@ivuorinen/base-configs 1.1.105 → 1.2.0

package/README.md

@@ -4,11 +4,20 @@
 
 This is a meta package for all my base configs.
 
-You can find all the individual configs in the `packages` folder.
-
 The main reason for this package is to make it easier to use these configs in other projects, and to update them all at once. No more pull requests to update all the configs one at a time!
 
-## Installation
+> A collection of base configs for code quality and linting tools. Heavily based on `@demartini/base-configs`
+
+## Table of Contents <!-- omit in toc -->
+
+- [Usage](#usage)
+- [Available Configurations](#available-configurations)
+- [Badge](#badge)
+- [Contributing](#contributing)
+- [Changelog](#changelog)
+- [License](#license)
+
+## Usage
 
 ```bash
 # npm
@@ -18,18 +27,83 @@ npm install @ivuorinen/base-configs --save-dev
 yarn add @ivuorinen/base-configs --dev
 ```
 
+## Available Configurations
+
+| Tool                                      | Package                                               | GitHub                                      | Version                                                                               |
+| ----------------------------------------- | ----------------------------------------------------- | ------------------------------------------- | ------------------------------------------------------------------------------------- |
+| [Browserslist][browserslist-link]         | [@ivuorinen/browserslist-config][pkg-browserslist]    | [GitHub][gh-browserslist]                   | [![@ivuorinen/browserslist-config][browserslist-badge]][browserslist-npm]             |
+| [CommitLint][commitlint-link]             | [@ivuorinen/commitlint-config][pkg-commitlint]        | [GitHub][gh-commitlint]                     | [![@ivuorinen/commitlint-config][commitlint-badge]][commitlint-npm]                   |
+| [ESLint][eslint-link]                     | [@ivuorinen/eslint-config][pkg-eslint]                | [GitHub][gh-eslint]                         | [![@ivuorinen/eslint-config][eslint-badge]][eslint-npm]                               |
+| [MarkdownLint][markdownlint-link]         | [@ivuorinen/markdownlint-config][pkg-markdownlint]    | [GitHub][gh-markdownlint]                   | [![@ivuorinen/markdownlint-config][markdownlint-badge]][markdownlint-npm]             |
+| [Prettier][prettier-link]                 | [@ivuorinen/prettier-config][pkg-prettier]            | [GitHub][gh-prettier]                       | [![@ivuorinen/prettier-config][prettier-badge]][prettier-npm]                         |
+| [semantic-release][semantic-release-link] | [@ivuorinen/semantic-release-config][pkg-src]         | [GitHub][gh-semantic-release]               | [![@ivuorinen/semantic-release-config][semantic-release-badge]][semantic-release-npm] |
+| [stylelint][stylelint-link]               | [@ivuorinen/stylelint-config][pkg-stylelint]          | [GitHub][gh-stylelint]                      | [![@ivuorinen/stylelint-config][stylelint-badge]][stylelint-npm]                      |
+
+[pkg-browserslist]: https://www.npmjs.com/package/@ivuorinen/browserslist-config
+[pkg-commitlint]: https://www.npmjs.com/package/@ivuorinen/commitlint-config
+[pkg-eslint]: https://www.npmjs.com/package/@ivuorinen/eslint-config
+[pkg-markdownlint]: https://www.npmjs.com/package/@ivuorinen/markdownlint-config
+[pkg-prettier]: https://www.npmjs.com/package/@ivuorinen/prettier-config
+[pkg-src]: https://www.npmjs.com/package/@ivuorinen/semantic-release-config
+[pkg-stylelint]: https://www.npmjs.com/package/@ivuorinen/stylelint-config
+[gh-browserslist]: https://github.com/ivuorinen/base-configs-browserslist
+[gh-commitlint]: https://github.com/ivuorinen/base-configs-commitlint
+[gh-eslint]: https://github.com/ivuorinen/base-configs-eslint
+[gh-markdownlint]: https://github.com/ivuorinen/base-configs-markdownlint
+[gh-prettier]: https://github.com/ivuorinen/base-configs-prettier
+[gh-semantic-release]: https://github.com/ivuorinen/base-configs-semantic-release
+[gh-stylelint]: https://github.com/ivuorinen/base-configs-stylelint
+
+## Badge
+
+Show the world that you are using ivuorinen's code style in your project by including the badge in your readme.
+
+[![ivuorinen's Code Style](https://img.shields.io/badge/code_style-ivuorinen%E2%80%99s-663399.svg?labelColor=292a44&style=flat-square)](https://github.com/ivuorinen/base-configs)
+
+```md
+[![ivuorinen's Code Style](https://img.shields.io/badge/code_style-ivuorinen%E2%80%99s-663399.svg?labelColor=292a44&style=flat-square)](https://github.com/ivuorinen/base-configs)
+```
+
+## Contributing
+
+If you are interested in helping contribute, please take a look at our [contribution guidelines][contributing-link] and open an [issue][issue-link] or [pull request][pull-request-link].
+
 ## Changelog
 
 See [CHANGELOG][changelog-link] for a human-readable history of changes.
 
