From 867532b81d8f399af98256014e7d473d258fffa0 Mon Sep 17 00:00:00 2001 From: Kresimir Buric Date: Sat, 4 Apr 2026 09:29:14 +0200 Subject: [PATCH 1/3] Add check-deps action --- .github/workflows/ci.yml | 27 ++++++++++++++++++++++++++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4501830..2d70b14 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -5,10 +5,35 @@ on: branches: [main] jobs: + check_deps: + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v5 + + - name: gh-action-rl-protect-scan + uses: reversinglabs/gh-action-rl-protect-scan@v1 + id: rl-protect + env: + RL_TOKEN: ${{ secrets.RL_TOKEN }} + with: + scan-path: 'package.json' + scan-profile: 'baseline' + report: 'rl-protect-report.json' + check-deps: 'develop,release' + log-file: 'rl-protect.txt' + log-level: 'pass' + + - name: Run a multi-line script to show the result of the rl-protect action + run: | + echo "Status of rl-protect: ${{steps.rl-protect.outputs.status}}" + echo "Description of rl-protect: ${{steps.rl-protect.outputs.description}}" + ls -la + exit 0 test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: pnpm/action-setup@v4 with: From 96978f99d3f4ff0747c8d7d9d2babdd6ba8eb14b Mon Sep 17 00:00:00 2001 From: Kresimir Buric Date: Fri, 10 Apr 2026 08:45:39 +0200 Subject: [PATCH 2/3] Fixate deps --- package.json | 26 ++++++++++++------------- pnpm-lock.yaml | 53 ++++++++++++++++++++++---------------------------- 2 files changed, 36 insertions(+), 43 deletions(-) diff --git a/package.json b/package.json index d1b6302..6a619a9 100644 --- a/package.json +++ b/package.json @@ -11,28 +11,28 @@ "test": "pnpm run build && jest" }, "devDependencies": { - "@eslint/js": "^9.27.0", + "@eslint/js": "9.29.0", "@types/html-webpack-plugin": "3.2.9", - "@types/jest": "^29.5.14", + "@types/jest": "29.5.14", "@types/json-schema": "7.0.15", "@types/loader-utils": "2.0.6", - "@types/node": "^22.10.2", - "@types/webpack": "^5.28.5", - "@typescript-eslint/eslint-plugin": "^8.32.1", - "@typescript-eslint/parser": "^8.32.1", + "@types/node": "22.19.11", + "@types/webpack": "5.28.5", + "@typescript-eslint/eslint-plugin": "8.34.1", + "@typescript-eslint/parser": "8.34.1", "del-cli": "6.0.0", - "eslint": "^9.27.0", - "eslint-config-prettier": "^10.1.5", - "globals": "^16.1.0", + "eslint": "9.29.0", + "eslint-config-prettier": "10.1.5", + "globals": "16.2.0", "husky": "9.1.7", - "json-schema": "^0.4.0", + "json-schema": "0.4.0", "lint-staged": "15.5.2", "loader-utils": "3.3.1", "prettier": "3.5.3", "typescript": "5.8.3", - "jest": "^29.7.0", - "ts-jest": "^29.2.5", - "typescript-eslint": "^8.32.1", + "jest": "29.7.0", + "ts-jest": "29.4.6", + "typescript-eslint": "8.34.1", "webpack": "5.97.1" }, "dependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 233d78e..71de3f9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -16,13 +16,13 @@ importers: version: 10.2.4 devDependencies: '@eslint/js': - specifier: ^9.27.0 + specifier: 9.29.0 version: 9.29.0 '@types/html-webpack-plugin': specifier: 3.2.9 version: 3.2.9 '@types/jest': - specifier: ^29.5.14 + specifier: 29.5.14 version: 29.5.14 '@types/json-schema': specifier: 7.0.15 @@ -31,37 +31,37 @@ importers: specifier: 2.0.6 version: 2.0.6 '@types/node': - specifier: ^22.10.2 + specifier: 22.19.11 version: 22.19.11 '@types/webpack': - specifier: ^5.28.5 + specifier: 5.28.5 version: 5.28.5 '@typescript-eslint/eslint-plugin': - specifier: ^8.32.1 + specifier: 8.34.1 version: 8.34.1(@typescript-eslint/parser@8.34.1(eslint@9.29.0)(typescript@5.8.3))(eslint@9.29.0)(typescript@5.8.3) '@typescript-eslint/parser': - specifier: ^8.32.1 + specifier: 8.34.1 version: 8.34.1(eslint@9.29.0)(typescript@5.8.3) del-cli: specifier: 6.0.0 version: 6.0.0 eslint: - specifier: ^9.27.0 + specifier: 9.29.0 version: 9.29.0 eslint-config-prettier: - specifier: ^10.1.5 + specifier: 10.1.5 version: 10.1.5(eslint@9.29.0) globals: - specifier: ^16.1.0 + specifier: 16.2.0 version: 16.2.0 husky: specifier: 9.1.7 version: 9.1.7 jest: - specifier: ^29.7.0 + specifier: 29.7.0 version: 29.7.0(@types/node@22.19.11) json-schema: - specifier: ^0.4.0 + specifier: 0.4.0 version: 0.4.0 lint-staged: specifier: 15.5.2 @@ -73,13 +73,13 @@ importers: specifier: 3.5.3 version: 3.5.3 ts-jest: - specifier: ^29.2.5 + specifier: 29.4.6 version: 29.4.6(@babel/core@7.29.0)(@jest/transform@29.7.0)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(jest-util@29.7.0)(jest@29.7.0(@types/node@22.19.11))(typescript@5.8.3) typescript: specifier: 5.8.3 version: 5.8.3 typescript-eslint: - specifier: ^8.32.1 + specifier: 8.34.1 version: 8.34.1(eslint@9.29.0)(typescript@5.8.3) webpack: specifier: 5.97.1 @@ -1872,11 +1872,6 @@ packages: resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==} hasBin: true - semver@7.7.2: - resolution: {integrity: sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==} - engines: {node: '>=10'} - hasBin: true - semver@7.7.4: resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==} engines: {node: '>=10'} @@ -2541,7 +2536,7 @@ snapshots: '@jest/test-result': 29.7.0 '@jest/transform': 29.7.0 '@jest/types': 29.6.3 - '@jridgewell/trace-mapping': 0.3.25 + '@jridgewell/trace-mapping': 0.3.31 '@types/node': 22.19.11 chalk: 4.1.2 collect-v8-coverage: 1.0.3 @@ -2569,7 +2564,7 @@ snapshots: '@jest/source-map@29.6.3': dependencies: - '@jridgewell/trace-mapping': 0.3.25 + '@jridgewell/trace-mapping': 0.3.31 callsites: 3.1.0 graceful-fs: 4.2.11 @@ -2591,7 +2586,7 @@ snapshots: dependencies: '@babel/core': 7.29.0 '@jest/types': 29.6.3 - '@jridgewell/trace-mapping': 0.3.25 + '@jridgewell/trace-mapping': 0.3.31 babel-plugin-istanbul: 6.1.1 chalk: 4.1.2 convert-source-map: 2.0.0 @@ -2629,8 +2624,8 @@ snapshots: '@jridgewell/remapping@2.3.5': dependencies: - '@jridgewell/gen-mapping': 0.3.8 - '@jridgewell/trace-mapping': 0.3.25 + '@jridgewell/gen-mapping': 0.3.13 + '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/resolve-uri@3.1.2': {} @@ -2873,7 +2868,7 @@ snapshots: fast-glob: 3.3.3 is-glob: 4.0.3 minimatch: 9.0.5 - semver: 7.7.2 + semver: 7.7.4 ts-api-utils: 2.1.0(typescript@5.8.3) typescript: 5.8.3 transitivePeerDependencies: @@ -3667,7 +3662,7 @@ snapshots: '@babel/parser': 7.29.0 '@istanbuljs/schema': 0.1.3 istanbul-lib-coverage: 3.2.2 - semver: 7.7.2 + semver: 7.7.4 transitivePeerDependencies: - supports-color @@ -3946,7 +3941,7 @@ snapshots: jest-util: 29.7.0 natural-compare: 1.4.0 pretty-format: 29.7.0 - semver: 7.7.2 + semver: 7.7.4 transitivePeerDependencies: - supports-color @@ -4108,7 +4103,7 @@ snapshots: make-dir@4.0.0: dependencies: - semver: 7.7.2 + semver: 7.7.4 make-error@1.3.6: {} @@ -4364,8 +4359,6 @@ snapshots: semver@6.3.1: {} - semver@7.7.2: {} - semver@7.7.4: {} serialize-javascript@6.0.2: @@ -4562,7 +4555,7 @@ snapshots: v8-to-istanbul@9.3.0: dependencies: - '@jridgewell/trace-mapping': 0.3.25 + '@jridgewell/trace-mapping': 0.3.31 '@types/istanbul-lib-coverage': 2.0.6 convert-source-map: 2.0.0 From 422701ba72baa6d32dbcabfdbccda3a2aa2831b1 Mon Sep 17 00:00:00 2001 From: Kresimir Buric Date: Sat, 11 Apr 2026 09:23:40 +0200 Subject: [PATCH 3/3] Update ci.yml --- .github/workflows/ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2d70b14..19e3fda 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,6 +23,7 @@ jobs: check-deps: 'develop,release' log-file: 'rl-protect.txt' log-level: 'pass' + verbose: true - name: Run a multi-line script to show the result of the rl-protect action run: |