eslint-plugin-github-actions-2 1.0.2 → 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (504) hide show
  1. package/README.md +149 -101
  2. package/dist/_internal/code-scanning-workflow.d.ts +37 -0
  3. package/dist/_internal/code-scanning-workflow.d.ts.map +1 -0
  4. package/dist/_internal/code-scanning-workflow.js +73 -0
  5. package/dist/_internal/code-scanning-workflow.js.map +1 -0
  6. package/dist/_internal/dependabot-automation-workflow.d.ts +26 -0
  7. package/dist/_internal/dependabot-automation-workflow.d.ts.map +1 -0
  8. package/dist/_internal/dependabot-automation-workflow.js +25 -0
  9. package/dist/_internal/dependabot-automation-workflow.js.map +1 -0
  10. package/dist/_internal/dependabot-yaml.d.ts +63 -0
  11. package/dist/_internal/dependabot-yaml.d.ts.map +1 -0
  12. package/dist/_internal/dependabot-yaml.js +139 -0
  13. package/dist/_internal/dependabot-yaml.js.map +1 -0
  14. package/dist/_internal/dependency-review-workflow.d.ts +20 -0
  15. package/dist/_internal/dependency-review-workflow.d.ts.map +1 -0
  16. package/dist/_internal/dependency-review-workflow.js +9 -0
  17. package/dist/_internal/dependency-review-workflow.js.map +1 -0
  18. package/dist/_internal/github-actions-config-references.d.ts +1 -1
  19. package/dist/_internal/github-actions-config-references.d.ts.map +1 -1
  20. package/dist/_internal/github-actions-config-references.js +19 -2
  21. package/dist/_internal/github-actions-config-references.js.map +1 -1
  22. package/dist/_internal/lint-targets.d.ts +8 -0
  23. package/dist/_internal/lint-targets.d.ts.map +1 -1
  24. package/dist/_internal/lint-targets.js +26 -0
  25. package/dist/_internal/lint-targets.js.map +1 -1
  26. package/dist/_internal/rules-registry.d.ts +90 -0
  27. package/dist/_internal/rules-registry.d.ts.map +1 -1
  28. package/dist/_internal/rules-registry.js +90 -0
  29. package/dist/_internal/rules-registry.js.map +1 -1
  30. package/dist/_internal/secret-scanning-workflow.d.ts +24 -0
  31. package/dist/_internal/secret-scanning-workflow.d.ts.map +1 -0
  32. package/dist/_internal/secret-scanning-workflow.js +21 -0
  33. package/dist/_internal/secret-scanning-workflow.js.map +1 -0
  34. package/dist/_internal/workflow-action-steps.d.ts +35 -0
  35. package/dist/_internal/workflow-action-steps.d.ts.map +1 -0
  36. package/dist/_internal/workflow-action-steps.js +75 -0
  37. package/dist/_internal/workflow-action-steps.js.map +1 -0
  38. package/dist/_internal/workflow-permissions.d.ts +11 -0
  39. package/dist/_internal/workflow-permissions.d.ts.map +1 -0
  40. package/dist/_internal/workflow-permissions.js +50 -0
  41. package/dist/_internal/workflow-permissions.js.map +1 -0
  42. package/dist/_internal/yaml-fixes.d.ts +13 -0
  43. package/dist/_internal/yaml-fixes.d.ts.map +1 -0
  44. package/dist/_internal/yaml-fixes.js +77 -0
  45. package/dist/_internal/yaml-fixes.js.map +1 -0
  46. package/dist/plugin.cjs +3524 -292
  47. package/dist/plugin.cjs.map +4 -4
  48. package/dist/plugin.d.ts.map +1 -1
  49. package/dist/plugin.js +2 -0
  50. package/dist/plugin.js.map +1 -1
  51. package/dist/rules/action-name-casing.d.ts.map +1 -1
  52. package/dist/rules/action-name-casing.js +3 -0
  53. package/dist/rules/action-name-casing.js.map +1 -1
  54. package/dist/rules/job-id-casing.d.ts.map +1 -1
  55. package/dist/rules/job-id-casing.js +3 -0
  56. package/dist/rules/job-id-casing.js.map +1 -1
  57. package/dist/rules/max-jobs-per-action.d.ts.map +1 -1
  58. package/dist/rules/max-jobs-per-action.js +3 -0
  59. package/dist/rules/max-jobs-per-action.js.map +1 -1
  60. package/dist/rules/no-case-insensitive-input-id-collision.d.ts.map +1 -1
  61. package/dist/rules/no-case-insensitive-input-id-collision.js +3 -0
  62. package/dist/rules/no-case-insensitive-input-id-collision.js.map +1 -1
  63. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts +9 -0
  64. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts.map +1 -0
  65. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js +54 -0
  66. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js.map +1 -0
  67. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts +9 -0
  68. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts.map +1 -0
  69. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js +50 -0
  70. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js.map +1 -0
  71. package/dist/rules/no-composite-input-env-access.d.ts.map +1 -1
  72. package/dist/rules/no-composite-input-env-access.js +3 -0
  73. package/dist/rules/no-composite-input-env-access.js.map +1 -1
  74. package/dist/rules/no-deprecated-node-runtime.d.ts.map +1 -1
  75. package/dist/rules/no-deprecated-node-runtime.js +3 -0
  76. package/dist/rules/no-deprecated-node-runtime.js.map +1 -1
  77. package/dist/rules/no-duplicate-composite-step-id.d.ts.map +1 -1
  78. package/dist/rules/no-duplicate-composite-step-id.js +3 -0
  79. package/dist/rules/no-duplicate-composite-step-id.js.map +1 -1
  80. package/dist/rules/no-empty-template-file-pattern.d.ts.map +1 -1
  81. package/dist/rules/no-empty-template-file-pattern.js +6 -0
  82. package/dist/rules/no-empty-template-file-pattern.js.map +1 -1
  83. package/dist/rules/no-external-job.d.ts.map +1 -1
  84. package/dist/rules/no-external-job.js +3 -0
  85. package/dist/rules/no-external-job.js.map +1 -1
  86. package/dist/rules/no-hardcoded-default-branch-in-template.d.ts.map +1 -1
  87. package/dist/rules/no-hardcoded-default-branch-in-template.js +3 -0
  88. package/dist/rules/no-hardcoded-default-branch-in-template.js.map +1 -1
  89. package/dist/rules/no-icon-file-extension-in-template-icon-name.d.ts.map +1 -1
  90. package/dist/rules/no-icon-file-extension-in-template-icon-name.js +13 -3
  91. package/dist/rules/no-icon-file-extension-in-template-icon-name.js.map +1 -1
  92. package/dist/rules/no-inherit-secrets.d.ts.map +1 -1
  93. package/dist/rules/no-inherit-secrets.js +3 -0
  94. package/dist/rules/no-inherit-secrets.js.map +1 -1
  95. package/dist/rules/no-invalid-concurrency-context.d.ts.map +1 -1
  96. package/dist/rules/no-invalid-concurrency-context.js +3 -0
  97. package/dist/rules/no-invalid-concurrency-context.js.map +1 -1
  98. package/dist/rules/no-invalid-key.d.ts.map +1 -1
  99. package/dist/rules/no-invalid-key.js +3 -0
  100. package/dist/rules/no-invalid-key.js.map +1 -1
  101. package/dist/rules/no-invalid-reusable-workflow-job-key.d.ts.map +1 -1
  102. package/dist/rules/no-invalid-reusable-workflow-job-key.js +3 -0
  103. package/dist/rules/no-invalid-reusable-workflow-job-key.js.map +1 -1
  104. package/dist/rules/no-invalid-template-file-pattern-regex.d.ts.map +1 -1
  105. package/dist/rules/no-invalid-template-file-pattern-regex.js +3 -0
  106. package/dist/rules/no-invalid-template-file-pattern-regex.js.map +1 -1
  107. package/dist/rules/no-invalid-workflow-call-output-value.d.ts.map +1 -1
  108. package/dist/rules/no-invalid-workflow-call-output-value.js +3 -0
  109. package/dist/rules/no-invalid-workflow-call-output-value.js.map +1 -1
  110. package/dist/rules/no-overlapping-dependabot-directories.d.ts +9 -0
  111. package/dist/rules/no-overlapping-dependabot-directories.d.ts.map +1 -0
  112. package/dist/rules/no-overlapping-dependabot-directories.js +151 -0
  113. package/dist/rules/no-overlapping-dependabot-directories.js.map +1 -0
  114. package/dist/rules/no-path-separators-in-template-icon-name.d.ts.map +1 -1
  115. package/dist/rules/no-path-separators-in-template-icon-name.js +26 -3
  116. package/dist/rules/no-path-separators-in-template-icon-name.js.map +1 -1
  117. package/dist/rules/no-post-if-without-post.d.ts.map +1 -1
  118. package/dist/rules/no-post-if-without-post.js +6 -0
  119. package/dist/rules/no-post-if-without-post.js.map +1 -1
  120. package/dist/rules/no-pr-head-checkout-in-pull-request-target.d.ts.map +1 -1
  121. package/dist/rules/no-pr-head-checkout-in-pull-request-target.js +3 -0
  122. package/dist/rules/no-pr-head-checkout-in-pull-request-target.js.map +1 -1
  123. package/dist/rules/no-pre-if-without-pre.d.ts.map +1 -1
  124. package/dist/rules/no-pre-if-without-pre.js +6 -0
  125. package/dist/rules/no-pre-if-without-pre.js.map +1 -1
  126. package/dist/rules/no-required-input-with-default.d.ts.map +1 -1