 ## License
 
-MIT License. See [LICENSE][license-link] for more info.
+Distributed under the MIT License. See [LICENSE][license-link] for more information.
 
-[changelog-link]: ./CHANGELOG.md
+[changelog-link]: https://github.com/ivuorinen/base-configs/releases
+[contributing-link]: https://github.com/ivuorinen/.github/blob/main/CONTRIBUTING.md
+[issue-link]: https://github.com/ivuorinen/base-configs/issues
 [license-badge]: https://img.shields.io/github/license/ivuorinen/base-configs?style=flat-square&labelColor=292a44&color=663399
 [license-link]: ./LICENSE
-[npm-badge]: https://img.shields.io/npm/v/@ivuorinen/base-configs?style=flat-square&labelColor=292a44&color=663399
-[npm-link]: https://www.npmjs.com/package/@ivuorinen/base-configs
+[pull-request-link]: https://github.com/ivuorinen/base-configs/pulls
 [style-badge]: https://img.shields.io/badge/code_style-ivuorinen%E2%80%99s-663399.svg?labelColor=292a44&style=flat-square
 [style-link]: https://github.com/ivuorinen/base-configs
+[browserslist-badge]: https://img.shields.io/npm/v/@ivuorinen/browserslist-config?style=flat-square&labelColor=292a44&color=663399
+[browserslist-link]: https://github.com/browserslist/browserslist
+[browserslist-npm]: https://www.npmjs.com/package/@ivuorinen/browserslist-config
+[commitlint-badge]: https://img.shields.io/npm/v/@ivuorinen/commitlint-config?style=flat-square&labelColor=292a44&color=663399
+[commitlint-link]: https://github.com/conventional-changelog/commitlint
+[commitlint-npm]: https://www.npmjs.com/package/@ivuorinen/commitlint-config
+[eslint-badge]: https://img.shields.io/npm/v/@ivuorinen/eslint-config?style=flat-square&labelColor=292a44&color=663399
+[eslint-link]: https://github.com/eslint/eslint
+[eslint-npm]: https://www.npmjs.com/package/@ivuorinen/eslint-config
+[markdownlint-badge]: https://img.shields.io/npm/v/@ivuorinen/markdownlint-config?style=flat-square&labelColor=292a44&color=663399
+[markdownlint-link]: https://github.com/DavidAnson/markdownlint
+[markdownlint-npm]: https://www.npmjs.com/package/@ivuorinen/markdownlint-config
+[prettier-badge]: https://img.shields.io/npm/v/@ivuorinen/prettier-config?style=flat-square&labelColor=292a44&color=663399
+[prettier-link]: https://github.com/prettier/prettier
+[prettier-npm]: https://www.npmjs.com/package/@ivuorinen/prettier-config
+[semantic-release-badge]: https://img.shields.io/npm/v/@ivuorinen/semantic-release-config?style=flat-square&labelColor=292a44&color=663399
+[semantic-release-link]: https://github.com/semantic-release/semantic-release
+[semantic-release-npm]: https://www.npmjs.com/package/@ivuorinen/semantic-release-config
+[stylelint-badge]: https://img.shields.io/npm/v/@ivuorinen/stylelint-config?style=flat-square&labelColor=292a44&color=663399
+[stylelint-link]: https://github.com/stylelint/stylelint
+[stylelint-npm]: https://www.npmjs.com/package/@ivuorinen/stylelint-config
+[npm-badge]: https://img.shields.io/npm/v/@ivuorinen/base-configs?style=flat-square&labelColor=292a44&color=663399
+[npm-link]: https://www.npmjs.com/package/@ivuorinen/base-configs

package/docs/audit/nitpicker-findings.md

@@ -0,0 +1,48 @@
+# Nitpicker Findings
+
+- Generated: 2026-06-25
+- Last validated: 2026-06-25
+- Scope: all uncommitted changes (changed-files mode) on branch `chore/upgrades`
+
+## Summary
+
+- Total: 1 | Open: 1 | Fixed: 0 | Invalid: 0
+
+Reviewed changes:
+
+- Prettier YAML reformats: `codeql.yml`, `stale.yml`, `sync-labels.yml`, `.yarnrc.yml`
+- `js-yaml` resolution added to `package.json`
+- node_modules cache-key change in `pr.yml` and `publish.yml`
+- New config files: `.coderabbit.yaml`, `.mega-linter.yml`
+
+No correctness, security, reliability, maintainability, or convention defects were found.
+
+## Open Findings
+
+### Advisory
+
+#### [N1] zizmor online-audit re-enable cannot be confirmed without a CI run
+
+- Category: reliability
+- Area: `.mega-linter.yml`
+- Problem: Exposing `GITHUB_TOKEN` lets zizmor's online `impostor-commit` audit authenticate instead of returning HTTP 401.
+- Evidence: `ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES` is in the MegaLinter v9.5.0 schema and is the documented remedy.
+- Evidence: Online audits run only inside MegaLinter's CI; local validation cannot exercise the token hand-off.
+- Impact: Informational. If MegaLinter does not surface `GITHUB_TOKEN` to the zizmor step in CI, the 401 may persist.
+- Fix: No action now. If CI still 401s, set `ACTION_ZIZMOR_ARGUMENTS: --no-online-audits` to skip only online audits.
+
+## Verification notes (no findings)
+
+- Prettier quote changes parse to identical YAML trees versus `HEAD` for all four files; no semantic change.
+- `js-yaml` `^4.2.0` removes the vulnerable `4.1.1` (CVE-2026-53550); only `4.2.0` remains, with no `3.x` consumer.
+- Cache key `hashFiles('.nvmrc', '**/yarn.lock')` references existing files; no `restore-keys`, so a Node bump misses cleanly.
+- `.coderabbit.yaml` and `.mega-linter.yml` pass prettier and yamllint, and validate against their published JSON schemas.
+- `zizmor --persona auditor .github/workflows/` reports no findings.
+
+## Fixed
+
+None.
+
+## Invalid
+
+None.

