eslint-plugin-github-actions-2 1.0.2 → 1.0.3

package/dist/rules/require-dependabot-automation-permissions.js

@@ -0,0 +1,68 @@
+import { getDependabotAutomationRunSteps } from "../_internal/dependabot-automation-workflow.js";
+import { hasRequiredWorkflowPermission } from "../_internal/workflow-permissions.js";
+import { getWorkflowRoot } from "../_internal/workflow-yaml.js";
+/** Rule implementation for Dependabot automation permission requirements. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const step of getDependabotAutomationRunSteps(root)) {
+                    if (!hasRequiredWorkflowPermission(root, step.job, "pull-requests", "write")) {
+                        context.report({
+                            data: { jobId: step.job.id },
+                            messageId: "missingPullRequestsWrite",
+                            node: step.job.idNode,
+                        });
+                    }
+                    if (step.runScript.includes("gh pr edit") &&
+                        step.runScript.includes("--add-label") &&
+                        !hasRequiredWorkflowPermission(root, step.job, "issues", "write")) {
+                        context.report({
+                            data: { jobId: step.job.id },
+                            messageId: "missingIssuesWrite",
+                            node: step.job.idNode,
+                        });
+                    }
+                    if (step.runScript.includes("gh pr merge") &&
+                        !hasRequiredWorkflowPermission(root, step.job, "contents", "write")) {
+                        context.report({
+                            data: { jobId: step.job.id },
+                            messageId: "missingContentsWrite",
+                            node: step.job.idNode,
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+            ],
+            description: "require minimum GitHub token permissions for Dependabot pull request automation steps.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R111",
+            ruleNumber: 111,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-automation-permissions",
+        },
+        messages: {
+            missingContentsWrite: "Job '{{jobId}}' uses `gh pr merge` and should grant `contents: write`.",
+            missingIssuesWrite: "Job '{{jobId}}' edits pull request labels and should grant `issues: write`.",
+            missingPullRequestsWrite: "Job '{{jobId}}' automates pull requests and should grant `pull-requests: write`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-automation-permissions.js.map

package/dist/rules/require-dependabot-automation-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-automation-permissions.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-automation-permissions.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvD,IACI,CAAC,6BAA6B,CAC1B,IAAI,EACJ,IAAI,CAAC,GAAG,EACR,eAAe,EACf,OAAO,CACV,EACH,CAAC;wBACC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;4BAC5B,SAAS,EAAE,0BAA0B;4BACrC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAA8B;yBAChD,CAAC,CAAC;oBACP,CAAC;oBAED,IACI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;wBACrC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;wBACtC,CAAC,6BAA6B,CAC1B,IAAI,EACJ,IAAI,CAAC,GAAG,EACR,QAAQ,EACR,OAAO,CACV,EACH,CAAC;wBACC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;4BAC5B,SAAS,EAAE,oBAAoB;4BAC/B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAA8B;yBAChD,CAAC,CAAC;oBACP,CAAC;oBAED,IACI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;wBACtC,CAAC,6BAA6B,CAC1B,IAAI,EACJ,IAAI,CAAC,GAAG,EACR,UAAU,EACV,OAAO,CACV,EACH,CAAC;wBACC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;4BAC5B,SAAS,EAAE,sBAAsB;4BACjC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAA8B;yBAChD,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,wFAAwF;YAC5F,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,kHAAkH;SAC1H;QACD,QAAQ,EAAE;YACN,oBAAoB,EAChB,wEAAwE;YAC5E,kBAAkB,EACd,6EAA6E;YACjF,wBAAwB,EACpB,kFAAkF;SACzF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @packageDocumentation
+ * Require Dependabot pull request automation workflows to run on pull_request.
+ */
+import type { Rule } from "eslint";
+/**
+ * Rule implementation for requiring pull_request on Dependabot automation
+ * workflows.
+ */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-automation-pull-request-trigger.d.ts.map

package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-automation-pull-request-trigger.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-automation-pull-request-trigger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC;;;GAGG;AACH,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA6ChB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-automation-pull-request-trigger.js

