pr-checkmate 3.0.3 → 3.1.0

package/install-manifests/cpp/package-lock.json

@@ -8,13 +8,13 @@
       "name": "pr-checkmate-profile-cpp",
       "version": "1.0.0",
       "dependencies": {
-        "@wasm-fmt/clang-format": "22.1.8"
+        "@wasm-fmt/clang-format": "23.1.1"
       }
     },
     "node_modules/@wasm-fmt/clang-format": {
-      "version": "22.1.8",
-      "resolved": "https://registry.npmjs.org/@wasm-fmt/clang-format/-/clang-format-22.1.8.tgz",
-      "integrity": "sha512-MuDkCzEUmBCuC3MQcZGrJ8lI4MnDpwCuN63EMRpr/c0urCEq1S4E8qVddMjRf+Lrcl2gEZH+kKTWpXC2c7x+Zg==",
+      "version": "23.1.1",
+      "resolved": "https://registry.npmjs.org/@wasm-fmt/clang-format/-/clang-format-23.1.1.tgz",
+      "integrity": "sha512-SPA6H8DI/MOJAr0CfpbFBoqI5sfrimu3SlovuAAy36mq9vs9TOkS48lpUsNaPLeZzeQVEGe+pfbJHXKxiroP/g==",
       "license": "MIT",
       "bin": {
         "clang-format": "clang-format-cli.cjs",

package/install-manifests/cpp/package.json

@@ -2,7 +2,7 @@
   "name": "pr-checkmate-profile-cpp",
   "version": "1.0.0",
   "dependencies": {
-    "@wasm-fmt/clang-format": "22.1.8"
+    "@wasm-fmt/clang-format": "23.1.1"
   },
   "private": true
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "3.0.3",
+    "version": "3.1.0",
     "description": "Security-first PR gate for CI: secret scanning, grype dependency scanning, SBOM — plus linting and formatting across 11 languages",
     "keywords": [
         "github-actions",
@@ -11,16 +11,17 @@
         "code-quality",
         "automation"
     ],
-    "main": "./dist/index.js",
-    "types": "./dist/index.d.ts",
-    "type": "commonjs",
+    "main": "./dist/cjs/index.js",
+    "module": "./dist/esm/index.js",
+    "types": "./dist/cjs/index.d.ts",
     "bin": {
-        "pr-checkmate": "dist/cli.js"
+        "pr-checkmate": "dist/cjs/cli.js"
     },
     "exports": {
         ".": {
-            "types": "./dist/index.d.ts",
-            "default": "./dist/index.js"
+            "types": "./dist/cjs/index.d.ts",
+            "import": "./dist/esm/index.js",
+            "require": "./dist/cjs/index.js"
         },
         "./package.json": "./package.json"
     },
@@ -43,9 +44,10 @@
     ],
     "scripts": {
         "prepare": "node -e \"try{if(require('fs').existsSync('.git'))require('child_process').execSync('git config core.hooksPath .githooks')}catch(e){}\"",
-        "copy-configs": "ts-node src/scripts/copy-configs.ts",
-        "build": "npm run clean && npm run copy-configs && npm run manifests && tsc -p tsconfig.build.json && npm run fix-shebang",
-        "fix-shebang": "node -e \"const fs=require('fs'); const path='dist/cli.js'; let content=fs.readFileSync(path,'utf8'); if(!content.startsWith('#!')){content='#!/usr/bin/env node\\n'+content; fs.writeFileSync(path,content);} fs.chmodSync(path,'755');\"",
+        "copy-configs": "node -r ./scripts/ts-node-nodenext-resolve.cjs ./node_modules/.bin/ts-node src/scripts/copy-configs.ts",
+        "build": "npm run clean && npm run copy-configs && npm run manifests && tsc -p tsconfig.build.cjs.json && tsc -p tsconfig.build.esm.json && npm run write-dist-package-json && node scripts/patch-esm-runtime.js && npm run fix-shebang",
+        "write-dist-package-json": "node -e \"const fs=require('fs'); fs.writeFileSync('dist/cjs/package.json', JSON.stringify({type:'commonjs'})+'\\n'); fs.writeFileSync('dist/esm/package.json', JSON.stringify({type:'module'})+'\\n');\"",
+        "fix-shebang": "node -e \"const fs=require('fs'); const path='dist/cjs/cli.js'; let content=fs.readFileSync(path,'utf8'); if(!content.startsWith('#!')){content='#!/usr/bin/env node\\n'+content; fs.writeFileSync(path,content);} fs.chmodSync(path,'755');\"",
         "check": "npm run build && npm run lint && npm run prettier && npm run spellcheck",
         "prepublishOnly": "npm run build",
         "lint": "eslint \"src/**/*.{ts,tsx}\" \"tests/**/*.{ts,tsx}\" --fix",
@@ -53,13 +55,13 @@
         "spellcheck": "cspell '**/*.{ts,tsx,js,jsx,md,json}' --no-progress",
         "docs": "typedoc",
         "scan:secrets": "gitleaks-secret-scanner --diff-mode ci --html-report gitleaks-report.html",
-        "test": "node --require ts-node/register --test --test-timeout=60000 \"tests/**/*.test.ts\"",
+        "test": "node --require ./scripts/ts-node-nodenext-resolve.cjs --require ts-node/register --test --test-timeout=60000 \"tests/**/*.test.ts\"",
         "test:ci": "bash scripts/test-per-file.sh",
         "verify:tarball": "bash scripts/verify-tarball.sh",
         "security-scan": "npx pr-checkmate security",
         "clean": "rm -rf dist",
         "release": "standard-version",
-        "manifests": "ts-node src/scripts/generate-install-manifests.ts"
+        "manifests": "node -r ./scripts/ts-node-nodenext-resolve.cjs ./node_modules/.bin/ts-node src/scripts/generate-install-manifests.ts"
     },
     "engines": {
         "node": ">=20.0.0",
@@ -82,7 +84,7 @@
         "@types/node": "^26.2.0",
         "@typescript-eslint/eslint-plugin": "^8.67.0",
         "@typescript-eslint/parser": "^8.67.0",
-        "@wasm-fmt/clang-format": "^22.1.8",
+        "@wasm-fmt/clang-format": "^23.1.1",
         "@wasm-fmt/gofmt": "^0.7.3",
         "cspell": "^10.0.1",
         "dpdm": "^4.3.0",
@@ -93,7 +95,7 @@
         "eslint-plugin-prettier": "^5.5.6",
         "eslint-plugin-sonarjs": "^4.2.0",
         "execa": "^9.6.0",
-        "gitleaks-secret-scanner-fixed": "3.0.3",
+        "gitleaks-secret-scanner-fixed": "3.0.4",
         "inquirer": "^14.1.0",
         "jscpd": "^5.0.16",
         "knip": "^6.32.2",