package/eslint.config.mjs

@@ -0,0 +1,12 @@
+import ivuorinenConfig from '@ivuorinen/eslint-config'
+
+export default [
+  ...ivuorinenConfig,
+
+  // your modifications
+  {
+    rules: {
+      // "no-unused-vars": "warn"
+    }
+  }
+]

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@ivuorinen/base-configs",
-  "version": "1.1.105",
+  "version": "1.2.0",
+  "type": "module",
   "description": "ivuorinen's shareable configurations meta package",
   "author": {
     "name": "Ismo Vuorinen",
@@ -9,31 +10,64 @@
   "bugs": {
     "url": "https://github.com/ivuorinen/base-configs/issues"
   },
+  "contributors": [
+    {
+      "name": "Base Configs Contributors",
+      "url": "https://github.com/ivuorinen/base-configs/graphs/contributors"
+    }
+  ],
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
   },
-  "homepage": "https://github.com/ivuorinen/base-configs/tree/main/packages/base-configs#readme",
+  "homepage": "https://github.com/ivuorinen/base-configs#readme",
   "keywords": [
-    "base-config",
+    "commitlint",
     "config",
-    "ivuorinen"
+    "eslint",
+    "lint",
+    "markdownlint",
+    "prettier",
+    "semantic-release",
+    "stylelint"
   ],
   "license": "MIT",
-  "publishConfig": {
-    "access": "public"
-  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/ivuorinen/base-configs.git"
+    "url": "https://github.com/ivuorinen/base-configs.git"
+  },
+  "scripts": {
+    "commitlint": "./node_modules/.bin/commitlint --from HEAD~1 --to HEAD --verbose",
+    "eslint:fix": "./node_modules/.bin/eslint '**/*.{js,tsx,ts,mjs,cjs}' --fix",
+    "eslint:report": "./node_modules/.bin/eslint '**/*.{js,tsx,ts,mjs,cjs}'",
+    "fix": "./node_modules/.bin/run-s prettier:fix eslint:fix markdownlint:fix",
+    "markdownlint:fix": "./node_modules/.bin/markdownlint '**/*.md' --fix",
+    "markdownlint:report": "./node_modules/.bin/markdownlint '**/*.md'",
+    "prettier:fix": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
+    "prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
   },
   "dependencies": {
-    "@ivuorinen/browserslist-config": "^0.2.10",
-    "@ivuorinen/commitlint-config": "^0.2.24",
-    "@ivuorinen/eslint-config": "^0.4.48",
-    "@ivuorinen/markdownlint-config": "^0.2.9",
-    "@ivuorinen/prettier-config": "^0.2.16",
-    "@ivuorinen/semantic-release-config": "^0.2.23",
-    "eslint-plugin-n": "^17.0.0"
-  },
-  "gitHead": "d515c3e49955a81a55ae31635404df1705e05622"
+    "@ivuorinen/browserslist-config": "^1.1.4",
+    "@ivuorinen/commitlint-config": "^1.0.32",
+    "@ivuorinen/eslint-config": "^1.2.3",
+    "@ivuorinen/markdownlint-config": "^1.1.3",
+    "@ivuorinen/prettier-config": "^1.1.4",
+    "@ivuorinen/semantic-release-config": "^1.3.3",
+    "@ivuorinen/stylelint-config": "^1.1.2"
+  },
+  "devDependencies": {
+    "@types/node": "^26.0.0",
+    "npm-run-all2": "^9.0.2",
+    "simple-git-hooks": "^2.13.1",
+    "typescript": "^6.0.3"
+  },
+  "resolutions": {
+    "js-yaml": "^5.0.0",
+    "minimatch": "^10.2.4",
+    "picomatch": "^4.0.4",
+    "undici": "^8.5.0"
+  },
+  "packageManager": "yarn@4.17.0"
 }