Skip to content

chore: Cherry-picked changes from upstream#127

Merged
amanstep merged 21 commits into
mainfrom
auto-cherry-pick
Aug 26, 2025
Merged

chore: Cherry-picked changes from upstream#127
amanstep merged 21 commits into
mainfrom
auto-cherry-pick

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Cherry-picked changes from upstream.

github-actions Bot and others added 4 commits August 21, 2025 07:28
* Update README.md

* Update README.md

* permissions block moved

* permissions block moved

* Update lint-pr-title-preview-validateSingleCommit.yml

* Update lint-pr-title-preview.yml

* Update lint-pr-title.yml

* Update release.yml

* Update versioning.yml

* permissions block move, added `-o pipefail` flag for pipe errors

* Update lint-pr-title-preview-outputErrorMessage.yml

* fix(url): remove ). for the see url msg

* Revert to secrets.GITHUB_TOKEN

changed back to using secrets.GITHUB_TOKEN as requested by owner

---------

Co-authored-by: lior-dux_clbt <lior.dux@cellebrite.com>
* Update README.md

* Update README.md

* permissions block moved

* permissions block moved

* Update lint-pr-title-preview-validateSingleCommit.yml

* Update lint-pr-title-preview.yml

* Update lint-pr-title.yml

* Update release.yml

* Update versioning.yml

* permissions block move, added `-o pipefail` flag for pipe errors

* Update lint-pr-title-preview-outputErrorMessage.yml

* fix(url): remove ). for the see url msg

* Revert to secrets.GITHUB_TOKEN

changed back to using secrets.GITHUB_TOKEN as requested by owner

---------

Co-authored-by: lior-dux_clbt <lior.dux@cellebrite.com>
docs: removes synchronize trigger
@github-actions

Copy link
Copy Markdown
Contributor Author

🚀 PR Updated!

The PR has been updated with the latest cherry-picked commits.

@step-security/maintained-actions-dev Please review and approve the changes.

📦 Target Release Version: v6.0.0

❗ Missing Files:

  • .github/ISSUE_TEMPLATE/bug_report.md
  • .github/ISSUE_TEMPLATE/feature_request.md
  • .releaserc.json
  • eslint.config.mjs
  • rollup.config.js
  • CHANGELOG.md

🛑 Workflow Files (Cannot be auto-applied by GitHub Actions):

  • .github/workflows/release.yml from commit 40166f00814508ec3201fc8595b393d451c8cd80
  • .github/workflows/lint-pr-title-preview-ignoreLabels.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/lint-pr-title-preview.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/lint-pr-title.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/release.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/test.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/versioning.yml from commit 04501d43b574e4c1d23c629ffe4dcec27acfdeff
  • .github/workflows/lint-pr-title-preview-ignoreLabels.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/lint-pr-title-preview.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/lint-pr-title.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/release.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/test.yml from commit 631ffdc0283366e1d671846987cd2532bebcaba7
  • .github/workflows/lint-pr-title-preview-ignoreLabels.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/workflows/lint-pr-title-preview.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/workflows/lint-pr-title.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/workflows/release.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/workflows/test.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79

❌ Conflicting Files:

  • README.md from commit 80c0371c57c5142ed6c844270bba1864bac8a4c6
  • .eslintrc.js from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • .github/dependabot.yml from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • README.md from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79
  • src/index.js from commit bc0c9a79abfe07c0f08c498dd4a040bd22fe9b79

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

1 similar comment
@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@claude

claude Bot commented Aug 25, 2025

Copy link
Copy Markdown

Claude finished @github-actions[bot]'s task —— View job


PR Review: Cherry-picked Changes from Upstream

I've conducted a comprehensive review of this cherry-pick PR focusing on completeness, consistency, and security.

Todo List:

  • Analyze cherry-pick completeness based on verification reports
  • Review core source code changes for security vulnerabilities
  • Examine build and configuration changes
  • Analyze missing files and their impact
  • Provide comprehensive feedback and recommendations

📋 Executive Summary

🔴 RECOMMENDATION: DO NOT MERGE - This cherry-pick is severely incomplete and missing critical infrastructure files.