package/dist/core/checks/languages/lint.d.ts

@@ -1,2 +0,0 @@
-import { Check } from '../../types';
-export declare const lintCheck: Check;

package/dist/core/index.d.ts

@@ -1,4 +0,0 @@
-export { runChecks } from './run-checks';
-export { buildContext } from './context';
-export { REGISTRY } from './registry';
-export * from './types';

package/dist/core/registry.js

@@ -1,112 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.REGISTRY = void 0;
-const banned_imports_1 = require("./checks/dependencies/banned-imports");
-const circular_deps_1 = require("./checks/dependencies/circular-deps");
-const dependency_check_1 = require("./checks/dependencies/dependency-check");
-const grype_scan_1 = require("./checks/dependencies/grype-scan");
-const license_check_1 = require("./checks/dependencies/license-check");
-const npm_audit_1 = require("./checks/dependencies/npm-audit");
-const outdated_deps_1 = require("./checks/dependencies/outdated-deps");
-const vuln_scan_1 = require("./checks/dependencies/vuln-scan");
-const custom_rules_1 = require("./checks/git/custom-rules");
-const diff_smell_1 = require("./checks/git/diff-smell");
-const large_files_1 = require("./checks/git/large-files");
-const leftover_debug_1 = require("./checks/git/leftover-debug");
-const lockfile_drift_1 = require("./checks/git/lockfile-drift");
-const merge_conflict_1 = require("./checks/git/merge-conflict");
-const missing_tests_1 = require("./checks/git/missing-tests");
-const todo_fixme_1 = require("./checks/git/todo-fixme");
-const cpp_format_1 = require("./checks/languages/cpp-format");
-const external_checks_1 = require("./checks/languages/external-checks");
-const go_format_1 = require("./checks/languages/go-format");
-const lint_1 = require("./checks/languages/lint");
-const prettier_1 = require("./checks/languages/prettier");
-const python_format_1 = require("./checks/languages/python-format");
-const python_lint_1 = require("./checks/languages/python-lint");
-const python_typecheck_1 = require("./checks/languages/python-typecheck");
-const typecheck_1 = require("./checks/languages/typecheck");
-const commitlint_1 = require("./checks/pr/commitlint");
-const pr_body_1 = require("./checks/pr/pr-body");
-const pr_size_check_1 = require("./checks/pr/pr-size-check");
-const pr_title_lint_1 = require("./checks/pr/pr-title-lint");
-const case_collision_1 = require("./checks/quality/case-collision");
-const config_validation_1 = require("./checks/quality/config-validation");
-const coverage_1 = require("./checks/quality/coverage");
-const dead_code_1 = require("./checks/quality/dead-code");
-const duplicate_check_1 = require("./checks/quality/duplicate-check");
-const license_header_1 = require("./checks/quality/license-header");
-const markdown_lint_1 = require("./checks/quality/markdown-lint");
-const package_size_1 = require("./checks/quality/package-size");
-const spellcheck_1 = require("./checks/quality/spellcheck");
-const symlinks_1 = require("./checks/quality/symlinks");
-const yaml_lint_1 = require("./checks/quality/yaml-lint");
-const diff_security_1 = require("./checks/security/diff-security");
-const dockerfile_security_1 = require("./checks/security/dockerfile-security");
-const migration_safety_1 = require("./checks/security/migration-safety");
-const security_1 = require("./checks/security/security");
-const sensitive_file_guard_1 = require("./checks/security/sensitive-file-guard");
-const workflow_security_1 = require("./checks/security/workflow-security");
-/**
- * Every check, in declaration order. The orchestrator groups them by `phase`
- * (blocking → informational → format) and runs each phase's checks in parallel.
- */
-exports.REGISTRY = [
-    // blocking
-    merge_conflict_1.mergeConflictCheck,
-    security_1.securityCheck,
-    typecheck_1.typecheckCheck,
-    lint_1.lintCheck,
-    dependency_check_1.dependencyCheck,
-    npm_audit_1.npmAuditCheck,
-    circular_deps_1.circularDepsCheck,
-    license_check_1.licenseCheck,
-    // informational
-    diff_smell_1.diffSmellCheck,
-    diff_security_1.diffSecurityCheck,
-    workflow_security_1.workflowSecurityCheck,
-    dockerfile_security_1.dockerfileSecurityCheck,
-    case_collision_1.caseCollisionCheck,
-    vuln_scan_1.vulnScanCheck,
-    grype_scan_1.grypeScanCheck,
-    custom_rules_1.customRulesCheck,
-    banned_imports_1.bannedImportsCheck,
-    license_header_1.licenseHeaderCheck,
-    config_validation_1.configValidationCheck,
-    leftover_debug_1.leftoverDebugCheck,
-    lockfile_drift_1.lockfileDriftCheck,
-    large_files_1.largeFilesCheck,
-    todo_fixme_1.todoFixmeCheck,
-    missing_tests_1.missingTestsCheck,
-    coverage_1.coverageCheck,
-    migration_safety_1.migrationSafetyCheck,
-    sensitive_file_guard_1.sensitiveFileGuardCheck,
-    pr_body_1.prBodyCheck,
-    duplicate_check_1.duplicateCheck,
-    commitlint_1.commitlintCheck,
-    pr_size_check_1.prSizeCheck,
-    pr_title_lint_1.prTitleLintCheck,
-    outdated_deps_1.outdatedDepsCheck,
-    markdown_lint_1.markdownLintCheck,
-    spellcheck_1.spellcheckCheck,
-    yaml_lint_1.yamlLintCheck,
-    symlinks_1.symlinksCheck,
-    package_size_1.packageSizeCheck,
-    python_lint_1.pythonLintCheck,
-    python_typecheck_1.pythonTypecheckCheck,
-    dead_code_1.deadCodeCheck,
-    external_checks_1.swiftLintCheck,
-    external_checks_1.kotlinLintCheck,
-    external_checks_1.goLintCheck,
-    external_checks_1.rustLintCheck,
-    external_checks_1.rubyLintCheck,
-    external_checks_1.shellcheckCheck,
-    // format
-    prettier_1.prettierCheck,
-    cpp_format_1.cppFormatCheck,
-    python_format_1.pythonFormatCheck,
-    go_format_1.goFormatCheck,
-    external_checks_1.rustFormatCheck,
-    external_checks_1.csharpFormatCheck,
-    external_checks_1.phpFormatCheck,
-];

package/dist/index.d.ts

@@ -1,12 +0,0 @@
-/**
- * PR CheckMate — automated PR quality checks.
- *
- * @module pr-checkmate
- */
-export { runChecks, buildContext, REGISTRY } from './core';
-export { pass, warn, fail, skip, defineCheck } from './core';
-export type { Check, CheckContext, CheckOutcome, CheckReport, CheckResult, CheckStatus, Language, Phase, ReporterFn, ReporterKind, RunOptions, } from './core';
-export { getSourcePath, getSourcePaths, getIgnoredDirs, getPackageConfigPath, hasLocalConfig, } from './config';
-export type { PRCheckMateConfig } from './interfaces';
-export { Logger } from './utils/logger';
-export type { LogLevel } from './utils/logger';

package/dist/utils/index.d.ts

@@ -1,15 +0,0 @@
-export * from './logger';
-export * from './result-collector';
-export * from './resolve-bin';
-export * from './own-deps';
-export * from './direct-deps';
-export * from './detect-language';
-export * from './glob';
-export * from './update-notifier';
-export * from './package-version';
-export * from './ci';
-export * from './git';
-/**
- *
- */
-export declare function cleanupTempFile(filePath: string): void;