  127. package/dist/rules/no-required-input-with-default.js +23 -0
  128. package/dist/rules/no-required-input-with-default.js.map +1 -1
  129. package/dist/rules/no-secrets-in-if.d.ts.map +1 -1
  130. package/dist/rules/no-secrets-in-if.js +3 -0
  131. package/dist/rules/no-secrets-in-if.js.map +1 -1
  132. package/dist/rules/no-self-hosted-runner-on-fork-pr-events.d.ts.map +1 -1
  133. package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js +3 -0
  134. package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js.map +1 -1
  135. package/dist/rules/no-subdirectory-template-file-pattern.d.ts.map +1 -1
  136. package/dist/rules/no-subdirectory-template-file-pattern.js +3 -0
  137. package/dist/rules/no-subdirectory-template-file-pattern.js.map +1 -1
  138. package/dist/rules/no-template-placeholder-in-non-template-workflow.d.ts.map +1 -1
  139. package/dist/rules/no-template-placeholder-in-non-template-workflow.js +3 -0
  140. package/dist/rules/no-template-placeholder-in-non-template-workflow.js.map +1 -1
  141. package/dist/rules/no-top-level-env.d.ts.map +1 -1
  142. package/dist/rules/no-top-level-env.js +3 -0
  143. package/dist/rules/no-top-level-env.js.map +1 -1
  144. package/dist/rules/no-top-level-permissions.d.ts.map +1 -1
  145. package/dist/rules/no-top-level-permissions.js +3 -0
  146. package/dist/rules/no-top-level-permissions.js.map +1 -1
  147. package/dist/rules/no-universal-template-file-pattern.d.ts.map +1 -1
  148. package/dist/rules/no-universal-template-file-pattern.js +3 -0
  149. package/dist/rules/no-universal-template-file-pattern.js.map +1 -1
  150. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts +9 -0
  151. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts.map +1 -0
  152. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js +58 -0
  153. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js.map +1 -0
  154. package/dist/rules/no-unknown-input-reference-in-composite.d.ts.map +1 -1
  155. package/dist/rules/no-unknown-input-reference-in-composite.js +3 -0
  156. package/dist/rules/no-unknown-input-reference-in-composite.js.map +1 -1
  157. package/dist/rules/no-unknown-job-output-reference.d.ts.map +1 -1
  158. package/dist/rules/no-unknown-job-output-reference.js +3 -0
  159. package/dist/rules/no-unknown-job-output-reference.js.map +1 -1
  160. package/dist/rules/no-unknown-step-reference.d.ts.map +1 -1
  161. package/dist/rules/no-unknown-step-reference.js +3 -0
  162. package/dist/rules/no-unknown-step-reference.js.map +1 -1
  163. package/dist/rules/no-untrusted-input-in-run.d.ts.map +1 -1
  164. package/dist/rules/no-untrusted-input-in-run.js +3 -0
  165. package/dist/rules/no-untrusted-input-in-run.js.map +1 -1
  166. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts +9 -0
  167. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts.map +1 -0
  168. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js +51 -0
  169. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js.map +1 -0
  170. package/dist/rules/no-unused-input-in-composite.d.ts.map +1 -1
  171. package/dist/rules/no-unused-input-in-composite.js +3 -0
  172. package/dist/rules/no-unused-input-in-composite.js.map +1 -1
  173. package/dist/rules/no-write-all-permissions.d.ts.map +1 -1
  174. package/dist/rules/no-write-all-permissions.js +3 -0
  175. package/dist/rules/no-write-all-permissions.js.map +1 -1
  176. package/dist/rules/pin-action-shas.d.ts.map +1 -1
  177. package/dist/rules/pin-action-shas.js +3 -0
  178. package/dist/rules/pin-action-shas.js.map +1 -1
  179. package/dist/rules/prefer-action-yml.d.ts.map +1 -1
  180. package/dist/rules/prefer-action-yml.js +3 -0
  181. package/dist/rules/prefer-action-yml.js.map +1 -1
  182. package/dist/rules/prefer-fail-fast.d.ts.map +1 -1
  183. package/dist/rules/prefer-fail-fast.js +3 -0
  184. package/dist/rules/prefer-fail-fast.js.map +1 -1
  185. package/dist/rules/prefer-file-extension.d.ts.map +1 -1
  186. package/dist/rules/prefer-file-extension.js +3 -0
  187. package/dist/rules/prefer-file-extension.js.map +1 -1
  188. package/dist/rules/prefer-inputs-context.d.ts.map +1 -1
  189. package/dist/rules/prefer-inputs-context.js +3 -0
  190. package/dist/rules/prefer-inputs-context.js.map +1 -1
  191. package/dist/rules/prefer-step-uses-style.d.ts.map +1 -1
  192. package/dist/rules/prefer-step-uses-style.js +3 -0
  193. package/dist/rules/prefer-step-uses-style.js.map +1 -1
  194. package/dist/rules/prefer-template-yml-extension.d.ts.map +1 -1
  195. package/dist/rules/prefer-template-yml-extension.js +3 -0
  196. package/dist/rules/prefer-template-yml-extension.js.map +1 -1
  197. package/dist/rules/require-action-name.d.ts.map +1 -1
  198. package/dist/rules/require-action-name.js +3 -0
  199. package/dist/rules/require-action-name.js.map +1 -1
  200. package/dist/rules/require-action-run-name.d.ts.map +1 -1
  201. package/dist/rules/require-action-run-name.js +3 -0
  202. package/dist/rules/require-action-run-name.js.map +1 -1
  203. package/dist/rules/require-checkout-before-local-action.d.ts.map +1 -1
  204. package/dist/rules/require-checkout-before-local-action.js +3 -0
  205. package/dist/rules/require-checkout-before-local-action.js.map +1 -1
  206. package/dist/rules/require-codeql-actions-read.d.ts +9 -0
  207. package/dist/rules/require-codeql-actions-read.d.ts.map +1 -0
  208. package/dist/rules/require-codeql-actions-read.js +63 -0
  209. package/dist/rules/require-codeql-actions-read.js.map +1 -0
  210. package/dist/rules/require-codeql-branch-filters.d.ts +12 -0
  211. package/dist/rules/require-codeql-branch-filters.d.ts.map +1 -0
  212. package/dist/rules/require-codeql-branch-filters.js +83 -0
  213. package/dist/rules/require-codeql-branch-filters.js.map +1 -0
  214. package/dist/rules/require-codeql-category-when-language-matrix.d.ts +12 -0
  215. package/dist/rules/require-codeql-category-when-language-matrix.d.ts.map +1 -0
  216. package/dist/rules/require-codeql-category-when-language-matrix.js +68 -0
  217. package/dist/rules/require-codeql-category-when-language-matrix.js.map +1 -0
  218. package/dist/rules/require-codeql-pull-request-trigger.d.ts +9 -0
  219. package/dist/rules/require-codeql-pull-request-trigger.d.ts.map +1 -0
  220. package/dist/rules/require-codeql-pull-request-trigger.js +46 -0
  221. package/dist/rules/require-codeql-pull-request-trigger.js.map +1 -0
  222. package/dist/rules/require-codeql-schedule.d.ts +9 -0
  223. package/dist/rules/require-codeql-schedule.d.ts.map +1 -0
  224. package/dist/rules/require-codeql-schedule.js +46 -0
  225. package/dist/rules/require-codeql-schedule.js.map +1 -0
  226. package/dist/rules/require-codeql-security-events-write.d.ts +9 -0
  227. package/dist/rules/require-codeql-security-events-write.d.ts.map +1 -0
  228. package/dist/rules/require-codeql-security-events-write.js +53 -0
  229. package/dist/rules/require-codeql-security-events-write.js.map +1 -0
  230. package/dist/rules/require-composite-step-name.d.ts.map +1 -1
  231. package/dist/rules/require-composite-step-name.js +3 -0
  232. package/dist/rules/require-composite-step-name.js.map +1 -1
  233. package/dist/rules/require-dependabot-assignees.d.ts +9 -0
  234. package/dist/rules/require-dependabot-assignees.d.ts.map +1 -0
  235. package/dist/rules/require-dependabot-assignees.js +53 -0
  236. package/dist/rules/require-dependabot-assignees.js.map +1 -0
  237. package/dist/rules/require-dependabot-automation-permissions.d.ts +9 -0
  238. package/dist/rules/require-dependabot-automation-permissions.d.ts.map +1 -0
  239. package/dist/rules/require-dependabot-automation-permissions.js +68 -0
  240. package/dist/rules/require-dependabot-automation-permissions.js.map +1 -0
  241. package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts +12 -0
  242. package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts.map +1 -0
  243. package/dist/rules/require-dependabot-automation-pull-request-trigger.js +49 -0
  244. package/dist/rules/require-dependabot-automation-pull-request-trigger.js.map +1 -0
  245. package/dist/rules/require-dependabot-bot-actor-guard.d.ts +9 -0
  246. package/dist/rules/require-dependabot-bot-actor-guard.d.ts.map +1 -0