🔍 Cherry-Pick Completeness Analysis

📊 Status Summary:

  • Total upstream files: 25
  • Files in PR: 11/25 (44%)
  • Complete matches: 11/25 (44%)
  • Overall Status: 🔴 INCOMPLETE

❌ Critical Missing Files:

  1. Issue Templates (2 files):

    • .github/ISSUE_TEMPLATE/bug_report.md (0 additions, 1 deletion upstream)
    • .github/ISSUE_TEMPLATE/feature_request.md (0 additions, 1 deletion upstream)
  2. GitHub Configuration (1 file):

    • .github/dependabot.yml (+17 -0 upstream)
  3. Workflow Files (9 files) - CRITICAL FOR CI/CD:

    • .github/workflows/lint-pr-title-preview-ignoreLabels.yml
    • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml
    • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml
    • .github/workflows/lint-pr-title-preview.yml
    • .github/workflows/lint-pr-title.yml (exists but incomplete)
    • .github/workflows/release.yml
    • .github/workflows/test.yml (exists but incomplete)
    • .github/workflows/versioning.yml
  4. Release Configuration (1 file):

    • .releaserc.json (+15 -9 upstream)
  5. Documentation (2 files):

    • CHANGELOG.md (+10 -0 upstream)
    • README.md (incomplete changes - missing 4 additions, 3 deletions)

🛡️ Security Analysis

✅ No Critical Security Vulnerabilities Found

All source code changes are secure:

  • StepSecurity subscription validation (src/index.js:176-191): Proper timeout handling and error management
  • Input validation logic: No injection risks, proper regex usage
  • Configuration parsing: Safe environment variable access
  • OSV scanner exemptions: Appropriately documented and justified

🔧 Build & Configuration Changes Analysis

✅ Build System Migration - POSITIVE CHANGES

Successful Updates:

  • ✅ Modern ESLint configuration (eslint.config.mjs)
  • ✅ Rollup build system with proper ES modules support
  • ✅ Node.js 24 upgrade (consistent across action.yml and package.json)
  • ✅ Modern testing with Vitest
  • ✅ Source map generation for better debugging

⚠️ Concerns:

  • Distribution bundle increased by 50K+ lines (hard to verify manually)
  • Missing release configuration impacts automated releases

🎯 Impact Analysis of Missing Files

HIGH IMPACT:

  • Workflow files: Break CI/CD pipelines, prevent automated testing/releases
  • .releaserc.json: Prevents semantic releases and automated versioning
  • README.md incomplete: Outdated documentation for users

MEDIUM IMPACT:

  • Dependabot config: Misses security updates and dependency management
  • CHANGELOG.md: No release history tracking

LOW IMPACT:

  • Issue templates: Slightly impacts contributor experience

🚨 Critical Issues

  1. Incomplete cherry-pick threatens repository stability
  2. Missing workflow files will break CI/CD processes
  3. Missing release configuration prevents automated releases
  4. 14 files completely absent from PR despite upstream changes

📝 Recommendations

Immediate Actions Required:

  1. DO NOT MERGE this PR in its current state
  2. Complete the cherry-pick by adding all 14 missing files
  3. Verify workflow file changes match upstream exactly
  4. Test CI/CD pipelines after adding missing workflow files

Before Merging:

  1. ✅ Ensure all 25 upstream files are present and correctly applied
  2. ✅ Verify build system works with new configuration
  3. ✅ Test semantic release process with new .releaserc.json
  4. ✅ Validate all workflow files are functional
  5. ✅ Review the large distribution file changes for any unexpected content

Alternative Approach:

Consider a manual cherry-pick process to ensure completeness, as the automated process has clearly failed to capture all necessary changes from upstream v5.5.3 → v6.0.0.


Final Status: 🔴 INCOMPLETE CHERRY-PICK - REQUIRES COMPLETION BEFORE MERGE

@claude

claude Bot commented Aug 25, 2025

Copy link
Copy Markdown

Claude finished @github-actions[bot]'s task —— View job


PR Review: Cherry-picked Changes from Upstream

I've conducted a comprehensive review of this cherry-pick PR focusing on completeness, consistency, and security.

Todo List:

  • Analyze cherry-pick completeness based on verification reports
  • Review core source code changes for security vulnerabilities
  • Examine build and configuration changes
  • Analyze missing files and their impact
  • Provide comprehensive feedback and recommendations

📋 Executive Summary

🔴 RECOMMENDATION: DO NOT MERGE - This cherry-pick is severely incomplete and missing critical infrastructure files.

