@koppajs/koppajs-kpa-check 0.1.2 → 0.2.0

package/CHANGELOG.md

@@ -14,6 +14,27 @@ not every internal refactor.
 
 This section is intentionally empty.
 
+## [0.2.0]
+
+- Fix GHSA-g3hv-75wg-m249 in the lint toolchain by overriding transitive
+  `minimatch` to 11.0.3 for npm and pnpm, with lint-selection regression tests.
+
+- Upgrade language-core to `^0.2.0` and align the Node.js engine range with its
+  supported runtimes: `^22.13.0 || ^24.0.0 || >=26.0.0`.
+- Refresh the development toolchain to TypeScript 6, TypeScript-ESLint 8.72,
+  ESLint 10, Vite 8, and Vitest 5 with synchronized npm and pnpm lockfiles.
+- Add a shared CLI/Vite build integration test against Core 3.0.11, Router
+  0.1.8, and Vite plugin 2.0.0; remove obsolete Rollup binary injection from CI.
+
+## [0.1.3]
+
+- Refresh `package-lock.json` with npm 11 so the Node 24 npm CI path can run
+  `npm ci` without lockfile drift failures.
+- Add dual-manager CI validation for npm and pnpm on Node 22 and 24 while
+  keeping the tagged release workflow npm-based.
+- Restore pnpm as a supported local contributor workflow and document how to
+  resync the npm lockfile before release with `npm run lock:sync:npm`.
+
 ## [0.1.2]
 
 - Fix the published ESM runtime by resolving `package.json` without `__dirname`

package/README.md

@@ -132,7 +132,7 @@ The governing behavior spec is
 
 This release line validates against:
 
-- `@koppajs/koppajs-language-core: ^0.1.4`
+- `@koppajs/koppajs-language-core: ^0.2.0`
 
 The effective compatibility contract is the dependency range in
 `package.json`. The maintenance policy lives in
@@ -160,12 +160,13 @@ npx kpa-check src
 
 For package consumers:
 
-- Node.js >= 22
+- Node.js ^22.13.0 || ^24.0.0 || >=26.0.0
 
 For local repository work:
 
-- Node.js >= 22
+- Node.js ^22.13.0 || ^24.0.0 || >=26.0.0
 - npm >= 10
+- pnpm >= 9 (supported local alternative)
 
 The maintainer default remains pinned to Node 22 through `.nvmrc`.
 
@@ -291,7 +292,8 @@ The release candidate should also pass:
 - `npm run release:check`
 
 GitHub Actions runs `npm run validate` on Node.js 22 and 24 for pushes to
-`main` and `develop` and for pull requests. Tagged releases rerun
+`main` and `develop` and for pull requests. The same CI workflow also runs
+`pnpm run validate` on Node.js 22 and 24. Tagged releases rerun
 `npm run validate` and `npm run release:check` on the maintainer default from
 `.nvmrc` before publish.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koppajs/koppajs-kpa-check",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "CLI diagnostics runner for KoppaJS .kpa files.",
   "license": "Apache-2.0",
   "repository": {
@@ -33,8 +33,9 @@
     "check:docs:contract": "node scripts/check-doc-contract.mjs",
     "check:docs:semantics": "node scripts/check-doc-semantics.mjs",
     "format:check": "node scripts/format-check.mjs",
+    "lock:sync:npm": "npx npm@11.12.1 install --package-lock-only --ignore-scripts",
     "build": "tsc -p tsconfig.build.json",
-    "lint": "eslint . --ext .ts,.mjs --ignore-pattern dist --ignore-pattern node_modules --max-warnings=0",
+    "lint": "eslint . --max-warnings=0",
     "pack:dry-run": "npm pack --dry-run",
     "prepack": "npm run validate",
     "release:check": "npm pack --dry-run",
@@ -48,24 +49,36 @@
     "prepare": "husky"
   },
   "engines": {
-    "node": ">=22",
+    "node": "^22.13.0 || ^24.0.0 || >=26.0.0",
     "npm": ">=10"
   },
   "dependencies": {
-    "@koppajs/koppajs-language-core": "^0.1.4"
+    "@koppajs/koppajs-language-core": "^0.2.0"
   },
   "devDependencies": {
-    "@types/node": "^22.19.15",
-    "@typescript-eslint/eslint-plugin": "^8.46.2",
-    "@typescript-eslint/parser": "^8.46.2",
-    "eslint": "^9.38.0",
+    "@koppajs/koppajs-core": "^3.0.11",
+    "@koppajs/koppajs-router": "^0.1.8",
+    "@koppajs/koppajs-vite-plugin": "^2.0.0",
+    "@types/node": "^22.20.5",
+    "@typescript-eslint/eslint-plugin": "^8.72.1",
+    "@typescript-eslint/parser": "^8.72.1",
+    "eslint": "^10.14.0",
     "husky": "^9.1.7",
-    "typescript": "^5.3.3",
-    "vitest": "^3.2.4"
+    "typescript": "~6.0.3",
+    "vite": "^8.3.5",
+    "vitest": "^5.0.5"
   },
   "publishConfig": {
     "access": "public"
   },
   "type": "module",
-  "private": false
+  "private": false,
+  "overrides": {
+    "minimatch": "11.0.3"
+  },
+  "pnpm": {
+    "overrides": {
+      "minimatch": "11.0.3"
+    }
+  }
 }