  247. package/dist/rules/require-dependabot-bot-actor-guard.js +64 -0
  248. package/dist/rules/require-dependabot-bot-actor-guard.js.map +1 -0
  249. package/dist/rules/require-dependabot-commit-message-include-scope.d.ts +9 -0
  250. package/dist/rules/require-dependabot-commit-message-include-scope.d.ts.map +1 -0
  251. package/dist/rules/require-dependabot-commit-message-include-scope.js +60 -0
  252. package/dist/rules/require-dependabot-commit-message-include-scope.js.map +1 -0
  253. package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts +9 -0
  254. package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts.map +1 -0
  255. package/dist/rules/require-dependabot-commit-message-prefix-development.js +75 -0
  256. package/dist/rules/require-dependabot-commit-message-prefix-development.js.map +1 -0
  257. package/dist/rules/require-dependabot-commit-message-prefix.d.ts +9 -0
  258. package/dist/rules/require-dependabot-commit-message-prefix.d.ts.map +1 -0
  259. package/dist/rules/require-dependabot-commit-message-prefix.js +60 -0
  260. package/dist/rules/require-dependabot-commit-message-prefix.js.map +1 -0
  261. package/dist/rules/require-dependabot-cooldown.d.ts +9 -0
  262. package/dist/rules/require-dependabot-cooldown.d.ts.map +1 -0
  263. package/dist/rules/require-dependabot-cooldown.js +52 -0
  264. package/dist/rules/require-dependabot-cooldown.js.map +1 -0
  265. package/dist/rules/require-dependabot-directory.d.ts +9 -0
  266. package/dist/rules/require-dependabot-directory.d.ts.map +1 -0
  267. package/dist/rules/require-dependabot-directory.js +68 -0
  268. package/dist/rules/require-dependabot-directory.js.map +1 -0
  269. package/dist/rules/require-dependabot-github-actions-directory-root.d.ts +9 -0
  270. package/dist/rules/require-dependabot-github-actions-directory-root.d.ts.map +1 -0
  271. package/dist/rules/require-dependabot-github-actions-directory-root.js +76 -0
  272. package/dist/rules/require-dependabot-github-actions-directory-root.js.map +1 -0
  273. package/dist/rules/require-dependabot-labels.d.ts +9 -0
  274. package/dist/rules/require-dependabot-labels.d.ts.map +1 -0
  275. package/dist/rules/require-dependabot-labels.js +52 -0
  276. package/dist/rules/require-dependabot-labels.js.map +1 -0
  277. package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts +9 -0
  278. package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts.map +1 -0
  279. package/dist/rules/require-dependabot-open-pull-requests-limit.js +55 -0
  280. package/dist/rules/require-dependabot-open-pull-requests-limit.js.map +1 -0
  281. package/dist/rules/require-dependabot-package-ecosystem.d.ts +9 -0
  282. package/dist/rules/require-dependabot-package-ecosystem.d.ts.map +1 -0
  283. package/dist/rules/require-dependabot-package-ecosystem.js +79 -0
  284. package/dist/rules/require-dependabot-package-ecosystem.js.map +1 -0
  285. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts +9 -0
  286. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts.map +1 -0
  287. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js +58 -0
  288. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js.map +1 -0
  289. package/dist/rules/require-dependabot-schedule-cronjob.d.ts +9 -0
  290. package/dist/rules/require-dependabot-schedule-cronjob.d.ts.map +1 -0
  291. package/dist/rules/require-dependabot-schedule-cronjob.js +82 -0
  292. package/dist/rules/require-dependabot-schedule-cronjob.js.map +1 -0
  293. package/dist/rules/require-dependabot-schedule-interval.d.ts +9 -0
  294. package/dist/rules/require-dependabot-schedule-interval.d.ts.map +1 -0
  295. package/dist/rules/require-dependabot-schedule-interval.js +73 -0
  296. package/dist/rules/require-dependabot-schedule-interval.js.map +1 -0
  297. package/dist/rules/require-dependabot-schedule-time.d.ts +9 -0
  298. package/dist/rules/require-dependabot-schedule-time.d.ts.map +1 -0
  299. package/dist/rules/require-dependabot-schedule-time.js +68 -0
  300. package/dist/rules/require-dependabot-schedule-time.js.map +1 -0
  301. package/dist/rules/require-dependabot-schedule-timezone.d.ts +9 -0
  302. package/dist/rules/require-dependabot-schedule-timezone.d.ts.map +1 -0
  303. package/dist/rules/require-dependabot-schedule-timezone.js +69 -0
  304. package/dist/rules/require-dependabot-schedule-timezone.js.map +1 -0
  305. package/dist/rules/require-dependabot-target-branch.d.ts +9 -0
  306. package/dist/rules/require-dependabot-target-branch.d.ts.map +1 -0
  307. package/dist/rules/require-dependabot-target-branch.js +53 -0
  308. package/dist/rules/require-dependabot-target-branch.js.map +1 -0
  309. package/dist/rules/require-dependabot-updates.d.ts +9 -0
  310. package/dist/rules/require-dependabot-updates.d.ts.map +1 -0
  311. package/dist/rules/require-dependabot-updates.js +54 -0
  312. package/dist/rules/require-dependabot-updates.js.map +1 -0
  313. package/dist/rules/require-dependabot-version.d.ts +9 -0
  314. package/dist/rules/require-dependabot-version.d.ts.map +1 -0
  315. package/dist/rules/require-dependabot-version.js +62 -0
  316. package/dist/rules/require-dependabot-version.js.map +1 -0
  317. package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts +9 -0
  318. package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts.map +1 -0
  319. package/dist/rules/require-dependabot-versioning-strategy-for-npm.js +58 -0
  320. package/dist/rules/require-dependabot-versioning-strategy-for-npm.js.map +1 -0
  321. package/dist/rules/require-dependency-review-action.d.ts +9 -0
  322. package/dist/rules/require-dependency-review-action.d.ts.map +1 -0
  323. package/dist/rules/require-dependency-review-action.js +51 -0
  324. package/dist/rules/require-dependency-review-action.js.map +1 -0
  325. package/dist/rules/require-dependency-review-fail-on-severity.d.ts +9 -0
  326. package/dist/rules/require-dependency-review-fail-on-severity.d.ts.map +1 -0
  327. package/dist/rules/require-dependency-review-fail-on-severity.js +62 -0
  328. package/dist/rules/require-dependency-review-fail-on-severity.js.map +1 -0
  329. package/dist/rules/require-dependency-review-permissions-contents-read.d.ts +9 -0
  330. package/dist/rules/require-dependency-review-permissions-contents-read.d.ts.map +1 -0
  331. package/dist/rules/require-dependency-review-permissions-contents-read.js +55 -0
  332. package/dist/rules/require-dependency-review-permissions-contents-read.js.map +1 -0
  333. package/dist/rules/require-dependency-review-pull-request-trigger.d.ts +9 -0
  334. package/dist/rules/require-dependency-review-pull-request-trigger.d.ts.map +1 -0
  335. package/dist/rules/require-dependency-review-pull-request-trigger.js +47 -0
  336. package/dist/rules/require-dependency-review-pull-request-trigger.js.map +1 -0
  337. package/dist/rules/require-fetch-metadata-github-token.d.ts +9 -0
  338. package/dist/rules/require-fetch-metadata-github-token.d.ts.map +1 -0
  339. package/dist/rules/require-fetch-metadata-github-token.js +57 -0
  340. package/dist/rules/require-fetch-metadata-github-token.js.map +1 -0
  341. package/dist/rules/require-job-name.d.ts.map +1 -1
  342. package/dist/rules/require-job-name.js +35 -0
  343. package/dist/rules/require-job-name.js.map +1 -1
  344. package/dist/rules/require-job-step-name.d.ts.map +1 -1
  345. package/dist/rules/require-job-step-name.js +76 -0
  346. package/dist/rules/require-job-step-name.js.map +1 -1
  347. package/dist/rules/require-job-timeout-minutes.d.ts.map +1 -1
  348. package/dist/rules/require-job-timeout-minutes.js +3 -0
  349. package/dist/rules/require-job-timeout-minutes.js.map +1 -1
  350. package/dist/rules/require-merge-group-trigger.d.ts.map +1 -1
  351. package/dist/rules/require-merge-group-trigger.js +3 -0
  352. package/dist/rules/require-merge-group-trigger.js.map +1 -1
  353. package/dist/rules/require-pull-request-target-branches.d.ts.map +1 -1
  354. package/dist/rules/require-pull-request-target-branches.js +3 -0
  355. package/dist/rules/require-pull-request-target-branches.js.map +1 -1
  356. package/dist/rules/require-run-step-shell.d.ts.map +1 -1
  357. package/dist/rules/require-run-step-shell.js +3 -0
  358. package/dist/rules/require-run-step-shell.js.map +1 -1