🔍 Cherry-Pick Completeness Analysis

📊 Status Summary:

  • Total upstream files: 25
  • Files in PR: 11/25 (44%)
  • Complete matches: 11/25 (44%)
  • Overall Status: 🔴 INCOMPLETE

❌ Critical Missing Files:

  1. Issue Templates (2 files):

    • .github/ISSUE_TEMPLATE/bug_report.md (0 additions, 1 deletion upstream)
    • .github/ISSUE_TEMPLATE/feature_request.md (0 additions, 1 deletion upstream)
  2. GitHub Configuration (1 file):

    • .github/dependabot.yml (+17 -0 upstream)
  3. Workflow Files (9 files) - CRITICAL FOR CI/CD:

    • .github/workflows/lint-pr-title-preview-ignoreLabels.yml
    • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml
    • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml
    • .github/workflows/lint-pr-title-preview.yml
    • .github/workflows/lint-pr-title.yml (exists but incomplete)
    • .github/workflows/release.yml
    • .github/workflows/test.yml (exists but incomplete)
    • .github/workflows/versioning.yml
  4. Release Configuration (1 file):

    • .releaserc.json (+15 -9 upstream)
  5. Documentation (2 files):

    • CHANGELOG.md (+10 -0 upstream)
    • README.md (incomplete changes - missing 4 additions, 3 deletions)

🛡️ Security Analysis

✅ No Critical Security Vulnerabilities Found

All source code changes are secure:

  • StepSecurity subscription validation (src/index.js:176-191): Proper timeout handling and error management
  • Input validation logic: No injection risks, proper regex usage
  • Configuration parsing: Safe environment variable access
  • OSV scanner exemptions: Appropriately documented and justified

🔧 Build & Configuration Changes Analysis

✅ Build System Migration - POSITIVE CHANGES

Successful Updates:

  • ✅ Modern ESLint configuration (eslint.config.mjs)
  • ✅ Rollup build system with proper ES modules support
  • ✅ Node.js 24 upgrade (consistent across action.yml and package.json)
  • ✅ Modern testing with Vitest
  • ✅ Source map generation for better debugging

⚠️ Concerns:

  • Distribution bundle increased by 50K+ lines (hard to verify manually)
  • Missing release configuration impacts automated releases

🎯 Impact Analysis of Missing Files

HIGH IMPACT:

  • Workflow files: Break CI/CD pipelines, prevent automated testing/releases
  • .releaserc.json: Prevents semantic releases and automated versioning
  • README.md incomplete: Outdated documentation for users

MEDIUM IMPACT:

  • Dependabot config: Misses security updates and dependency management
  • CHANGELOG.md: No release history tracking

LOW IMPACT:

  • Issue templates: Slightly impacts contributor experience

🚨 Critical Issues

  1. Incomplete cherry-pick threatens repository stability
  2. Missing workflow files will break CI/CD processes
  3. Missing release configuration prevents automated releases
  4. 14 files completely absent from PR despite upstream changes

📝 Recommendations

Immediate Actions Required:

  1. DO NOT MERGE this PR in its current state
  2. Complete the cherry-pick by adding all 14 missing files
  3. Verify workflow file changes match upstream exactly
  4. Test CI/CD pipelines after adding missing workflow files

Before Merging:

  1. ✅ Ensure all 25 upstream files are present and correctly applied
  2. ✅ Verify build system works with new configuration
  3. ✅ Test semantic release process with new .releaserc.json
  4. ✅ Validate all workflow files are functional
  5. ✅ Review the large distribution file changes for any unexpected content

Alternative Approach:

Consider a manual cherry-pick process to ensure completeness, as the automated process has clearly failed to capture all necessary changes from upstream v5.5.3 → v6.0.0.


