homebridge-securitysystem 0.0.1-matter

package/.gitattributes

@@ -0,0 +1 @@
+.github/workflows/*.lock.yml linguist-generated=true merge=ours

package/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,46 @@
+name: Bug Report
+description: File a bug report
+labels: [bug]
+assignees:
+  - MiguelRipoll23
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this bug report!
+  - type: input
+    id: plugin-version
+    attributes:
+      label: Plugin version
+      description: Installed version of the plugin
+      placeholder: 1.0.0
+    validations:
+      required: true
+  - type: textarea
+    id: plugin-configuration
+    attributes:
+      label: Plugin configuration
+      description: Configuration of the plugin
+    validations:
+      required: true
+  - type: input
+    id: homebridge-version
+    attributes:
+      label: Homebridge version
+      description: Installed version of Homebridge
+      placeholder: 1.0.0
+    validations:
+      required: true
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: A description of the bug found plus the steps to reproduce the issue
+    validations:
+      required: true
+  - type: textarea
+    id: log
+    attributes:
+      label: Relevant log output
+      description: Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks.
+      render: bash

package/.github/ISSUE_TEMPLATE/feature-request.yml

@@ -0,0 +1,17 @@
+name: Feature Request
+description: Suggest a new feature
+labels: [enhancement]
+assignees:
+  - MiguelRipoll23
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to suggest new features!
+  - type: textarea
+    id: feature-description
+    attributes:
+      label: What are you missing?
+      description: A description of the feature suggested to be added
+    validations:
+      required: true

package/.github/ISSUE_TEMPLATE/questions-answers.yml

@@ -0,0 +1,40 @@
+name: Questions & Answers
+description: Get an answer
+labels: [question]
+assignees:
+  - MiguelRipoll23
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to learn about this plugin!
+  - type: input
+    id: plugin-version
+    attributes:
+      label: Plugin version
+      description: Installed version of the plugin
+      placeholder: 1.0.0
+    validations:
+      required: true
+  - type: textarea
+    id: plugin-configuration
+    attributes:
+      label: Plugin configuration
+      description: Configuration of the plugin
+    validations:
+      required: true
+  - type: input
+    id: homebridge-version
+    attributes:
+      label: Homebridge version
+      description: Installed version of Homebridge
+      placeholder: 1.0.0
+    validations:
+      required: true
+  - type: textarea
+    id: what-question
+    attributes:
+      label: What's your question?
+      description: A description of the question using your use case and expected behavior
+    validations:
+      required: true

package/.github/dependabot.yml

@@ -0,0 +1,19 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "18:00"
+      timezone: Europe/Madrid
+    open-pull-requests-limit: 10

package/.github/release.yml

@@ -0,0 +1,36 @@
+changelog:
+  exclude:
+    labels:
+      - ignore-for-release
+
+  categories:
+    - title: ☢️ Security
+      labels:
+        - security
+        - vulnerability
+
+    - title: 💥 Breaking Changes
+      labels:
+        - breaking
+        - breaking-change
+
+    - title: 🎉 New Features
+      labels:
+        - feature
+
+    - title: ✨ Enhancements
+      labels:
+        - enhancement
+
+    - title: 🐛 Bug Fixes
+      labels:
+        - bug
+        - bugfix
+
+    - title: 📦 Dependencies
+      labels:
+        - dependencies
+
+    - title: 🛠️ Other Changes
+      labels:
+        - "*"

package/.github/workflows/build-package.yml

@@ -0,0 +1,49 @@
+name: Build package
+
+on:
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - "**.md"
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review, labeled, unlabeled]
+    paths-ignore:
+      - "**.md"
+
+jobs:
+  build-package:
+    name: Build package
+    if: ${{ !contains(github.event.pull_request.labels.*.name, 'ignore-for-release') }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      attestations: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v6.0.10
+        with:
+          version: latest
+
+      - name: Setup node
+        uses: actions/setup-node@v7
+        with:
+          cache: "pnpm"
+          registry-url: https://registry.npmjs.org/
+
+      - name: Build package
+        run: |
+          pnpm install --frozen-lockfile
+          pnpm run build
+          pnpm pack
+
+      - name: Attest build provenance
+        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+        uses: actions/attest-build-provenance@v4
+        with:
+          subject-path: "*.tgz"

package/.github/workflows/bump-version.yml

@@ -0,0 +1,59 @@
+name: Bump version
+
+on:
+  workflow_dispatch:
+    inputs:
+      channel:
+        type: choice
+        default: beta
+        description: Pick channel
+        options:
+          - alpha
+          - beta
+          - stable
+
+      new-build-for-prerelease:
+        type: boolean
+        default: true
+        description: New build for prerelease
+
+jobs:
+  bump-version:
+    name: Bump version
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout branch
+        uses: actions/checkout@v7
+
+      - name: Setup node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 24
+
+      - name: Get next version
+        uses: MiguelRipoll23/get-next-version@v3.2.1
+        id: get-next-version
+        with:
+          channel: ${{ inputs.channel }}
+          new-build-for-prerelease: ${{ inputs.new-build-for-prerelease }}
+
+      - name: Update version
+        run: |
+          npm version --no-git-tag-version ${{ env.NEXT_VERSION }}
+        env:
+          NEXT_VERSION: ${{ steps.get-next-version.outputs.next-version }}
+
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@v8
+        with:
+          branch: version/${{ steps.get-next-version.outputs.next-version }}
+          commit-message: ${{ steps.get-next-version.outputs.next-version }}
+          title: Bump version to ${{ steps.get-next-version.outputs.next-version }}
+          body: Automated pull request triggered by a new release.
+          labels: new-release,ignore-for-release
+          reviewers: MiguelRipoll23
+          draft: true

