the repository
+      packages: read # read GitHub Packages
+      security-events: write # upload CodeQL results
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['actions', 'javascript']
+    steps:
+      - name: CodeQL Analysis
+        uses: ivuorinen/actions/codeql-analysis@8395dad6b7d5d7d2e1d016cac1eede33ab404a3c # v2026.06.18
+        with:
+          language: ${{ matrix.language }}
+          queries: security-and-quality

package/.github/workflows/pr-lint.yml

@@ -0,0 +1,58 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Lint PR Code Base
+
+on:
+  pull_request:
+    branches: [master, main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read # read repository contents
+
+env:
+  NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+  GITHUB_TOKEN: ${{ github.token }}
+
+jobs:
+  Linter:
+    name: PR Lint
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    # Dedicated environment scopes the CI credentials (NPM_TOKEN) used by the lint steps.
+    environment: ci
+    permissions:
+      contents: read # read repository contents
+      issues: write # comment on the pull request
+      packages: read # read GitHub Packages
+      pull-requests: write # post the lint and yarn.lock comments
+      statuses: write # report lint status on the commit
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          persist-credentials: false
+
+      - name: Install and enable corepack
+        shell: sh
+        run: corepack enable
+
+      - name: Yarn Lock Changes
+        uses: Simek/yarn-lock-changes@59f47ee499424d2c2437c5aebf863b5c6d50a5bc # v0.14.1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Run PR Lint
+        # https://github.com/ivuorinen/actions
+        uses: ivuorinen/actions/pr-lint@8395dad6b7d5d7d2e1d016cac1eede33ab404a3c # v2026.06.18
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/.github/workflows/pr.yml

@@ -0,0 +1,54 @@
+---
+name: PR Actions
+
+on:
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  pr:
+    name: PR Actions
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read # checkout the repository
+      pull-requests: write # post the yarn.lock changes comment
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js Environment
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache Node Modules
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        id: cache
+        with:
+          path: node_modules
+          # Include .nvmrc so a Node version bump invalidates caches that may
+          # contain native modules built against the previous Node ABI.
+          key: node-modules-${{ hashFiles('.nvmrc', '**/yarn.lock') }}
+
+      - name: Enable corepack
+        id: corepack
+        shell: bash
+        run: corepack enable
+
+      - name: Install Dependencies
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: yarn install
+
+      - name: Yarn Lock Changes
+        uses: Simek/yarn-lock-changes@59f47ee499424d2c2437c5aebf863b5c6d50a5bc # v0.14.1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}

package/.github/workflows/publish.yml

@@ -0,0 +1,91 @@
+---
+name: Publish
+
+on:
+  push:
+    branches:
+      - main
+
+# Never cancel an in-progress release: a half-published release is worse than a queued one.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+permissions:
+  contents: read # read repository contents
+
+jobs:
+  Linter:
+    name: Lint
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      statuses: write # report lint status on the commit
+      contents: read # read repository contents
+      packages: read # read GitHub Packages
+      issues: write # comment on related issues
+      pull-requests: write # comment on related pull requests
+
+    steps:
+      - name: Run PR Lint
+        # https://github.com/ivuorinen/actions
+        uses: ivuorinen/actions/pr-lint@8395dad6b7d5d7d2e1d016cac1eede33ab404a3c # v2026.06.18
+
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+    needs:
+      - Linter
+    # Dedicated environment scopes the release credential (PAT) and lets you
+    # attach protection rules to the publish step. npm auth uses Trusted
+    # Publishing (OIDC) via id-token below, so no NPM_TOKEN is needed.
+    environment: release
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js Environment
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          # No always-auth / NPM_TOKEN: the package is published via npm Trusted
+          # Publishing (OIDC), which uses the id-token below instead of a token.
+          node-version-file: '.nvmrc'
+          registry-url: 'https://registry.npmjs.org'
+          scope: '@ivuorinen'
+
+      - name: Install and enable corepack
+        shell: sh
+        run: corepack enable
+
+      - name: Cache Node Modules
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        id: cache
+        with:
+          path: node_modules
+          # Include .nvmrc so a Node version bump invalidates caches that may
+          # contain native modules built against the previous Node ABI.
+          key: node-modules-${{ hashFiles('.nvmrc', '**/yarn.lock') }}
+
+      - name: Install Dependencies
+        shell: bash
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: yarn install
+
+      - name: Semantic Release
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
+        with:
+          extra_plugins: |
+            @semantic-release/changelog
+            @semantic-release/github
+            @semantic-release/npm
+        env:
+          GITHUB_TOKEN: ${{ secrets.PAT }}