Final Status: 🔴 INCOMPLETE CHERRY-PICK - REQUIRES COMPLETION BEFORE MERGE

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
amanstep and others added 10 commits August 25, 2025 20:59
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
* build(deps): bump the npm-packages group with 13 updates

Bumps the npm-packages group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.1` |
| [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `5.0.0` | `9.1.0` |
| [conventional-commits-parser](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-commits-parser) | `3.2.4` | `6.2.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.2` | `6.0.3` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `9.0.2` | `13.0.1` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `8.0.7` | `11.0.4` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `10.0.3` | `14.0.3` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.36.0` | `9.33.0` |
| [eslint-config-molindo](https://github.com/molindo/eslint-config-molindo) | `6.0.0` | `8.0.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `30.0.5` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `19.0.5` | `24.2.7` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 5.1.1 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `conventional-changelog-conventionalcommits` from 5.0.0 to 9.1.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.1.0/packages/conventional-changelog-conventionalcommits)

Updates `conventional-commits-parser` from 3.2.4 to 6.2.0
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-commits-parser/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-commits-parser-v6.2.0/packages/conventional-commits-parser)

Updates `@semantic-release/changelog` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.2...v6.0.3)

Updates `@semantic-release/commit-analyzer` from 9.0.2 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v9.0.2...v13.0.1)

Updates `@semantic-release/github` from 8.0.7 to 11.0.4
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v8.0.7...v11.0.4)

Updates `@semantic-release/release-notes-generator` from 10.0.3 to 14.0.3
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v10.0.3...v14.0.3)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.36.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.36.0...v9.33.0)

Updates `eslint-config-molindo` from 6.0.0 to 8.0.0
- [Release notes](https://github.com/molindo/eslint-config-molindo/releases)
- [Changelog](https://github.com/molindo/eslint-config-molindo/blob/master/CHANGELOG.md)
- [Commits](molindo/eslint-config-molindo@6.0.0...8.0.0)

Updates `jest` from 29.5.0 to 30.0.5
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest)

Updates `semantic-release` from 19.0.5 to 24.2.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v24.2.7)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: conventional-commits-parser
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/changelog"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-packages
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/github"
  dependency-version: 11.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-packages
- dependency-name: eslint
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: eslint-config-molindo
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: jest
  dependency-version: 30.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
- dependency-name: semantic-release
  dependency-version: 24.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix breaking changes in deps, upgrade action to Node.js 24, switch to pnpm

* wip

* wip

* wip

* wip

* wip

* build: Switch to ESM & Vitest (#288)

* esm + vitest

* ncc -> rollup

* wip

* readme

---------
@claude

claude Bot commented Aug 25, 2025

Copy link
Copy Markdown

Claude finished @github-actions[bot]'s task —— View job


PR Review: Cherry-picked Changes from Upstream

I've conducted a comprehensive review of this cherry-pick PR focusing on completeness, consistency, and security.

Todo List:

  • Analyze cherry-pick completeness based on verification reports
  • Review core source code changes for security vulnerabilities
  • Examine build and configuration changes
  • Analyze missing files and their impact
  • Provide comprehensive feedback and recommendations

📋 Executive Summary

🔴 RECOMMENDATION: DO NOT MERGE - This cherry-pick is severely incomplete and missing critical infrastructure files.

🔍 Cherry-Pick Completeness Analysis

📊 Status Summary:

  • Total upstream files: 25
  • Files in PR: 11/25 (44%)
  • Complete matches: 11/25 (44%)
  • Overall Status: 🔴 INCOMPLETE

❌ Critical Missing Files:

  1. Issue Templates (2 files):

    • .github/ISSUE_TEMPLATE/bug_report.md (0 additions, 1 deletion upstream)
    • .github/ISSUE_TEMPLATE/feature_request.md (0 additions, 1 deletion upstream)
  2. GitHub Configuration (1 file):

    • .github/dependabot.yml (+17 -0 upstream)
  3. Workflow Files (9 files) - CRITICAL FOR CI/CD:

    • .github/workflows/lint-pr-title-preview-ignoreLabels.yml
    • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml
    • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml
    • .github/workflows/lint-pr-title-preview.yml
    • .github/workflows/lint-pr-title.yml (exists but incomplete)
    • .github/workflows/release.yml
    • .github/workflows/test.yml (exists but incomplete)
    • .github/workflows/versioning.yml
  4. Release Configuration (1 file):

    • .releaserc.json (+15 -9 upstream)
  5. Documentation (2 files):

    • CHANGELOG.md (+10 -0 upstream)
    • README.md (incomplete changes - missing 4 additions, 3 deletions)

🛡️ Security Analysis

✅ No Critical Security Vulnerabilities Found

All source code changes are secure:

  • StepSecurity subscription validation (src/index.js:176-191): Proper timeout handling and error management
  • Input validation logic: No injection risks, proper regex usage
  • Configuration parsing: Safe environment variable access
  • OSV scanner exemptions: Appropriately documented and justified

