Merge branch 'main' into highlightLiveWatch

Author: jreineckearm

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,7 +1,6 @@
 ## Fixes
-<!-- List the GitHub issue this PR resolves -->
-
-- [#<Number>](https://github.com/Open-CMSIS-Pack/vscode-cmsis-debugger/issues/<number>)
+<!-- List the GitHub issue(s) this PR resolves (e.g. #123) -->
+- #<issue-number>
 
 ## Changes
 <!-- List the changes this PR introduces -->

.github/lychee.toml

@@ -0,0 +1,38 @@
+# For all options, see <https://lychee.cli.rs/usage/config/>
+
+# Verbose program output
+# Accepts log level: "error", "warn", "info", "debug", "trace"
+verbose = "info"
+
+# Interactive progress bar while checking links.
+# Disabled for CI usage
+no_progress = true
+cache = false
+
+accept = [
+    "200"
+]
+
+# Maximum number of allowed redirects.
+max_redirects = 2
+
+# Maximum number of allowed retries before a link is declared dead.
+max_retries = 2
+
+# Only test links with the given schemes
+# Omit to check links with any other scheme.
+scheme = ["http", "https", "file"]
+
+# Exclude links
+exclude = [
+    # Needs cookies to be accepted
+    'https://developer.arm.com',
+    'https://www.segger.com'
+]
+
+# Exclude paths from getting checked. The values are treated as regular expressions
+exclude_path = [
+    "(^|[\\\\/])CHANGELOG\\.md$", # skip changelog file
+    "\\.txt$",                  # skip .txt extensions
+    "\\.html$",                 # skip .html extensions
+]

.github/workflows/dependency-review.yml

@@ -21,4 +21,4 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

.github/workflows/markdown.yml

@@ -45,35 +45,18 @@ jobs:
   check-links:
     name: Check Markdown Links
     runs-on: ubuntu-latest
-    permissions:
-      packages: read
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          node-version-file: package.json
-          registry-url: https://npm.pkg.github.com
-          package-manager-cache: false
-
-      - name: Install dependencies
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: npm ci
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      # Automatically retry the link check if it fails
-      # This helps reduce false positives in CI caused by transient errors
       - name: Check Links
-        if: runner.os == 'Linux'
-        uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
+        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
         with:
-          attempt_delay: 2000
-          attempt_limit: 3
-          command: npm run check:links
+          args: --config .github/lychee.toml './**/*.md'
+          fail: true
+          jobSummary: true

.github/workflows/nightly.yml

@@ -13,6 +13,24 @@ permissions:
   contents: read
 
 jobs:
+  validate-markdown-links:
+    name: Validate Markdown Links
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Validate Links
+        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
+        with:
+          args: --config .github/lychee.toml './**/*.md'
+          fail: true
+          jobSummary: false
+
   build:
     if: github.repository == 'Open-CMSIS-Pack/vscode-cmsis-debugger'
     strategy:
@@ -84,16 +102,6 @@ jobs:
         if: runner.os == 'Linux'
         run: npm run build
 
-      # Automatically retry the link check if it fails
-      # This helps reduce false positives in CI caused by transient errors
-      - name: Check Links
-        if: runner.os == 'Linux'
-        uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
-        with:
-          attempt_delay: 2000
-          attempt_limit: 3
-          command: npm run check:links
-
       - name: Check copyright
         if: runner.os == 'Linux'
         run: npm run copyright:check

.github/workflows/tpip.yml

@@ -7,6 +7,7 @@ on:
       - docs/third-party-licenses.json
       - docs/tpip-header.md
       - scripts/tpip-reporter.ts
+      - package-lock.json
       - '!**/*.md'
       - '!.github/workflows/markdown.yml'
       - '!.github/markdownlint.json'
@@ -25,8 +26,9 @@ permissions:
 jobs:
   report:
     permissions:
-      # contents: write  # for Git to git push # disabled until resurrecting direct git push
+      contents: write
       packages: read
+      actions: read
 
     name: Generate report
     runs-on: ubuntu-latest
@@ -52,13 +54,20 @@ jobs:
         run: npm ci
 
       - name: Generate third-party licenses report
-        run: npm run tpip:report
+        id: report
+        run: |
+          npm run tpip:report
+          if git diff --exit-code TPIP.md > /dev/null; then
+            echo "update=0" >> $GITHUB_OUTPUT
+          else
+            echo "update=1" >> $GITHUB_OUTPUT
+          fi
 
       - name: Commit changes
-        if: false
-        run: |
-          git config --local user.email "git@github.com"
-          git config --local user.name "GitHub Action"
-          git add TPIP.md
-          git commit -m "Update third-party licenses report [skip ci]"
-          git push
+        if: ${{ steps.report.outputs.update == 1 }}
+        uses: EndBug/add-and-commit@290ea2c423ad77ca9c62ae0f5b224379612c0321
+        with:
+          message: "Update TPIP report [skip ci]"
+          add: |
+            docs/third-party-licenses.json
+            TPIP.md

TPIP.md

@@ -1,6 +1,6 @@
 # TPIP Report for vscode-cmsis-debugger
 
-Report prepared at: 06/05/2026, 17:17:17
+Generated for release: 1.6.1
 
 | *Package* | *Version* | *Repository* | *License* |
 |---|---|---|---|

package-lock.json

@@ -741,7 +741,7 @@
     "ts-jest": "29.4.6",
     "ts-loader": "^9.5.4",
     "ts-node": "^10.9.2",
-    "tsx": "^4.21.0",
+    "tsx": "^4.22.4",
     "type-fest": "^5.4.4",
     "typescript": "^5.9.3",
     "typescript-eslint": "8.56.1",

package.json

@@ -44,7 +44,13 @@ async function main() {
         .parseSync();
 
     const tpipJson = JSON.parse(fs.readFileSync(json as string, "utf8"));
-    
+
+    let release: string | undefined;
+    if (fs.existsSync('package.json')) {
+        const packageJson = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+        release = packageJson.version;
+    }
+
     var data: string = '';
     if (header && fs.existsSync(header as string)) {
         data += fs.readFileSync(header as string, "utf8");
@@ -53,7 +59,7 @@ async function main() {
     }
 
     data += '\n';
-    data += `Report prepared at: ${new Date().toLocaleString('en-GB')}\n\n`;
+    data += `Generated for release: ${release ?? 'unknown'}\n\n`;
     data += '| *Package* | *Version* | *Repository* | *License* |\n';
     data += '|---|---|---|---|\n';