@@ -0,0 +1,49 @@
+import { hasDependabotAutomation } from "../_internal/dependabot-automation-workflow.js";
+import { getWorkflowEventNames, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/**
+ * Rule implementation for requiring pull_request on Dependabot automation
+ * workflows.
+ */
+const rule = {
+    create(context) {
+        return {
+            Program(node) {
+                const root = getWorkflowRoot(context);
+                if (root === null || !hasDependabotAutomation(root)) {
+                    return;
+                }
+                if (getWorkflowEventNames(root).has("pull_request")) {
+                    return;
+                }
+                context.report({
+                    messageId: "missingPullRequestTrigger",
+                    node: node,
+                });
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+            ],
+            description: "require Dependabot pull request automation workflows to listen for `pull_request`.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R112",
+            ruleNumber: 112,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-automation-pull-request-trigger",
+        },
+        messages: {
+            missingPullRequestTrigger: "Dependabot pull request automation workflows should listen for `pull_request`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-automation-pull-request-trigger.js.map

package/dist/rules/require-dependabot-automation-pull-request-trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-automation-pull-request-trigger.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-automation-pull-request-trigger.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EACH,qBAAqB,EACrB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC;;;GAGG;AACH,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,OAAO;gBACX,CAAC;gBAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;oBAClD,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,2BAA2B;oBACtC,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,oFAAoF;YACxF,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,2HAA2H;SACnI;QACD,QAAQ,EAAE;YACN,yBAAyB,EACrB,gFAAgF;SACvF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-bot-actor-guard.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require Dependabot automation jobs or steps to guard on the Dependabot bot actor.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for Dependabot bot guard requirements. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-bot-actor-guard.d.ts.map

package/dist/rules/require-dependabot-bot-actor-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-bot-actor-guard.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-bot-actor-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAgBnC,iEAAiE;AACjE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA0EhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-bot-actor-guard.js

@@ -0,0 +1,64 @@
+import { getDependabotAutomationRunSteps, getDependabotFetchMetadataSteps, hasDependabotAutomation, } from "../_internal/dependabot-automation-workflow.js";
+import { getMappingPair, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+const hasDependabotBotGuard = (value) => typeof value === "string" && value.includes("dependabot[bot]");
+/** Rule implementation for Dependabot bot guard requirements. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null || !hasDependabotAutomation(root)) {
+                    return;
+                }
+                const runStepsByJobId = new Map(getDependabotAutomationRunSteps(root).map((step) => [
+                    step.job.id,
+                    step,
+                ]));
+                for (const step of getDependabotFetchMetadataSteps(root)) {
+                    const jobIfValue = getScalarStringValue(getMappingPair(step.job.mapping, "if")?.value ?? null);
+                    if (hasDependabotBotGuard(jobIfValue)) {
+                        continue;
+                    }
+                    const pairedRunStep = runStepsByJobId.get(step.job.id);
+                    const runStepIfValue = getScalarStringValue(pairedRunStep
+                        ? (getMappingPair(pairedRunStep.stepMapping, "if")
+                            ?.value ?? null)
+                        : null);
+                    if (pairedRunStep !== undefined &&
+                        hasDependabotBotGuard(runStepIfValue)) {
+                        continue;
+                    }
+                    context.report({
+                        data: { jobId: step.job.id },
+                        messageId: "missingDependabotBotGuard",
+                        node: step.job.idNode,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+            ],
+            description: "require Dependabot automation jobs to guard execution on `dependabot[bot]`.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R109",
+            ruleNumber: 109,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-bot-actor-guard",
+        },
+        messages: {
+            missingDependabotBotGuard: "Job '{{jobId}}' automates Dependabot pull requests and should guard execution on `dependabot[bot]`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-bot-actor-guard.js.map