🔧 Build & Configuration Changes Analysis

✅ Build System Migration - POSITIVE CHANGES

Successful Updates:

  • ✅ Modern ESLint configuration (eslint.config.mjs)
  • ✅ Rollup build system with proper ES modules support
  • ✅ Node.js 24 upgrade (consistent across action.yml and package.json)
  • ✅ Modern testing with Vitest
  • ✅ Source map generation for better debugging

⚠️ Concerns:

  • Distribution bundle increased by 50K+ lines (hard to verify manually)
  • Missing release configuration impacts automated releases

🎯 Impact Analysis of Missing Files

HIGH IMPACT:

  • Workflow files: Break CI/CD pipelines, prevent automated testing/releases
  • .releaserc.json: Prevents semantic releases and automated versioning
  • README.md incomplete: Outdated documentation for users

MEDIUM IMPACT:

  • Dependabot config: Misses security updates and dependency management
  • CHANGELOG.md: No release history tracking

LOW IMPACT:

  • Issue templates: Slightly impacts contributor experience

🚨 Critical Issues

  1. Incomplete cherry-pick threatens repository stability
  2. Missing workflow files will break CI/CD processes
  3. Missing release configuration prevents automated releases
  4. 14 files completely absent from PR despite upstream changes

📝 Recommendations

Immediate Actions Required:

  1. DO NOT MERGE this PR in its current state
  2. Complete the cherry-pick by adding all 14 missing files
  3. Verify workflow file changes match upstream exactly
  4. Test CI/CD pipelines after adding missing workflow files

Before Merging:

  1. ✅ Ensure all 25 upstream files are present and correctly applied
  2. ✅ Verify build system works with new configuration
  3. ✅ Test semantic release process with new .releaserc.json
  4. ✅ Validate all workflow files are functional
  5. ✅ Review the large distribution file changes for any unexpected content

Alternative Approach:

Consider a manual cherry-pick process to ensure completeness, as the automated process has clearly failed to capture all necessary changes from upstream v5.5.3 → v6.0.0.


Final Status: 🔴 INCOMPLETE CHERRY-PICK - REQUIRES COMPLETION BEFORE MERGE

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@claude

claude Bot commented Aug 25, 2025

Copy link
Copy Markdown

Claude finished @github-actions[bot]'s task —— View job


PR Review: Cherry-picked Changes from Upstream

I've conducted a comprehensive review of this cherry-pick PR focusing on completeness, consistency, and security.

Todo List:

  • Analyze cherry-pick completeness based on verification reports
  • Review core source code changes for security vulnerabilities
  • Examine build and configuration changes
  • Analyze missing files and their impact
  • Provide comprehensive feedback and recommendations

📋 Executive Summary

🔴 RECOMMENDATION: DO NOT MERGE - This cherry-pick is severely incomplete and missing critical infrastructure files.

🔍 Cherry-Pick Completeness Analysis

📊 Status Summary:

  • Total upstream files: 25
  • Files in PR: 11/25 (44%)
  • Complete matches: 11/25 (44%)
  • Overall Status: 🔴 INCOMPLETE

❌ Critical Missing Files:

  1. Issue Templates (2 files):

    • .github/ISSUE_TEMPLATE/bug_report.md (0 additions, 1 deletion upstream)
    • .github/ISSUE_TEMPLATE/feature_request.md (0 additions, 1 deletion upstream)
  2. GitHub Configuration (1 file):

    • .github/dependabot.yml (+17 -0 upstream)
  3. Workflow Files (9 files) - CRITICAL FOR CI/CD:

    • .github/workflows/lint-pr-title-preview-ignoreLabels.yml
    • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml
    • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml
    • .github/workflows/lint-pr-title-preview.yml
    • .github/workflows/lint-pr-title.yml (exists but incomplete)
    • .github/workflows/release.yml
    • .github/workflows/test.yml (exists but incomplete)
    • .github/workflows/versioning.yml
  4. Release Configuration (1 file):

    • .releaserc.json (+15 -9 upstream)
  5. Documentation (2 files):

    • CHANGELOG.md (+10 -0 upstream)
    • README.md (incomplete changes - missing 4 additions, 3 deletions)

🛡️ Security Analysis

✅ No Critical Security Vulnerabilities Found

All source code changes are secure:

  • StepSecurity subscription validation (src/index.js:176-191): Proper timeout handling and error management
  • Input validation logic: No injection risks, proper regex usage
  • Configuration parsing: Safe environment variable access
  • OSV scanner exemptions: Appropriately documented and justified

🔧 Build & Configuration Changes Analysis

✅ Build System Migration - POSITIVE CHANGES

Successful Updates:

  • ✅ Modern ESLint configuration (eslint.config.mjs)
  • ✅ Rollup build system with proper ES modules support
  • ✅ Node.js 24 upgrade (consistent across action.yml and package.json)
  • ✅ Modern testing with Vitest
  • ✅ Source map generation for better debugging

⚠️ Concerns:

  • Distribution bundle increased by 50K+ lines (hard to verify manually)
  • Missing release configuration impacts automated releases

🎯 Impact Analysis of Missing Files

HIGH IMPACT:

  • Workflow files: Break CI/CD pipelines, prevent automated testing/releases
  • .releaserc.json: Prevents semantic releases and automated versioning
  • README.md incomplete: Outdated documentation for users

MEDIUM IMPACT:

  • Dependabot config: Misses security updates and dependency management
  • CHANGELOG.md: No release history tracking

LOW IMPACT:

  • Issue templates: Slightly impacts contributor experience

🚨 Critical Issues

  1. Incomplete cherry-pick threatens repository stability
  2. Missing workflow files will break CI/CD processes
  3. Missing release configuration prevents automated releases
  4. 14 files completely absent from PR despite upstream changes

📝 Recommendations

Immediate Actions Required:

  1. DO NOT MERGE this PR in its current state
  2. Complete the cherry-pick by adding all 14 missing files
  3. Verify workflow file changes match upstream exactly
  4. Test CI/CD pipelines after adding missing workflow files

Before Merging:

  1. ✅ Ensure all 25 upstream files are present and correctly applied
  2. ✅ Verify build system works with new configuration
  3. ✅ Test semantic release process with new .releaserc.json
  4. ✅ Validate all workflow files are functional
  5. ✅ Review the large distribution file changes for any unexpected content

Alternative Approach:

Consider a manual cherry-pick process to ensure completeness, as the automated process has clearly failed to capture all necessary changes from upstream v5.5.3 → v6.0.0.


Final Status: 🔴 INCOMPLETE CHERRY-PICK - REQUIRES COMPLETION BEFORE MERGE

@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@claude

claude Bot commented Aug 25, 2025

Copy link
Copy Markdown

Claude finished @github-actions[bot]'s task —— View job


PR Review: Cherry-picked Changes from Upstream

I've conducted a comprehensive review of this cherry-pick PR focusing on completeness, consistency, and security.

Todo List:

  • Analyze cherry-pick completeness based on verification reports
  • Review core source code changes for security vulnerabilities
  • Examine build and configuration changes
  • Analyze missing files and their impact
  • Provide comprehensive feedback and recommendations

📋 Executive Summary

🔴 RECOMMENDATION: DO NOT MERGE - This cherry-pick is severely incomplete and missing critical infrastructure files.

🔍 Cherry-Pick Completeness Analysis

📊 Status Summary:

  • Total upstream files: 25
  • Files in PR: 11/25 (44%)
  • Complete matches: 11/25 (44%)
  • Overall Status: 🔴 INCOMPLETE

❌ Critical Missing Files:

  1. Issue Templates (2 files):

    • .github/ISSUE_TEMPLATE/bug_report.md (0 additions, 1 deletion upstream)
    • .github/ISSUE_TEMPLATE/feature_request.md (0 additions, 1 deletion upstream)
  2. GitHub Configuration (1 file):

    • .github/dependabot.yml (+17 -0 upstream)
  3. Workflow Files (9 files) - CRITICAL FOR CI/CD:

    • .github/workflows/lint-pr-title-preview-ignoreLabels.yml
    • .github/workflows/lint-pr-title-preview-outputErrorMessage.yml
    • .github/workflows/lint-pr-title-preview-validateSingleCommit.yml
    • .github/workflows/lint-pr-title-preview.yml
    • .github/workflows/lint-pr-title.yml (exists but incomplete)
    • .github/workflows/release.yml
    • .github/workflows/test.yml (exists but incomplete)
    • .github/workflows/versioning.yml
  4. Release Configuration (1 file):