  359. package/dist/rules/require-sarif-upload-security-events-write.d.ts +9 -0
  360. package/dist/rules/require-sarif-upload-security-events-write.d.ts.map +1 -0
  361. package/dist/rules/require-sarif-upload-security-events-write.js +51 -0
  362. package/dist/rules/require-sarif-upload-security-events-write.js.map +1 -0
  363. package/dist/rules/require-scorecard-results-format-sarif.d.ts +9 -0
  364. package/dist/rules/require-scorecard-results-format-sarif.d.ts.map +1 -0
  365. package/dist/rules/require-scorecard-results-format-sarif.js +57 -0
  366. package/dist/rules/require-scorecard-results-format-sarif.js.map +1 -0
  367. package/dist/rules/require-scorecard-upload-sarif-step.d.ts +9 -0
  368. package/dist/rules/require-scorecard-upload-sarif-step.d.ts.map +1 -0
  369. package/dist/rules/require-scorecard-upload-sarif-step.js +46 -0
  370. package/dist/rules/require-scorecard-upload-sarif-step.js.map +1 -0
  371. package/dist/rules/require-secret-scan-contents-read.d.ts +12 -0
  372. package/dist/rules/require-secret-scan-contents-read.d.ts.map +1 -0
  373. package/dist/rules/require-secret-scan-contents-read.js +53 -0
  374. package/dist/rules/require-secret-scan-contents-read.js.map +1 -0
  375. package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts +9 -0
  376. package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts.map +1 -0
  377. package/dist/rules/require-secret-scan-fetch-depth-zero.js +77 -0
  378. package/dist/rules/require-secret-scan-fetch-depth-zero.js.map +1 -0
  379. package/dist/rules/require-secret-scan-schedule.d.ts +9 -0
  380. package/dist/rules/require-secret-scan-schedule.d.ts.map +1 -0
  381. package/dist/rules/require-secret-scan-schedule.js +46 -0
  382. package/dist/rules/require-secret-scan-schedule.js.map +1 -0
  383. package/dist/rules/require-template-categories.d.ts.map +1 -1
  384. package/dist/rules/require-template-categories.js +3 -0
  385. package/dist/rules/require-template-categories.js.map +1 -1
  386. package/dist/rules/require-template-file-patterns.d.ts.map +1 -1
  387. package/dist/rules/require-template-file-patterns.js +3 -0
  388. package/dist/rules/require-template-file-patterns.js.map +1 -1
  389. package/dist/rules/require-template-icon-file-exists.d.ts.map +1 -1
  390. package/dist/rules/require-template-icon-file-exists.js +3 -0
  391. package/dist/rules/require-template-icon-file-exists.js.map +1 -1
  392. package/dist/rules/require-template-icon-name.d.ts.map +1 -1
  393. package/dist/rules/require-template-icon-name.js +3 -0
  394. package/dist/rules/require-template-icon-name.js.map +1 -1
  395. package/dist/rules/require-template-workflow-name.d.ts.map +1 -1
  396. package/dist/rules/require-template-workflow-name.js +3 -0
  397. package/dist/rules/require-template-workflow-name.js.map +1 -1
  398. package/dist/rules/require-trigger-types.d.ts.map +1 -1
  399. package/dist/rules/require-trigger-types.js +3 -0
  400. package/dist/rules/require-trigger-types.js.map +1 -1
  401. package/dist/rules/require-trufflehog-verified-results-mode.d.ts +9 -0
  402. package/dist/rules/require-trufflehog-verified-results-mode.d.ts.map +1 -0
  403. package/dist/rules/require-trufflehog-verified-results-mode.js +59 -0
  404. package/dist/rules/require-trufflehog-verified-results-mode.js.map +1 -0
  405. package/dist/rules/require-workflow-call-input-type.d.ts.map +1 -1
  406. package/dist/rules/require-workflow-call-input-type.js +3 -0
  407. package/dist/rules/require-workflow-call-input-type.js.map +1 -1
  408. package/dist/rules/require-workflow-call-output-value.d.ts.map +1 -1
  409. package/dist/rules/require-workflow-call-output-value.js +3 -0
  410. package/dist/rules/require-workflow-call-output-value.js.map +1 -1
  411. package/dist/rules/require-workflow-concurrency.d.ts.map +1 -1
  412. package/dist/rules/require-workflow-concurrency.js +3 -0
  413. package/dist/rules/require-workflow-concurrency.js.map +1 -1
  414. package/dist/rules/require-workflow-dispatch-input-type.d.ts.map +1 -1
  415. package/dist/rules/require-workflow-dispatch-input-type.js +3 -0
  416. package/dist/rules/require-workflow-dispatch-input-type.js.map +1 -1
  417. package/dist/rules/require-workflow-interface-description.d.ts.map +1 -1
  418. package/dist/rules/require-workflow-interface-description.js +3 -0
  419. package/dist/rules/require-workflow-interface-description.js.map +1 -1
  420. package/dist/rules/require-workflow-permissions.d.ts.map +1 -1
  421. package/dist/rules/require-workflow-permissions.js +3 -0
  422. package/dist/rules/require-workflow-permissions.js.map +1 -1
  423. package/dist/rules/require-workflow-run-branches.d.ts.map +1 -1
  424. package/dist/rules/require-workflow-run-branches.js +3 -0
  425. package/dist/rules/require-workflow-run-branches.js.map +1 -1
  426. package/dist/rules/require-workflow-template-pair.d.ts.map +1 -1
  427. package/dist/rules/require-workflow-template-pair.js +3 -0
  428. package/dist/rules/require-workflow-template-pair.js.map +1 -1
  429. package/dist/rules/require-workflow-template-properties-pair.d.ts.map +1 -1
  430. package/dist/rules/require-workflow-template-properties-pair.js +3 -0
  431. package/dist/rules/require-workflow-template-properties-pair.js.map +1 -1
  432. package/dist/rules/valid-timeout-minutes.d.ts.map +1 -1
  433. package/dist/rules/valid-timeout-minutes.js +3 -0
  434. package/dist/rules/valid-timeout-minutes.js.map +1 -1
  435. package/dist/rules/valid-trigger-events.d.ts.map +1 -1
  436. package/dist/rules/valid-trigger-events.js +3 -0
  437. package/dist/rules/valid-trigger-events.js.map +1 -1
  438. package/docs/rules/action-name-casing.md +6 -2
  439. package/docs/rules/no-codeql-autobuild-for-javascript-typescript.md +55 -0
  440. package/docs/rules/no-codeql-javascript-typescript-split-language-matrix.md +51 -0
  441. package/docs/rules/no-empty-template-file-pattern.md +5 -1
  442. package/docs/rules/no-icon-file-extension-in-template-icon-name.md +5 -1
  443. package/docs/rules/no-overlapping-dependabot-directories.md +87 -0
  444. package/docs/rules/no-path-separators-in-template-icon-name.md +5 -1
  445. package/docs/rules/no-post-if-without-post.md +5 -1
  446. package/docs/rules/no-pre-if-without-pre.md +5 -1
  447. package/docs/rules/no-required-input-with-default.md +10 -1
  448. package/docs/rules/no-unknown-dependabot-multi-ecosystem-group.md +62 -0
  449. package/docs/rules/no-unused-dependabot-enable-beta-ecosystems.md +63 -0
  450. package/docs/rules/overview.md +47 -1
  451. package/docs/rules/prefer-inputs-context.md +6 -2
  452. package/docs/rules/presets/action-metadata.md +22 -11
  453. package/docs/rules/presets/all.md +125 -69
  454. package/docs/rules/presets/code-scanning.md +33 -0
  455. package/docs/rules/presets/dependabot.md +40 -0
  456. package/docs/rules/presets/index.md +139 -81
  457. package/docs/rules/presets/recommended.md +30 -19
  458. package/docs/rules/presets/security.md +35 -9
  459. package/docs/rules/presets/strict.md +52 -41
  460. package/docs/rules/presets/workflow-template-properties.md +22 -11
  461. package/docs/rules/presets/workflow-templates.md +26 -15
  462. package/docs/rules/require-codeql-actions-read.md +50 -0
  463. package/docs/rules/require-codeql-branch-filters.md +53 -0
  464. package/docs/rules/require-codeql-category-when-language-matrix.md +49 -0
  465. package/docs/rules/require-codeql-pull-request-trigger.md +53 -0
  466. package/docs/rules/require-codeql-schedule.md +57 -0
  467. package/docs/rules/require-codeql-security-events-write.md +50 -0
  468. package/docs/rules/require-dependabot-assignees.md +64 -0
  469. package/docs/rules/require-dependabot-automation-permissions.md +53 -0
  470. package/docs/rules/require-dependabot-automation-pull-request-trigger.md +49 -0
  471. package/docs/rules/require-dependabot-bot-actor-guard.md +52 -0
  472. package/docs/rules/require-dependabot-commit-message-include-scope.md +58 -0
  473. package/docs/rules/require-dependabot-commit-message-prefix-development.md +60 -0
  474. package/docs/rules/require-dependabot-commit-message-prefix.md +64 -0
  475. package/docs/rules/require-dependabot-cooldown.md +59 -0
  476. package/docs/rules/require-dependabot-directory.md +79 -0
  477. package/docs/rules/require-dependabot-github-actions-directory-root.md +62 -0
  478. package/docs/rules/require-dependabot-labels.md +65 -0
  479. package/docs/rules/require-dependabot-open-pull-requests-limit.md +58 -0
  480. package/docs/rules/require-dependabot-package-ecosystem.md +57 -0
  481. package/docs/rules/require-dependabot-patterns-for-multi-ecosystem-group.md +67 -0
  482. package/docs/rules/require-dependabot-schedule-cronjob.md +74 -0
  483. package/docs/rules/require-dependabot-schedule-interval.md +66 -0
  484. package/docs/rules/require-dependabot-schedule-time.md +60 -0
  485. package/docs/rules/require-dependabot-schedule-timezone.md +61 -0
  486. package/docs/rules/require-dependabot-target-branch.md +63 -0
  487. package/docs/rules/require-dependabot-updates.md +58 -0
  488. package/docs/rules/require-dependabot-version.md +70 -0
  489. package/docs/rules/require-dependabot-versioning-strategy-for-npm.md +58 -0
  490. package/docs/rules/require-dependency-review-action.md +60 -0
  491. package/docs/rules/require-dependency-review-fail-on-severity.md +57 -0
  492. package/docs/rules/require-dependency-review-permissions-contents-read.md +62 -0
  493. package/docs/rules/require-dependency-review-pull-request-trigger.md +57 -0
  494. package/docs/rules/require-fetch-metadata-github-token.md +49 -0
  495. package/docs/rules/require-job-name.md +6 -2
  496. package/docs/rules/require-job-step-name.md +11 -2
  497. package/docs/rules/require-sarif-upload-security-events-write.md +50 -0
  498. package/docs/rules/require-scorecard-results-format-sarif.md +49 -0
  499. package/docs/rules/require-scorecard-upload-sarif-step.md +55 -0
  500. package/docs/rules/require-secret-scan-contents-read.md +48 -0
  501. package/docs/rules/require-secret-scan-fetch-depth-zero.md +50 -0
  502. package/docs/rules/require-secret-scan-schedule.md +50 -0
  503. package/docs/rules/require-trufflehog-verified-results-mode.md +49 -0
  504. package/package.json +50 -57
@@ -0,0 +1,68 @@
1
+ import { getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getNonEmptyStringSequenceEntries, } from "../_internal/dependabot-yaml.js";
2
+ import { getMappingPair, getScalarStringValue, } from "../_internal/workflow-yaml.js";
3
+ /** Determine whether a scalar-like directory value is present and non-empty. */
4
+ const hasNonEmptyDirectory = (value) => {
5
+ const directoryValue = getScalarStringValue(value)?.trim();
6
+ return (directoryValue !== undefined &&
7
+ directoryValue !== null &&
8
+ directoryValue.length > 0);
9
+ };
10
+ /** Rule implementation for requiring `directory` or `directories`. */
11
+ const rule = {
12
+ create(context) {
13
+ return {
14
+ Program() {
15
+ const root = getDependabotRoot(context);
16
+ if (root === null) {
17
+ return;
18
+ }
19
+ for (const update of getDependabotUpdateEntries(root)) {
20
+ const directoryPair = getMappingPair(update.mapping, "directory");
21
+ const directoriesPair = getMappingPair(update.mapping, "directories");
22
+ const hasDirectory = hasNonEmptyDirectory(directoryPair?.value);
23
+ const directoryEntries = getNonEmptyStringSequenceEntries(directoriesPair?.value);
24
+ const hasDirectories = directoryEntries.length > 0;
25
+ if (hasDirectory !== hasDirectories) {
26
+ continue;
27
+ }
28
+ context.report({
29
+ data: {
30
+ updateLabel: getDependabotUpdateLabel(update),
31
+ },
32
+ messageId: hasDirectory && hasDirectories
33
+ ? "conflictingDirectorySettings"
34
+ : "missingDirectorySetting",
35
+ node: (directoriesPair ??
36
+ directoryPair ??
37
+ update.node),
38
+ });
39
+ }
40
+ },
41
+ };
42
+ },
43
+ meta: {
44
+ deprecated: false,
45
+ docs: {
46
+ configs: [
47
+ "github-actions.configs.all",
48
+ "github-actions.configs.dependabot",
49
+ ],
50
+ description: "require every Dependabot `updates` entry to define exactly one of `directory` or `directories`.",
51
+ dialects: ["Dependabot configuration"],
52
+ frozen: false,
53
+ recommended: true,
54
+ requiresTypeChecking: false,
55
+ ruleId: "R073",
56
+ ruleNumber: 73,
57
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-directory",
58
+ },
59
+ messages: {
60
+ conflictingDirectorySettings: "{{updateLabel}} should define either `directory` or `directories`, not both.",
61
+ missingDirectorySetting: "{{updateLabel}} must define a non-empty `directory` or `directories` value.",
62
+ },
63
+ schema: [],
64
+ type: "problem",
65
+ },
66
+ };
67
+ export default rule;
68
+ //# sourceMappingURL=require-dependabot-directory.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-directory.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-directory.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,cAAc,EACd,oBAAoB,GACvB,MAAM,+BAA+B,CAAC;AAEvC,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,CACzB,KAAsE,EAC/D,EAAE;IACT,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAE3D,OAAO,CACH,cAAc,KAAK,SAAS;QAC5B,cAAc,KAAK,IAAI;QACvB,cAAc,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAC;AACN,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,aAAa,GAAG,cAAc,CAChC,MAAM,CAAC,OAAO,EACd,WAAW,CACd,CAAC;oBACF,MAAM,eAAe,GAAG,cAAc,CAClC,MAAM,CAAC,OAAO,EACd,aAAa,CAChB,CAAC;oBACF,MAAM,YAAY,GAAG,oBAAoB,CACrC,aAAa,EAAE,KAAK,CACvB,CAAC;oBACF,MAAM,gBAAgB,GAAG,gCAAgC,CACrD,eAAe,EAAE,KAAK,CACzB,CAAC;oBACF,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;oBAEnD,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;wBAClC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EACL,YAAY,IAAI,cAAc;4BAC1B,CAAC,CAAC,8BAA8B;4BAChC,CAAC,CAAC,yBAAyB;wBACnC,IAAI,EAAE,CAAC,eAAe;4BAClB,aAAa;4BACb,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,iGAAiG;YACrG,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,qGAAqG;SAC7G;QACD,QAAQ,EAAE;YACN,4BAA4B,EACxB,8EAA8E;YAClF,uBAAuB,EACnB,6EAA6E;SACpF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require GitHub Actions Dependabot updates to use `directory: /`.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for GitHub Actions directory-root enforcement. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-github-actions-directory-root.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-github-actions-directory-root.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-github-actions-directory-root.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAWnC,yEAAyE;AACzE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA2GhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,76 @@
1
+ import { getDependabotMappingStringValue, getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, } from "../_internal/dependabot-yaml.js";
2
+ import { getMappingPair } from "../_internal/workflow-yaml.js";
3
+ import { getEnclosingLineRemovalRange } from "../_internal/yaml-fixes.js";
4
+ /** Rule implementation for GitHub Actions directory-root enforcement. */
5
+ const rule = {
6
+ create(context) {
7
+ return {
8
+ Program() {
9
+ const root = getDependabotRoot(context);
10
+ if (root === null) {
11
+ return;
12
+ }
13
+ for (const update of getDependabotUpdateEntries(root)) {
14
+ if (update.packageEcosystem?.trim() !== "github-actions") {
15
+ continue;
16
+ }
17
+ const directoryPair = getMappingPair(update.mapping, "directory");
18
+ const directoriesPair = getMappingPair(update.mapping, "directories");
19
+ const directoryValue = getDependabotMappingStringValue(update.mapping, "directory");
20
+ if (directoryValue === "/" && directoriesPair === null) {
21
+ continue;
22
+ }
23
+ context.report({
24
+ data: {
25
+ updateLabel: getDependabotUpdateLabel(update),
26
+ },
27
+ fix: (fixer) => {
28
+ const fixes = [];
29
+ if (directoryPair !== null) {
30
+ fixes.push(directoryPair.value === null
31
+ ? fixer.replaceTextRange(directoryPair.range, 'directory: "/"')
32
+ : fixer.replaceTextRange(directoryPair.value.range, '"/"'));
33
+ if (directoriesPair !== null) {
34
+ fixes.push(fixer.removeRange(getEnclosingLineRemovalRange(context.sourceCode.text, directoriesPair.range)));
35
+ }
36
+ }
37
+ else if (directoriesPair !== null) {
38
+ fixes.push(fixer.replaceTextRange(directoriesPair.range, 'directory: "/"'));
39
+ }
40
+ return fixes;
41
+ },
42
+ messageId: "githubActionsDirectoryMustBeRoot",
43
+ node: (directoriesPair ??