package/dist/rules/require-dependabot-bot-actor-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-bot-actor-guard.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-bot-actor-guard.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,+BAA+B,EAC/B,+BAA+B,EAC/B,uBAAuB,GAC1B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,CAAC,KAAgC,EAAW,EAAE,CACxE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAEnE,iEAAiE;AACjE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,OAAO;gBACX,CAAC;gBAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAC3B,+BAA+B,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChD,IAAI,CAAC,GAAG,CAAC,EAAE;oBACX,IAAI;iBACP,CAAC,CACL,CAAC;gBAEF,KAAK,MAAM,IAAI,IAAI,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvD,MAAM,UAAU,GAAG,oBAAoB,CACnC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CACxD,CAAC;oBAEF,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;wBACpC,SAAS;oBACb,CAAC;oBAED,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACvD,MAAM,cAAc,GAAG,oBAAoB,CACvC,aAAa;wBACT,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC;4BAC5C,EAAE,KAAK,IAAI,IAAI,CAAC;wBACtB,CAAC,CAAC,IAAI,CACb,CAAC;oBAEF,IACI,aAAa,KAAK,SAAS;wBAC3B,qBAAqB,CAAC,cAAc,CAAC,EACvC,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;wBAC5B,SAAS,EAAE,2BAA2B;wBACtC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAA8B;qBAChD,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,6EAA6E;YACjF,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,2GAA2G;SACnH;QACD,QAAQ,EAAE;YACN,yBAAyB,EACrB,qGAAqG;SAC5G;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-commit-message-include-scope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require Dependabot commit messages to include dependency scope information.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for commit-message.include requirements. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-commit-message-include-scope.d.ts.map

package/dist/rules/require-dependabot-commit-message-include-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-commit-message-include-scope.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-commit-message-include-scope.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAWnC,mEAAmE;AACnE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-commit-message-include-scope.js

@@ -0,0 +1,60 @@
+import { getDependabotMappingStringValue, getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getEffectiveDependabotUpdateMapping, } from "../_internal/dependabot-yaml.js";
+import { getMappingPair } from "../_internal/workflow-yaml.js";
+/** Rule implementation for commit-message.include requirements. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getDependabotRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const update of getDependabotUpdateEntries(root)) {
+                    const commitMessageMapping = getEffectiveDependabotUpdateMapping(root, update, "commit-message");
+                    const includePair = commitMessageMapping === null
+                        ? null
+                        : getMappingPair(commitMessageMapping, "include");
+                    const includeValue = commitMessageMapping === null
+                        ? null
+                        : getDependabotMappingStringValue(commitMessageMapping, "include");
+                    if (includeValue === "scope") {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            updateLabel: getDependabotUpdateLabel(update),
+                        },
+                        messageId: "missingCommitMessageIncludeScope",
+                        node: (includePair?.value ??
+                            includePair ??
+                            update.node),
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.dependabot",
+            ],
+            description: 'require Dependabot commit messages to set `commit-message.include: "scope"`.',
+            dialects: ["Dependabot configuration"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R089",
+            ruleNumber: 89,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-commit-message-include-scope",
+        },
+        messages: {
+            missingCommitMessageIncludeScope: '{{updateLabel}} should set `commit-message.include: "scope"` so Dependabot pull request titles indicate dependency scope clearly.',
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-commit-message-include-scope.js.map

package/dist/rules/require-dependabot-commit-message-include-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-commit-message-include-scope.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-commit-message-include-scope.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,+BAA+B,EAC/B,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,mEAAmE;AACnE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,oBAAoB,GACtB,mCAAmC,CAC/B,IAAI,EACJ,MAAM,EACN,gBAAgB,CACnB,CAAC;oBACN,MAAM,WAAW,GACb,oBAAoB,KAAK,IAAI;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,cAAc,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;oBAC1D,MAAM,YAAY,GACd,oBAAoB,KAAK,IAAI;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,+BAA+B,CAC3B,oBAAoB,EACpB,SAAS,CACZ,CAAC;oBAEZ,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;wBAC3B,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,kCAAkC;wBAC7C,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK;4BACrB,WAAW;4BACX,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,8EAA8E;YAClF,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,wHAAwH;SAChI;QACD,QAAQ,EAAE;YACN,gCAAgC,EAC5B,mIAAmI;SAC1I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require npm-like Dependabot update entries to define commit-message.prefix-development.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for commit-message.prefix-development requirements. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-commit-message-prefix-development.d.ts.map

package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-commit-message-prefix-development.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-commit-message-prefix-development.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAqBnC,8EAA8E;AAC9E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAqFhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-commit-message-prefix-development.js

@@ -0,0 +1,75 @@
+import { getDependabotMappingStringValue, getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getEffectiveDependabotUpdateMapping, } from "../_internal/dependabot-yaml.js";
+import { getMappingPair } from "../_internal/workflow-yaml.js";
+const ecosystemsSupportingPrefixDevelopment = new Set([
+    "bundler",
+    "composer",
+    "maven",
+    "mix",
+    "npm",
+    "pip",
+    "uv",
+]);
+/** Rule implementation for commit-message.prefix-development requirements. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getDependabotRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const update of getDependabotUpdateEntries(root)) {
+                    const packageEcosystem = update.packageEcosystem?.trim();
+                    if (packageEcosystem === undefined ||
+                        packageEcosystem === null ||
+                        !ecosystemsSupportingPrefixDevelopment.has(packageEcosystem)) {
+                        continue;
+                    }
+                    const commitMessageMapping = getEffectiveDependabotUpdateMapping(root, update, "commit-message");
+                    const prefixDevelopmentPair = commitMessageMapping === null
+                        ? null
+                        : getMappingPair(commitMessageMapping, "prefix-development");
+                    const prefixDevelopmentValue = commitMessageMapping === null
+                        ? null
+                        : getDependabotMappingStringValue(commitMessageMapping, "prefix-development");
+                    if (prefixDevelopmentValue !== null) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            updateLabel: getDependabotUpdateLabel(update),
+                        },
+                        messageId: "missingPrefixDevelopment",
+                        node: (prefixDevelopmentPair?.value ??
+                            prefixDevelopmentPair ??
+                            update.node),
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.dependabot",
+            ],
+            description: "require npm-like Dependabot update entries to define `commit-message.prefix-development`.",
+            dialects: ["Dependabot configuration"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R090",
+            ruleNumber: 90,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-commit-message-prefix-development",
+        },
+        messages: {
+            missingPrefixDevelopment: "{{updateLabel}} should define `commit-message.prefix-development` so development dependency updates have a distinct title convention.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-commit-message-prefix-development.js.map

package/dist/rules/require-dependabot-commit-message-prefix-development.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-commit-message-prefix-development.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-commit-message-prefix-development.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,+BAA+B,EAC/B,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,qCAAqC,GAAG,IAAI,GAAG,CAAC;IAClD,SAAS;IACT,UAAU;IACV,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;CACP,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;oBAEzD,IACI,gBAAgB,KAAK,SAAS;wBAC9B,gBAAgB,KAAK,IAAI;wBACzB,CAAC,qCAAqC,CAAC,GAAG,CACtC,gBAAgB,CACnB,EACH,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,MAAM,oBAAoB,GACtB,mCAAmC,CAC/B,IAAI,EACJ,MAAM,EACN,gBAAgB,CACnB,CAAC;oBACN,MAAM,qBAAqB,GACvB,oBAAoB,KAAK,IAAI;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,cAAc,CACV,oBAAoB,EACpB,oBAAoB,CACvB,CAAC;oBACZ,MAAM,sBAAsB,GACxB,oBAAoB,KAAK,IAAI;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,+BAA+B,CAC3B,oBAAoB,EACpB,oBAAoB,CACvB,CAAC;oBAEZ,IAAI,sBAAsB,KAAK,IAAI,EAAE,CAAC;wBAClC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,0BAA0B;wBACrC,IAAI,EAAE,CAAC,qBAAqB,EAAE,KAAK;4BAC/B,qBAAqB;4BACrB,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,2FAA2F;YAC/F,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6HAA6H;SACrI;QACD,QAAQ,EAAE;YACN,wBAAwB,EACpB,uIAAuI;SAC9I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-commit-message-prefix.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require Dependabot update entries to define an effective commit message prefix.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring effective commit-message prefixes. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-commit-message-prefix.d.ts.map

package/dist/rules/require-dependabot-commit-message-prefix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-commit-message-prefix.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-commit-message-prefix.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAWnC,2EAA2E;AAC3E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-commit-message-prefix.js