    • .releaserc.json (+15 -9 upstream)
  5. Documentation (2 files):

    • CHANGELOG.md (+10 -0 upstream)
    • README.md (incomplete changes - missing 4 additions, 3 deletions)

🛡️ Security Analysis

✅ No Critical Security Vulnerabilities Found

All source code changes are secure:

  • StepSecurity subscription validation (src/index.js:176-191): Proper timeout handling and error management
  • Input validation logic: No injection risks, proper regex usage
  • Configuration parsing: Safe environment variable access
  • OSV scanner exemptions: Appropriately documented and justified

🔧 Build & Configuration Changes Analysis

✅ Build System Migration - POSITIVE CHANGES

Successful Updates:

  • ✅ Modern ESLint configuration (eslint.config.mjs)
  • ✅ Rollup build system with proper ES modules support
  • ✅ Node.js 24 upgrade (consistent across action.yml and package.json)
  • ✅ Modern testing with Vitest
  • ✅ Source map generation for better debugging

⚠️ Concerns:

  • Distribution bundle increased by 50K+ lines (hard to verify manually)
  • Missing release configuration impacts automated releases

🎯 Impact Analysis of Missing Files

HIGH IMPACT:

  • Workflow files: Break CI/CD pipelines, prevent automated testing/releases
  • .releaserc.json: Prevents semantic releases and automated versioning
  • README.md incomplete: Outdated documentation for users

MEDIUM IMPACT:

  • Dependabot config: Misses security updates and dependency management
  • CHANGELOG.md: No release history tracking

LOW IMPACT:

  • Issue templates: Slightly impacts contributor experience

🚨 Critical Issues

  1. Incomplete cherry-pick threatens repository stability
  2. Missing workflow files will break CI/CD processes
  3. Missing release configuration prevents automated releases
  4. 14 files completely absent from PR despite upstream changes

📝 Recommendations

Immediate Actions Required:

  1. DO NOT MERGE this PR in its current state
  2. Complete the cherry-pick by adding all 14 missing files
  3. Verify workflow file changes match upstream exactly
  4. Test CI/CD pipelines after adding missing workflow files

Before Merging:

  1. ✅ Ensure all 25 upstream files are present and correctly applied
  2. ✅ Verify build system works with new configuration
  3. ✅ Test semantic release process with new .releaserc.json
  4. ✅ Validate all workflow files are functional
  5. ✅ Review the large distribution file changes for any unexpected content

Alternative Approach:

Consider a manual cherry-pick process to ensure completeness, as the automated process has clearly failed to capture all necessary changes from upstream v5.5.3 → v6.0.0.


Final Status: 🔴 INCOMPLETE CHERRY-PICK - REQUIRES COMPLETION BEFORE MERGE


@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v5.5.3...v6.0.0

📋 File-by-File Analysis:

.github/ISSUE_TEMPLATE/bug_report.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/ISSUE_TEMPLATE/feature_request.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 0 additions, 1 deletions)

.github/dependabot.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+17 -0)

.github/workflows/lint-pr-title-preview-ignoreLabels.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview-outputErrorMessage.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+15 -13)

.github/workflows/lint-pr-title-preview-validateSingleCommit.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+10 -8)

.github/workflows/lint-pr-title-preview.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+11 -9)

.github/workflows/lint-pr-title.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+8 -6) | Missing 7 additions | Missing 5 deletions

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 14 additions, 12 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+15 -11) | Missing 14 additions | Missing 10 deletions

.github/workflows/versioning.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 2 additions, 3 deletions)

.releaserc.json

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 15 additions, 9 deletions)

CHANGELOG.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 0 deletions)

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ Cherry-pick incomplete (+21 -17) | Missing 4 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+8 -8)

eslint.config.mjs

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+11 -0)

rollup.config.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+18 -0)

src/ConfigParser.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

src/ConfigParser.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/formatMessage.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/formatMessage.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -1)

src/index.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All upstream changes applied (+10 -9) with 1 additional changes

src/parseConfig.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+3 -3)

src/validatePrTitle.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+12 -9)

src/validatePrTitle.test.js

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+4 -3)

📊 Summary:

  • Total files changed upstream: 25
  • Files present in PR: 11/25
  • Files with matching changes: 11/25

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@amanstep amanstep merged commit 72c5263 into main Aug 26, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants