pr-checkmate 1.21.2 → 1.21.4

package/dist/scripts/markdown-lint.js

@@ -10,6 +10,7 @@ const delta_1 = require("../utils/delta");
 const config_1 = require("../config");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
 function loadUserMarkdownConfig() {
     const configPath = node_path_1.default.join(process.cwd(), 'pr-checkmate.json');
     if (!node_fs_1.default.existsSync(configPath)) {
@@ -24,39 +25,64 @@ function loadUserMarkdownConfig() {
         return {};
     }
 }
+function buildMergedConfig(bundledConfigPath, userRules) {
+    const bundled = JSON.parse(node_fs_1.default.readFileSync(bundledConfigPath, 'utf-8'));
+    const merged = { ...bundled, ...userRules };
+    const tmpFile = node_path_1.default.join(node_os_1.default.tmpdir(), `.markdownlint-merged-${process.pid}.json`);
+    node_fs_1.default.writeFileSync(tmpFile, JSON.stringify(merged, null, 2));
+    return tmpFile;
+}
 async function runMarkdownLint() {
     utils_1.logger.info('[runMarkdownLint]: 📝 Running Markdown lint...');
     const root = process.cwd();
     const changedFiles = await (0, delta_1.getChangedFiles)(['.md', '.mdx']);
     const targets = changedFiles ?? [`${root}/**/*.md`];
     const userConfig = loadUserMarkdownConfig();
-    // Prefer local .markdownlint.json → else fall back to bundled one
+    const userRules = userConfig.rules ?? {};
+    const hasUserRules = Object.keys(userRules).length > 0;
     let configArg;
+    let tempConfigFile = null;
     if ((0, config_1.hasLocalConfig)(['.markdownlint.json', '.markdownlint.jsonc', '.markdownlint.yaml', '.markdownlint.yml'])) {
         utils_1.logger.info('[runMarkdownLint]: 📋 Using local .markdownlint config');
         configArg = [];
     }
     else {
         const bundledConfig = (0, config_1.getPackageConfigPath)('.markdownlint.json');
-        utils_1.logger.info('[runMarkdownLint]: 📋 Using pr-checkmate bundled markdownlint config');
-        configArg = ['--config', bundledConfig];
+        if (hasUserRules) {
+            tempConfigFile = buildMergedConfig(bundledConfig, userRules);
+            utils_1.logger.info(`[runMarkdownLint]: 📋 Using bundled config merged with ${Object.keys(userRules).length} user rule(s)`);
+            configArg = ['--config', tempConfigFile];
+        }
+        else {
+            utils_1.logger.info('[runMarkdownLint]: 📋 Using pr-checkmate bundled markdownlint config');
+            configArg = ['--config', bundledConfig];
+        }
     }
     const extraIgnores = (userConfig.ignores ?? []).flatMap(p => ['--ignore', p]);
+    const gitignorePath = node_path_1.default.join(root, '.gitignore');
+    const ignorePath = node_fs_1.default.existsSync(gitignorePath) ? ['--ignore-path', gitignorePath] : [];
     const args = [
         'markdownlint',
         ...targets,
         ...configArg,
+        ...ignorePath,
         '--ignore', 'node_modules',
         '--ignore', 'dist',
         '--ignore', 'coverage',
         ...extraIgnores,
     ];
-    const result = await (0, execa_1.execa)('npx', args, { reject: false, stdio: 'inherit' });
-    if (result.exitCode === 0) {
-        utils_1.logger.info('[runMarkdownLint]: ✅ Markdown lint passed');
+    try {
+        const result = await (0, execa_1.execa)('npx', args, { reject: false, stdio: 'inherit' });
+        if (result.exitCode === 0) {
+            utils_1.logger.info('[runMarkdownLint]: ✅ Markdown lint passed');
+        }
+        else {
+            utils_1.logger.warn('[runMarkdownLint]: ⚠️ Markdown lint found issues (see above)');
+        }
     }
-    else {
-        utils_1.logger.warn('[runMarkdownLint]: ⚠️ Markdown lint found issues (see above)');
-        // warning only — never block
+    finally {
+        if (tempConfigFile && node_fs_1.default.existsSync(tempConfigFile)) {
+            node_fs_1.default.unlinkSync(tempConfigFile);
+        }
     }
 }

package/dist/scripts/npm-audit.js

@@ -15,9 +15,20 @@ function isSeverityAtLeast(severity, level) {
     const lvlIdx = SEVERITY_ORDER.indexOf(level);
     return sevIdx >= 0 && lvlIdx >= 0 && sevIdx >= lvlIdx;
 }
+function getOwnPackageName() {
+    try {
+        const ownPkg = node_path_1.default.resolve(__dirname, '../../package.json');
+        const content = node_fs_1.default.readFileSync(ownPkg, 'utf-8');
+        return JSON.parse(content).name ?? null;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Run npm audit on the current project.
  * Only fails on vulnerabilities in direct dependencies — transitive ones are silently ignored.
+ * Vulnerabilities in pr-checkmate itself are also skipped — the client cannot fix those.
  */
 async function runNpmAudit() {
     utils_1.logger.info('Running npm audit...');
@@ -29,6 +40,7 @@ async function runNpmAudit() {
     }
     const config = (0, config_1.loadProjectConfig)();
     const auditLevel = config.security?.['npm-audit']?.auditLevel ?? 'moderate';
+    const ownName = getOwnPackageName();
     let report;
     try {
         const { stdout } = await (0, execa_1.execa)('npm', ['audit', '--json'], {
@@ -41,7 +53,7 @@ async function runNpmAudit() {
         utils_1.logger.error('[runNpmAudit]: ❌ Failed to parse npm audit output');
         throw error;
     }
-    const directVulns = Object.values(report.vulnerabilities ?? {}).filter(v => v.isDirect && isSeverityAtLeast(v.severity, auditLevel));
+    const directVulns = Object.values(report.vulnerabilities ?? {}).filter(v => v.isDirect && v.name !== ownName && isSeverityAtLeast(v.severity, auditLevel));
     if (directVulns.length === 0) {
         utils_1.logger.info('[runNpmAudit]: ✅ NPM audit finished successfully');
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.21.2",
+    "version": "1.21.4",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -74,9 +74,9 @@
         "eslint-plugin-prettier": "^5.5.4",
         "execa": "^9.6.0",
         "gitleaks-secret-scanner-fixed": "^2.1.3",
-        "jscpd": "^3.5.10",
-        "markdownlint-cli": "^0.45.0",
         "inquirer": "^13.0.1",
+        "jscpd": "^3.5.10",
+        "markdownlint-cli": "^0.49.0",
         "prettier": ">=3.0.0",
         "ts-node": "^10.9.1",
         "typescript": "^5.9.3"