@@ -0,0 +1,60 @@
+import { getDependabotMappingStringValue, getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getEffectiveDependabotUpdateMapping, } from "../_internal/dependabot-yaml.js";
+import { getMappingPair } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring effective commit-message prefixes. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getDependabotRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const update of getDependabotUpdateEntries(root)) {
+                    const commitMessageMapping = getEffectiveDependabotUpdateMapping(root, update, "commit-message");
+                    const prefixPair = commitMessageMapping === null
+                        ? null
+                        : getMappingPair(commitMessageMapping, "prefix");
+                    const prefixValue = commitMessageMapping === null
+                        ? null
+                        : getDependabotMappingStringValue(commitMessageMapping, "prefix");
+                    if (prefixValue !== null) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            updateLabel: getDependabotUpdateLabel(update),
+                        },
+                        messageId: "missingCommitMessagePrefix",
+                        node: (prefixPair?.value ??
+                            prefixPair ??
+                            update.node),
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.dependabot",
+            ],
+            description: "require Dependabot update entries to define an effective `commit-message.prefix` directly or via a multi-ecosystem group.",
+            dialects: ["Dependabot configuration"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R079",
+            ruleNumber: 79,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-commit-message-prefix",
+        },
+        messages: {
+            missingCommitMessagePrefix: "{{updateLabel}} should define `commit-message.prefix` so Dependabot pull requests follow a predictable title convention.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-commit-message-prefix.js.map

package/dist/rules/require-dependabot-commit-message-prefix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-commit-message-prefix.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-commit-message-prefix.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,+BAA+B,EAC/B,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,2EAA2E;AAC3E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,oBAAoB,GACtB,mCAAmC,CAC/B,IAAI,EACJ,MAAM,EACN,gBAAgB,CACnB,CAAC;oBACN,MAAM,UAAU,GACZ,oBAAoB,KAAK,IAAI;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,cAAc,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;oBACzD,MAAM,WAAW,GACb,oBAAoB,KAAK,IAAI;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,+BAA+B,CAC3B,oBAAoB,EACpB,QAAQ,CACX,CAAC;oBAEZ,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACvB,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,4BAA4B;wBACvC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK;4BACpB,UAAU;4BACV,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,2HAA2H;YAC/H,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,iHAAiH;SACzH;QACD,QAAQ,EAAE;YACN,0BAA0B,EACtB,0HAA0H;SACjI;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-cooldown.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require Dependabot update entries to declare cooldown settings.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring cooldown settings. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-cooldown.d.ts.map

package/dist/rules/require-dependabot-cooldown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-cooldown.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-cooldown.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AASnC,2DAA2D;AAC3D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-cooldown.js

@@ -0,0 +1,52 @@
+import { getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, } from "../_internal/dependabot-yaml.js";
+import { getMappingPair } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring cooldown settings. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getDependabotRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const update of getDependabotUpdateEntries(root)) {
+                    const cooldownPair = getMappingPair(update.mapping, "cooldown");
+                    if (cooldownPair !== null) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            updateLabel: getDependabotUpdateLabel(update),
+                        },
+                        messageId: "missingCooldown",
+                        node: update.node,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.dependabot",
+            ],
+            description: "require Dependabot update entries to declare a `cooldown` policy.",
+            dialects: ["Dependabot configuration"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R086",
+            ruleNumber: 86,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-cooldown",
+        },
+        messages: {
+            missingCooldown: "{{updateLabel}} should declare `cooldown` so version update churn is intentionally throttled.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-dependabot-cooldown.js.map

package/dist/rules/require-dependabot-cooldown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-cooldown.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-cooldown.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,2DAA2D;AAC3D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,YAAY,GAAG,cAAc,CAC/B,MAAM,CAAC,OAAO,EACd,UAAU,CACb,CAAC;oBAEF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;wBACxB,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,iBAAiB;wBAC5B,IAAI,EAAE,MAAM,CAAC,IAA4B;qBAC5C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,mEAAmE;YACvE,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,eAAe,EACX,+FAA+F;SACtG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-dependabot-directory.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require every Dependabot update entry to define `directory` or `directories`.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring `directory` or `directories`. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-dependabot-directory.d.ts.map

package/dist/rules/require-dependabot-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-dependabot-directory.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-directory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AA2BnC,sEAAsE;AACtE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAyEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}