44
+ directoryPair ??
45
+ update.node),
46
+ });
47
+ }
48
+ },
49
+ };
50
+ },
51
+ meta: {
52
+ deprecated: false,
53
+ docs: {
54
+ configs: [
55
+ "github-actions.configs.all",
56
+ "github-actions.configs.dependabot",
57
+ ],
58
+ description: 'require Dependabot `github-actions` update entries to use `directory: "/"`.',
59
+ dialects: ["Dependabot configuration"],
60
+ frozen: false,
61
+ recommended: true,
62
+ requiresTypeChecking: false,
63
+ ruleId: "R084",
64
+ ruleNumber: 84,
65
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-github-actions-directory-root",
66
+ },
67
+ fixable: "code",
68
+ messages: {
69
+ githubActionsDirectoryMustBeRoot: '{{updateLabel}} uses `package-ecosystem: github-actions` and should use `directory: "/"` so Dependabot scans the standard workflow and root action metadata locations.',
70
+ },
71
+ schema: [],
72
+ type: "problem",
73
+ },
74
+ };
75
+ export default rule;
76
+ //# sourceMappingURL=require-dependabot-github-actions-directory-root.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-github-actions-directory-root.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-github-actions-directory-root.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,+BAA+B,EAC/B,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,yEAAyE;AACzE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,IAAI,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,gBAAgB,EAAE,CAAC;wBACvD,SAAS;oBACb,CAAC;oBAED,MAAM,aAAa,GAAG,cAAc,CAChC,MAAM,CAAC,OAAO,EACd,WAAW,CACd,CAAC;oBACF,MAAM,eAAe,GAAG,cAAc,CAClC,MAAM,CAAC,OAAO,EACd,aAAa,CAChB,CAAC;oBACF,MAAM,cAAc,GAAG,+BAA+B,CAClD,MAAM,CAAC,OAAO,EACd,WAAW,CACd,CAAC;oBAEF,IAAI,cAAc,KAAK,GAAG,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;wBACrD,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;4BACX,MAAM,KAAK,GAAG,EAAE,CAAC;4BAEjB,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gCACzB,KAAK,CAAC,IAAI,CACN,aAAa,CAAC,KAAK,KAAK,IAAI;oCACxB,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAClB,aAAa,CAAC,KAAK,EACnB,gBAAgB,CACnB;oCACH,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAClB,aAAa,CAAC,KAAK,CAAC,KAAK,EACzB,KAAK,CACR,CACV,CAAC;gCAEF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;oCAC3B,KAAK,CAAC,IAAI,CACN,KAAK,CAAC,WAAW,CACb,4BAA4B,CACxB,OAAO,CAAC,UAAU,CAAC,IAAI,EACvB,eAAe,CAAC,KAAK,CACxB,CACJ,CACJ,CAAC;gCACN,CAAC;4BACL,CAAC;iCAAM,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gCAClC,KAAK,CAAC,IAAI,CACN,KAAK,CAAC,gBAAgB,CAClB,eAAe,CAAC,KAAK,EACrB,gBAAgB,CACnB,CACJ,CAAC;4BACN,CAAC;4BAED,OAAO,KAAK,CAAC;wBACjB,CAAC;wBACD,SAAS,EAAE,kCAAkC;wBAC7C,IAAI,EAAE,CAAC,eAAe;4BAClB,aAAa;4BACb,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,6EAA6E;YACjF,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,yHAAyH;SACjI;QACD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE;YACN,gCAAgC,EAC5B,wKAAwK;SAC/K;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require Dependabot update entries to define effective labels.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for requiring effective labels. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-labels.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-labels.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-labels.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,0DAA0D;AAC1D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA2DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,52 @@
1
+ import { getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getEffectiveDependabotUpdateValue, getNonEmptyStringSequenceEntries, } from "../_internal/dependabot-yaml.js";
2
+ /** Rule implementation for requiring effective labels. */
3
+ const rule = {
4
+ create(context) {
5
+ return {
6
+ Program() {
7
+ const root = getDependabotRoot(context);
8
+ if (root === null) {
9
+ return;
10
+ }
11
+ for (const update of getDependabotUpdateEntries(root)) {
12
+ const labelsValue = getEffectiveDependabotUpdateValue(root, update, "labels");
13
+ if (getNonEmptyStringSequenceEntries(labelsValue).length > 0) {
14
+ continue;
15
+ }
16
+ context.report({
17
+ data: {
18
+ updateLabel: getDependabotUpdateLabel(update),
19
+ },
20
+ messageId: "missingLabels",
21
+ node: (labelsValue ??
22
+ update.node),
23
+ });
24
+ }
25
+ },
26
+ };
27
+ },
28
+ meta: {
29
+ deprecated: false,
30
+ docs: {
31
+ configs: [
32
+ "github-actions.configs.all",
33
+ "github-actions.configs.dependabot",
34
+ ],
35
+ description: "require Dependabot update entries to define effective `labels` directly or via a multi-ecosystem group.",
36
+ dialects: ["Dependabot configuration"],
37
+ frozen: false,
38
+ recommended: true,
39
+ requiresTypeChecking: false,
40
+ ruleId: "R080",
41
+ ruleNumber: 80,
42
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-labels",
43
+ },
44
+ messages: {
45
+ missingLabels: "{{updateLabel}} should define non-empty `labels` so Dependabot pull requests stay easy to triage and automate.",
46
+ },
47
+ schema: [],
48
+ type: "suggestion",
49
+ },
50
+ };
51
+ export default rule;
52
+ //# sourceMappingURL=require-dependabot-labels.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-labels.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-labels.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,iCAAiC,EACjC,gCAAgC,GACnC,MAAM,iCAAiC,CAAC;AAEzC,0DAA0D;AAC1D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,WAAW,GAAG,iCAAiC,CACjD,IAAI,EACJ,MAAM,EACN,QAAQ,CACX,CAAC;oBAEF,IACI,gCAAgC,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAC1D,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,eAAe;wBAC1B,IAAI,EAAE,CAAC,WAAW;4BACd,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,yGAAyG;YAC7G,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,kGAAkG;SAC1G;QACD,QAAQ,EAAE;YACN,aAAa,EACT,gHAAgH;SACvH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require Dependabot update entries to define open pull request limits.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for requiring open-pull-requests-limit. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-open-pull-requests-limit.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-open-pull-requests-limit.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-open-pull-requests-limit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAYnC,kEAAkE;AAClE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA4DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,55 @@
1
+ import { getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, } from "../_internal/dependabot-yaml.js";
2
+ import { getMappingPair, getScalarNumberValue, } from "../_internal/workflow-yaml.js";
3
+ /** Rule implementation for requiring open-pull-requests-limit. */
4
+ const rule = {
5
+ create(context) {
6
+ return {
7
+ Program() {
8
+ const root = getDependabotRoot(context);
9
+ if (root === null) {
10
+ return;
11
+ }
12
+ for (const update of getDependabotUpdateEntries(root)) {
13
+ const limitPair = getMappingPair(update.mapping, "open-pull-requests-limit");
14
+ const limitValue = getScalarNumberValue(limitPair?.value ?? null);
15
+ if (limitValue !== null) {
16
+ continue;
17
+ }
18
+ context.report({
19
+ data: {
20
+ updateLabel: getDependabotUpdateLabel(update),
21
+ },
22
+ messageId: "missingOpenPullRequestsLimit",
23
+ node: (limitPair?.value ??