package/.github/workflows/dependency-review.yml

@@ -0,0 +1,26 @@
+# Dependency Review Action
+#
+# This Action will scan dependency manifest files that change as part of a Pull Request, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging.
+#
+# Source repository: https://github.com/actions/dependency-review-action
+# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
+name: Review dependencies
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
+    paths-ignore:
+      - "**.md"
+
+permissions:
+  contents: read
+
+jobs:
+  review-dependencies:
+    name: Review Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v7
+
+      - name: Review Dependencies
+        uses: actions/dependency-review-action@v5

package/.github/workflows/publish.yml

@@ -0,0 +1,155 @@
+name: Publish package
+
+on:
+  pull_request:
+    types:
+      - closed
+    branches:
+      - main
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  create-tag:
+    name: Create tag
+    runs-on: ubuntu-latest
+
+    if: github.event.pull_request.merged == true && contains(github.event.pull_request.labels.*.name, 'new-release')
+
+    outputs:
+      tag-name: ${{ steps.get-tag-name.outputs.tag-name }}
+
+    steps:
+      - name: Checkout branch
+        uses: actions/checkout@v7
+
+      - name: Get tag name
+        id: get-tag-name
+        run: |
+          branch_name="${{ github.event.pull_request.head.ref }}"
+          tag_name=$(echo $branch_name | sed 's/version\///')
+          echo "tag-name=$tag_name" >> $GITHUB_OUTPUT
+
+      - name: Create tag
+        run: |
+          git tag "${{ env.TAG_NAME }}"
+        env:
+          TAG_NAME: ${{ steps.get-tag-name.outputs.tag-name }}
+
+      - name: Push tag to origin
+        run: git push origin "${{ env.TAG_NAME }}"
+        env:
+          TAG_NAME: ${{ steps.get-tag-name.outputs.tag-name }}
+
+  create-release:
+    name: Create release
+    needs: [create-tag]
+    runs-on: ubuntu-latest
+    if: needs.create-tag.outputs.tag-name != ''
+    permissions:
+      contents: write
+    steps:
+      - name: Create release
+        uses: ncipollo/release-action@v1
+        with:
+          tag: "${{ needs.create-tag.outputs.tag-name }}"
+          prerelease: ${{ contains(needs.create-tag.outputs.tag-name, '-') }}
+          generateReleaseNotes: true
+          allowUpdates: true
+
+  update-changelog:
+    name: Update changelog
+    needs: [create-tag, create-release]
+    runs-on: ubuntu-latest
+    if: needs.create-tag.outputs.tag-name != ''
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout branch
+        uses: actions/checkout@v7
+        with:
+          ref: main
+
+      - name: Build changelog entry from auto release notes
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          TAG_NAME: ${{ needs.create-tag.outputs.tag-name }}
+        run: |
+          release_notes_text="$(
+            gh api \
+              repos/${{ github.repository }}/releases/tags/${TAG_NAME} \
+              --jq '.body'
+          )"
+
+          if [ -z "${release_notes_text}" ]; then
+            echo "Release notes were not generated. Skipping changelog update."
+            exit 0
+          fi
+
+          current_date="$(date -u +%F)"
+          release_header="## ${TAG_NAME} - ${current_date}"
+
+          if [ -f CHANGELOG.md ] && grep -Fqx "${release_header}" CHANGELOG.md; then
+            echo "Changelog already contains ${release_header}. Skipping changelog update."
+            exit 0
+          fi
+
+          temporary_file_path="$(mktemp)"
+          {
+            echo "# Changelog"
+            echo
+            echo "${release_header}"
+            echo
+            echo "${release_notes_text}"
+            echo
+            if [ -f CHANGELOG.md ]; then
+              awk 'NR == 1 && $0 == "# Changelog" { next } { print }' CHANGELOG.md
+            fi
+          } > "${temporary_file_path}"
+
+          mv "${temporary_file_path}" CHANGELOG.md
+
+      - name: Commit changelog
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add CHANGELOG.md
+          if git diff --quiet --cached CHANGELOG.md; then
+            echo "No changelog updates to commit."
+            exit 0
+          fi
+          git commit -m "docs: update changelog for ${{ needs.create-tag.outputs.tag-name }}"
+          git push origin HEAD:main
+
+  publish-package:
+    name: Publish package
+    runs-on: ubuntu-latest
+    needs: [create-tag, create-release, update-changelog]
+
+    steps:
+      - name: Checkout branch
+        uses: actions/checkout@v7
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v6.0.10
+        with:
+          version: latest
+
+      - name: Setup node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org/
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Get version
+        run: |
+          echo "NPM_VERSION=${{ needs.create-tag.outputs.tag-name }}" >> $GITHUB_ENV
+
+      - name: Publish package
+        run: |
+          pnpm publish --access public --no-git-checks --provenance --tag "$(if [[ $NPM_VERSION == *-* ]]; then echo beta; else echo latest; fi)"

package/.github/workflows/stale-activity.yml

@@ -0,0 +1,27 @@
+# This workflow warns and then closes issues and PRs that have had no activity for a specified amount of time.
+#
+# You can adjust the behavior by modifying this file.
+# For more information, see:
+# https://github.com/actions/stale
+name: Close stale activity
+
+on:
+  schedule:
+    - cron: "19 9 * * *"
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+
+    steps:
+      - uses: actions/stale@v11
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          stale-issue-message: "This issue has been automatically marked as stale because it has not had recent activity. It will be closed in a few days if no further activity occurs. Thank you for your contributions."
+          stale-pr-message: "This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in a few days if no further activity occurs. Thank you for your contributions."
+          stale-issue-label: "stale"
+          stale-pr-label: "stale"
+          exempt-issue-labels: "feature,enhancement,unsupported,pinned"