package/.github/workflows/stale.yml

@@ -0,0 +1,30 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Stale
+
+on:
+  schedule:
+    - cron: '0 8 * * *' # Every day at 08:00
+  workflow_call:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read # read repository contents
+  packages: read # read GitHub Packages
+  statuses: read # read commit statuses
+
+jobs:
+  stale:
+    name: 🧹 Clean up stale issues and PRs
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write # only for delete-branch option
+      issues: write # mark and close stale issues
+      pull-requests: write # mark and close stale pull requests
+    steps:
+      - uses: ivuorinen/actions/stale@8395dad6b7d5d7d2e1d016cac1eede33ab404a3c # v2026.06.18

package/.github/workflows/sync-labels.yml

@@ -0,0 +1,43 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Sync Labels
+
+on:
+  push:
+    branches:
+      - main
+      - master
+    paths:
+      - '.github/labels.yml'
+      - '.github/workflows/sync-labels.yml'
+  schedule:
+    - cron: '34 5 * * *' # Run every day at 05:34 AM UTC
+  workflow_call:
+  workflow_dispatch:
+  merge_group:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read # read repository contents
+
+jobs:
+  labels:
+    name: ♻️ Sync Labels
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    permissions:
+      contents: read # read the labels definition
+      issues: write # create and update repository labels
+
+    steps:
+      - name: ⤵️ Checkout Repository
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          persist-credentials: false
+      - name: ⤵️ Sync Latest Labels Definitions
+        uses: ivuorinen/actions/sync-labels@8395dad6b7d5d7d2e1d016cac1eede33ab404a3c # v2026.06.18

package/.markdownlint.json

@@ -0,0 +1,13 @@
+{
+  "default": true,
+  "MD013": {
+    "line_length": 200,
+    "code_blocks": false,
+    "tables": false
+  },
+  "MD024": {
+    "siblings_only": true
+  },
+  "MD033": false,
+  "MD041": false
+}

package/.markdownlintignore

@@ -0,0 +1 @@
+node_modules/

package/.mega-linter.yml

@@ -0,0 +1,10 @@
+---
+# MegaLinter configuration
+# https://megalinter.io/latest/configuration/
+
+# Allow zizmor's online audits (e.g. impostor-commit) to authenticate with the
+# GitHub API. MegaLinter strips the environment passed to linters by default,
+# which left zizmor unauthenticated and failing impostor-commit with HTTP 401.
+# https://megalinter.io/latest/descriptors/action_zizmor/
+ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
+  - GITHUB_TOKEN

package/.nvmrc

@@ -0,0 +1 @@
+26.3.1

package/.prettierignore

@@ -0,0 +1,2 @@
+node_modules/
+/.nx/workspace-data

package/.prettierrc.json

@@ -0,0 +1 @@
+"@ivuorinen/prettier-config"

package/.releaserc.json

@@ -0,0 +1,4 @@
+{
+  "extends": ["@ivuorinen/semantic-release-config"],
+  "branches": ["main"]
+}

package/.simple-git-hooks.json

@@ -0,0 +1,3 @@
+{
+  "commit-msg": "yarn commitlint --edit $1"
+}

package/.stylelintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@ivuorinen/stylelint-config/css"]
+}

package/.yamlignore

@@ -0,0 +1 @@
+

package/.yarnclean

@@ -0,0 +1,45 @@
+# test directories
+__tests__
+test
+tests
+powered-test
+
+# asset directories
+docs
+doc
+website
+images
+assets
+
+# examples
+example
+examples
+
+# code coverage directories
+coverage
+.nyc_output
+
+# build scripts
+Makefile
+Gulpfile.js
+Gruntfile.js
+
+# configs
+appveyor.yml
+circle.yml
+codeship-services.yml
+codeship-steps.yml
+wercker.yml
+.tern-project
+.gitattributes
+.editorconfig
+.*ignore
+.eslintrc
+.jshintrc
+.flowconfig
+.documentup.json
+.yarn-metadata.json
+.travis.yml
+
+# misc
+*.md

package/.yarnrc.yml

@@ -0,0 +1,16 @@
+nodeLinker: node-modules
+
+# First-party @ivuorinen packages are exempt from the npmMinimalAgeGate
+# supply-chain check, so freshly released config packages can be consumed
+# immediately. The age gate still applies to all third-party packages.
+npmPreapprovedPackages:
+  - '@ivuorinen/*'
+
+packageExtensions:
+  '@commitlint/load@*':
+    dependencies:
+      typescript: '*'
+      '@types/node': '*'
+  'eslint-plugin-n@*':
+    dependencies:
+      typescript: '*'