Skip to content

chore: finish contributor guidance and Action maintenance - #40

Merged
cucuwang merged 6 commits into
mainfrom
codex/github-maintenance-20260921
Sep 21, 2026
Merged

cucuwang merged 6 commits into
mainfrom
codex/github-maintenance-20260921

Conversation

@cucuwang

Copy link
Copy Markdown
Owner

Problem and change

Complete the contributor guide, CLI target-resolution regression coverage, and VitePress advisory Action sample. Adopt the CodeQL v4.38.0 pins from #34, keep the pin inventory aligned, and defer @types/node 26.x while Node 26 remains an informational preview.

Closes #8.
Closes #9.
Closes #10.
Supersedes the CodeQL changes in #34 and the unsupported type upgrade in #38.

Validation and impact

  • Tests/build pass: npm run release:check on Node 24.11.1 passed 22 test files / 280 tests, TypeScript build, Action contract checks, and clean-consumer package checks.
  • CLI, API, JSON and Action contracts preserved; the VitePress sample remains advisory.
  • Security and dependency impact reviewed: npm audit found 0 vulnerabilities; CodeQL pins match the verified upstream v4.38.0 commit.
  • Scoring/methodology impact stated: scoring behavior is unchanged; the guide documents existing evidence and fixture requirements.
  • Documentation updated: contribution guide, workflow sample link, version comments, and Action pin inventory.
  • Release/package impact stated: package version remains 0.11.0; this PR does not publish a release or npm package.

Local checks also covered four YAML files and eight relative links. Hosted CI and CodeQL must pass for this PR head before merging.

cucuwang and others added 6 commits September 21, 2026 03:21
Bumps the actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdf488f...b96794f)

Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdf488f...b96794f)

Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdf488f...b96794f)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI lite review requested due to automatic review settings September 21, 2026 02:51

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@cucuwang
cucuwang merged commit 2c325dc into main Sep 21, 2026
10 checks passed
@cucuwang
cucuwang deleted the codex/github-maintenance-20260921 branch September 21, 2026 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Docs: VitePress or Docusaurus advisory Action sample DX: test the local-path vs --dir CLI error Docs: shortest path to add a scoring rule

2 participants