24
+ limitPair ??
25
+ update.node),
26
+ });
27
+ }
28
+ },
29
+ };
30
+ },
31
+ meta: {
32
+ deprecated: false,
33
+ docs: {
34
+ configs: [
35
+ "github-actions.configs.all",
36
+ "github-actions.configs.dependabot",
37
+ ],
38
+ description: "require Dependabot update entries to define `open-pull-requests-limit`.",
39
+ dialects: ["Dependabot configuration"],
40
+ frozen: false,
41
+ recommended: true,
42
+ requiresTypeChecking: false,
43
+ ruleId: "R087",
44
+ ruleNumber: 87,
45
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-open-pull-requests-limit",
46
+ },
47
+ messages: {
48
+ missingOpenPullRequestsLimit: "{{updateLabel}} should define `open-pull-requests-limit` so Dependabot pull request volume is explicitly controlled.",
49
+ },
50
+ schema: [],
51
+ type: "suggestion",
52
+ },
53
+ };
54
+ export default rule;
55
+ //# sourceMappingURL=require-dependabot-open-pull-requests-limit.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-open-pull-requests-limit.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-open-pull-requests-limit.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,cAAc,EACd,oBAAoB,GACvB,MAAM,+BAA+B,CAAC;AAEvC,kEAAkE;AAClE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,SAAS,GAAG,cAAc,CAC5B,MAAM,CAAC,OAAO,EACd,0BAA0B,CAC7B,CAAC;oBACF,MAAM,UAAU,GAAG,oBAAoB,CACnC,SAAS,EAAE,KAAK,IAAI,IAAI,CAC3B,CAAC;oBAEF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;wBACtB,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,8BAA8B;wBACzC,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK;4BACnB,SAAS;4BACT,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,yEAAyE;YAC7E,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oHAAoH;SAC5H;QACD,QAAQ,EAAE;YACN,4BAA4B,EACxB,sHAAsH;SAC7H;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require every Dependabot update entry to define a non-empty `package-ecosystem`.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for requiring `package-ecosystem` in each update entry. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-package-ecosystem.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-package-ecosystem.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-package-ecosystem.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAanC,kFAAkF;AAClF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAmGhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,79 @@
1
+ import { getDependabotRoot, getDependabotUpdateLabel, } from "../_internal/dependabot-yaml.js";
2
+ import { getMappingPair, getMappingValueAsSequence, getScalarStringValue, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
3
+ /** Rule implementation for requiring `package-ecosystem` in each update entry. */
4
+ const rule = {
5
+ create(context) {
6
+ return {
7
+ Program() {
8
+ const root = getDependabotRoot(context);
9
+ if (root === null) {
10
+ return;
11
+ }
12
+ const updatesSequence = getMappingValueAsSequence(root, "updates");
13
+ if (updatesSequence === null) {
14
+ return;
15
+ }
16
+ for (const [index, entry,] of updatesSequence.entries.entries()) {
17
+ const updateMapping = unwrapYamlValue(entry);
18
+ if (entry === null || entry === undefined) {
19
+ continue;
20
+ }
21
+ if (updateMapping?.type !== "YAMLMapping") {
22
+ context.report({
23
+ messageId: "invalidDependabotUpdateEntry",
24
+ node: entry,
25
+ });
26
+ continue;
27
+ }
28
+ const ecosystemPair = getMappingPair(updateMapping, "package-ecosystem");
29
+ const ecosystemValue = getScalarStringValue(ecosystemPair?.value)?.trim();
30
+ if (ecosystemValue !== undefined &&
31
+ ecosystemValue !== null &&
32
+ ecosystemValue.length > 0) {
33
+ continue;
34
+ }
35
+ context.report({
36
+ data: {
37
+ updateLabel: getDependabotUpdateLabel({
38
+ index: index + 1,
39
+ mapping: updateMapping,
40
+ multiEcosystemGroup: null,
41
+ node: entry,
42
+ packageEcosystem: null,
43
+ }),
44
+ },
45
+ messageId: "missingPackageEcosystem",
46
+ node: (ecosystemPair?.value ??
47
+ ecosystemPair ??
48
+ entry),
49
+ });
50
+ }
51
+ },
52
+ };
53
+ },
54
+ meta: {
55
+ deprecated: false,
56
+ docs: {
57
+ configs: [
58
+ "github-actions.configs.all",
59
+ "github-actions.configs.dependabot",
60
+ ],
61
+ description: "require every Dependabot `updates` entry to define a non-empty `package-ecosystem`.",
62
+ dialects: ["Dependabot configuration"],
63
+ frozen: false,
64
+ recommended: true,
65
+ requiresTypeChecking: false,
66
+ ruleId: "R072",
67
+ ruleNumber: 72,
68
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-package-ecosystem",
69
+ },
70
+ messages: {
71
+ invalidDependabotUpdateEntry: "Each `updates` entry must be a mapping so Dependabot options such as `package-ecosystem` can be defined.",
72
+ missingPackageEcosystem: "{{updateLabel}} is missing a non-empty `package-ecosystem` value.",
73
+ },
74
+ schema: [],
75
+ type: "problem",
76
+ },
77
+ };
78
+ export default rule;
79
+ //# sourceMappingURL=require-dependabot-package-ecosystem.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-package-ecosystem.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-package-ecosystem.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,iBAAiB,EACjB,wBAAwB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,kFAAkF;AAClF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,eAAe,GAAG,yBAAyB,CAC7C,IAAI,EACJ,SAAS,CACZ,CAAC;gBAEF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;oBAC3B,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,CACP,KAAK,EACL,KAAK,EACR,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrC,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;oBAE7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxC,SAAS;oBACb,CAAC;oBAED,IAAI,aAAa,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBACxC,OAAO,CAAC,MAAM,CAAC;4BACX,SAAS,EAAE,8BAA8B;4BACzC,IAAI,EAAE,KAA6B;yBACtC,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,aAAa,GAAG,cAAc,CAChC,aAAa,EACb,mBAAmB,CACtB,CAAC;oBACF,MAAM,cAAc,GAAG,oBAAoB,CACvC,aAAa,EAAE,KAAK,CACvB,EAAE,IAAI,EAAE,CAAC;oBAEV,IACI,cAAc,KAAK,SAAS;wBAC5B,cAAc,KAAK,IAAI;wBACvB,cAAc,CAAC,MAAM,GAAG,CAAC,EAC3B,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC;gCAClC,KAAK,EAAE,KAAK,GAAG,CAAC;gCAChB,OAAO,EAAE,aAAa;gCACtB,mBAAmB,EAAE,IAAI;gCACzB,IAAI,EAAE,KAAK;gCACX,gBAAgB,EAAE,IAAI;6BACzB,CAAC;yBACL;wBACD,SAAS,EAAE,yBAAyB;wBACpC,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK;4BACvB,aAAa;4BACb,KAAK,CAAyB;qBACrC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,qFAAqF;YACzF,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,4BAA4B,EACxB,0GAA0G;YAC9G,uBAAuB,EACnB,mEAAmE;SAC1E;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require grouped Dependabot update entries to declare `patterns`.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for grouped-update pattern requirements. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-patterns-for-multi-ecosystem-group.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-patterns-for-multi-ecosystem-group.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-patterns-for-multi-ecosystem-group.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,mEAAmE;AACnE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAgEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,58 @@
1
+ import { getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getNonEmptyStringSequenceEntries, } from "../_internal/dependabot-yaml.js";
2
+ import { getMappingPair } from "../_internal/workflow-yaml.js";
3
+ /** Rule implementation for grouped-update pattern requirements. */
4
+ const rule = {
5
+ create(context) {
6
+ return {
7
+ Program() {
8
+ const root = getDependabotRoot(context);
9
+ if (root === null) {
10
+ return;
11
+ }
12
+ for (const update of getDependabotUpdateEntries(root)) {
13
+ if (update.multiEcosystemGroup === null) {
14
+ continue;
15
+ }
16
+ const patternsPair = getMappingPair(update.mapping, "patterns");
17
+ const patternEntries = getNonEmptyStringSequenceEntries(patternsPair?.value);
18
+ if (patternEntries.length > 0) {
19
+ continue;
20
+ }
21
+ context.report({
22
+ data: {
23
+ updateLabel: getDependabotUpdateLabel(update),
24
+ },
25
+ messageId: "missingPatternsForGroupedUpdate",
26
+ node: (patternsPair?.value ??
