Merge pull request #2695 from srod/develop

Merge develop into main: CI updates, documentation improvements, and dependency bumps

Author: srod

.github/codeql/codeql-config.yml

@@ -0,0 +1,10 @@
+name: "CodeQL Configuration"
+
+# Exclude directories that don't need security scanning
+paths-ignore:
+  # Test fixtures (includes intentional syntax errors)
+  - 'tests/fixtures/**'
+  # Example files
+  - 'examples/**'
+  # Documentation site
+  - 'docs/**'

.github/workflows/codeql.yml

@@ -0,0 +1,54 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: '0 6 * * 1'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      contents: read
+      actions: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [javascript-typescript]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Cache node_modules
+        uses: actions/cache@v4
+        with:
+          path: node_modules
+          key: ${{ runner.os }}-node-modules-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-modules-
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: ${{ matrix.language }}
+          config-file: ./.github/codeql/codeql-config.yml
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:${{ matrix.language }}"

.github/workflows/publish.yml

@@ -28,7 +28,7 @@ jobs:
         uses: oven-sh/setup-bun@v2
 
       - name: ⚙️ Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
 

CLAUDE.md

@@ -43,14 +43,17 @@ This is a Bun monorepo for compressing JavaScript, CSS, and HTML files using var
 - `cli` - Command-line interface
 
 **Compressor packages** - Each wraps a specific minification library:
-- JS: `babel-minify`, `google-closure-compiler`, `terser`, `uglify-js`, `uglify-es`
-- CSS: `clean-css`, `crass`, `cssnano`, `csso`, `sqwish`
+- JS: `esbuild`, `google-closure-compiler`, `oxc`, `swc`, `terser`, `uglify-js`
+- CSS: `clean-css`, `cssnano`, `csso`, `esbuild`, `lightningcss`
 - HTML: `html-minifier`
-- Other: `yui` (JS/CSS), `jsonminify`, `no-compress` (passthrough)
+- Other: `jsonminify`, `no-compress` (passthrough)
 
 **Deprecated** (still available but unmaintained upstream):
 - `babel-minify` - Babel 6 only, use `terser` instead
 - `uglify-es` - Unmaintained, use `terser` instead
+- `yui` - Java-based, use modern alternatives instead
+- `crass` - Unmaintained, use `lightningcss` or `clean-css` instead
+- `sqwish` - Unmaintained, use `lightningcss` or `clean-css` instead
 
 ### Dependencies
 

Readme.md

@@ -41,6 +41,14 @@ It allow you to compress JavaScript, CSS and HTML files.
 
 - [html-minifier](https://node-minify.2clics.net/compressors/html-minifier)
 
+**JSON:**
+
+- [jsonminify](https://node-minify.2clics.net/compressors/jsonminify)
+
+**Other:**
+
+- [No compress](https://node-minify.2clics.net/options#concatenate-files)
+
 **Command Line Interface:**
 
 - [CLI](https://node-minify.2clics.net/cli)