27
+ patternsPair ??
28
+ update.node),
29
+ });
30
+ }
31
+ },
32
+ };
33
+ },
34
+ meta: {
35
+ deprecated: false,
36
+ docs: {
37
+ configs: [
38
+ "github-actions.configs.all",
39
+ "github-actions.configs.dependabot",
40
+ ],
41
+ description: "require Dependabot update entries that use `multi-ecosystem-group` to define non-empty `patterns`.",
42
+ dialects: ["Dependabot configuration"],
43
+ frozen: false,
44
+ recommended: true,
45
+ requiresTypeChecking: false,
46
+ ruleId: "R082",
47
+ ruleNumber: 82,
48
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-patterns-for-multi-ecosystem-group",
49
+ },
50
+ messages: {
51
+ missingPatternsForGroupedUpdate: "{{updateLabel}} uses `multi-ecosystem-group` and should define non-empty `patterns` so Dependabot knows which dependencies to group.",
52
+ },
53
+ schema: [],
54
+ type: "problem",
55
+ },
56
+ };
57
+ export default rule;
58
+ //# sourceMappingURL=require-dependabot-patterns-for-multi-ecosystem-group.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-patterns-for-multi-ecosystem-group.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-patterns-for-multi-ecosystem-group.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,mEAAmE;AACnE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,IAAI,MAAM,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;wBACtC,SAAS;oBACb,CAAC;oBAED,MAAM,YAAY,GAAG,cAAc,CAC/B,MAAM,CAAC,OAAO,EACd,UAAU,CACb,CAAC;oBACF,MAAM,cAAc,GAAG,gCAAgC,CACnD,YAAY,EAAE,KAAK,CACtB,CAAC;oBAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5B,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,iCAAiC;wBAC5C,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK;4BACtB,YAAY;4BACZ,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,oGAAoG;YACxG,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,8HAA8H;SACtI;QACD,QAAQ,EAAE;YACN,+BAA+B,EAC3B,sIAAsI;SAC7I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require cron schedules to declare `cronjob` and non-cron schedules to omit it.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for `schedule.cronjob` correctness. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-schedule-cronjob.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-schedule-cronjob.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-schedule-cronjob.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAanC,8DAA8D;AAC9D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsGhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,82 @@
1
+ import { getDependabotRoot, getDependabotUpdateEntries, getDependabotUpdateLabel, getEffectiveDependabotUpdateMapping, } from "../_internal/dependabot-yaml.js";
2
+ import { getMappingPair, getScalarStringValue, } from "../_internal/workflow-yaml.js";
3
+ /** Rule implementation for `schedule.cronjob` correctness. */
4
+ const rule = {
5
+ create(context) {
6
+ return {
7
+ Program() {
8
+ const root = getDependabotRoot(context);
9
+ if (root === null) {
10
+ return;
11
+ }
12
+ for (const update of getDependabotUpdateEntries(root)) {
13
+ const scheduleMapping = getEffectiveDependabotUpdateMapping(root, update, "schedule");
14
+ if (scheduleMapping === null) {
15
+ continue;
16
+ }
17
+ const intervalValue = getScalarStringValue(getMappingPair(scheduleMapping, "interval")?.value)?.trim();
18
+ const cronjobPair = getMappingPair(scheduleMapping, "cronjob");
19
+ const cronjobValueNode = cronjobPair?.value ?? null;
20
+ const cronjobValue = getScalarStringValue(cronjobValueNode)?.trim();
21
+ if (intervalValue === "cron") {
22
+ if (cronjobValue !== undefined &&
23
+ cronjobValue !== null &&
24
+ cronjobValue.length > 0) {
25
+ continue;
26
+ }
27
+ context.report({
28
+ data: {
29
+ updateLabel: getDependabotUpdateLabel(update),
30
+ },
31
+ messageId: "missingCronjob",
32
+ node: (cronjobValueNode ??
33
+ cronjobPair ??
34
+ update.node),
35
+ });
36
+ continue;
37
+ }
38
+ if (cronjobValue === undefined ||
39
+ cronjobValue === null ||
40
+ cronjobValue.length === 0) {
41
+ continue;
42
+ }
43
+ context.report({
44
+ data: {
45
+ intervalValue: intervalValue ?? "(missing)",
46
+ updateLabel: getDependabotUpdateLabel(update),
47
+ },
48
+ messageId: "unexpectedCronjob",
49
+ node: (cronjobValueNode ??
50
+ cronjobPair ??
51
+ update.node),
52
+ });
53
+ }
54
+ },
55
+ };
56
+ },
57
+ meta: {
58
+ deprecated: false,
59
+ docs: {
60
+ configs: [
61
+ "github-actions.configs.all",
62
+ "github-actions.configs.dependabot",
63
+ ],
64
+ description: "require Dependabot `schedule.cronjob` for `interval: cron` and disallow it for non-cron intervals.",
65
+ dialects: ["Dependabot configuration"],
66
+ frozen: false,
67
+ recommended: true,
68
+ requiresTypeChecking: false,
69
+ ruleId: "R083",
70
+ ruleNumber: 83,
71
+ url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependabot-schedule-cronjob",
72
+ },
73
+ messages: {
74
+ missingCronjob: "{{updateLabel}} uses `schedule.interval: cron` and must define a non-empty `schedule.cronjob`.",
75
+ unexpectedCronjob: "{{updateLabel}} defines `schedule.cronjob`, but `schedule.interval` is '{{intervalValue}}'. Use `cronjob` only with `interval: cron`.",
76
+ },
77
+ schema: [],
78
+ type: "problem",
79
+ },
80
+ };
81
+ export default rule;
82
+ //# sourceMappingURL=require-dependabot-schedule-cronjob.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-schedule-cronjob.js","sourceRoot":"","sources":["../../src/rules/require-dependabot-schedule-cronjob.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,cAAc,EACd,oBAAoB,GACvB,MAAM,+BAA+B,CAAC;AAEvC,8DAA8D;AAC9D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAExC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,eAAe,GAAG,mCAAmC,CACvD,IAAI,EACJ,MAAM,EACN,UAAU,CACb,CAAC;oBAEF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;wBAC3B,SAAS;oBACb,CAAC;oBAED,MAAM,aAAa,GAAG,oBAAoB,CACtC,cAAc,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,KAAK,CACrD,EAAE,IAAI,EAAE,CAAC;oBACV,MAAM,WAAW,GAAG,cAAc,CAC9B,eAAe,EACf,SAAS,CACZ,CAAC;oBACF,MAAM,gBAAgB,GAAG,WAAW,EAAE,KAAK,IAAI,IAAI,CAAC;oBACpD,MAAM,YAAY,GACd,oBAAoB,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;oBAEnD,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;wBAC3B,IACI,YAAY,KAAK,SAAS;4BAC1B,YAAY,KAAK,IAAI;4BACrB,YAAY,CAAC,MAAM,GAAG,CAAC,EACzB,CAAC;4BACC,SAAS;wBACb,CAAC;wBAED,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;6BAChD;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,CAAC,gBAAgB;gCACnB,WAAW;gCACX,MAAM,CAAC,IAAI,CAAyB;yBAC3C,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IACI,YAAY,KAAK,SAAS;wBAC1B,YAAY,KAAK,IAAI;wBACrB,YAAY,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,aAAa,EAAE,aAAa,IAAI,WAAW;4BAC3C,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC;yBAChD;wBACD,SAAS,EAAE,mBAAmB;wBAC9B,IAAI,EAAE,CAAC,gBAAgB;4BACnB,WAAW;4BACX,MAAM,CAAC,IAAI,CAAyB;qBAC3C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,mCAAmC;aACtC;YACD,WAAW,EACP,oGAAoG;YACxG,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,4GAA4G;SACpH;QACD,QAAQ,EAAE;YACN,cAAc,EACV,gGAAgG;YACpG,iBAAiB,EACb,uIAAuI;SAC9I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Require every Dependabot update entry to define an effective `schedule.interval`.
4
+ */
5
+ import type { Rule } from "eslint";
6
+ /** Rule implementation for requiring effective `schedule.interval`. */
7
+ declare const rule: Rule.RuleModule;
8
+ export default rule;
9
+ //# sourceMappingURL=require-dependabot-schedule-interval.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"require-dependabot-schedule-interval.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependabot-schedule-interval.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAwBnC,uEAAuE;AACvE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA0EhB,CAAC;AAEF,eAAe,IAAI,CAAC"}