feat: dependency updates, workflow changes

.changeset/breezy-suits-explain.md

@@ -0,0 +1,11 @@
+---
+'@wayofdev/eslint-config-bases': patch
+'@wayofdev/commitlint-config': patch
+'@wayofdev/secretlint-config': patch
+'@wayofdev/stylelint-config': patch
+'@wayofdev/htmlhint-config': patch
+'@wayofdev/tsconfig-config': patch
+'@wayofdev/postcss-config': patch
+---
+
+fix: dependency updates, workflow changes

.github/workflows/ci-packages.yml

@@ -1,6 +1,6 @@
 ---
-
 on: # yamllint disable-line rule:truthy
+  merge_group:
   push:
     branches:
       - master
@@ -24,18 +24,6 @@ on: # yamllint disable-line rule:truthy
       - 'pnpm*'
       - '.github/**'
 
-  merge_group:
-    types:
-      - opened
-      - synchronize
-      - reopened
-    # Only consider those paths to trigger the action
-    paths:
-      - 'packages/**'
-      - 'package.json'
-      - 'pnpm*'
-      - '.github/**'
-
 name: 🔍 Continuous integration for packages
 
 jobs:

.github/workflows/shellcheck.yml

@@ -1,6 +1,5 @@
 ---
-
-on:  # yamllint disable-line rule:truthy
+on: # yamllint disable-line rule:truthy
   pull_request:
 
 name: 🐞 Differential shell-check
@@ -11,16 +10,29 @@ permissions:
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
+    permissions:
+      # required for all workflows
+      security-events: write
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
+
     steps:
       - name: 📦 Check out the codebase
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
 
       - name: 🐞 Differential shell-check
+        id: shellcheck
         uses: redhat-plumbers-in-action/differential-shellcheck@v4
         with:
           severity: warning
           token: ${{ secrets.GITHUB_TOKEN }}
 
-...
+      - if: ${{ always() }}
+        name: 📤 Upload artifact with shell-check defects in SARIF format
+        uses: actions/upload-artifact@v3
+        with:
+          name: Differential shell-check SARIF
+          path: ${{ steps.shellcheck.outputs.sarif }}

Makefile

@@ -15,7 +15,11 @@ DOCKER_COMPOSE ?= docker-compose
 # Support image with all needed binaries, like envsubst, mkcert, wait4x
 SUPPORT_IMAGE ?= wayofdev/build-deps:alpine-latest
 
-BUILDER_PARAMS ?= docker run --rm -i -v $(shell pwd):/home/wod
+BUILDER_PARAMS ?= docker run \
+	--rm \
+	-i \
+	-v $(PWD):/app \
+	--workdir /app
 
 BUILDER ?= $(BUILDER_PARAMS) $(SUPPORT_IMAGE)
 NPM_BIN ?= pnpm
@@ -150,6 +154,10 @@ lint-actions: ## Lint github actions using actionlint
 	$(BUILDER) actionlint -color
 .PHONY: lint-actions
 
+lint-types: ## Run typecheck
+	$(NPM_BIN) lint:types
+.PHONY: lint-types
+
 test: ## Run unit tests
 	$(NPM_BIN) test
 .PHONY: test

packages/commitlint-config/lint-staged.config.js

@@ -1,5 +1,3 @@
-// @ts-check
-
 /**
  * This files overrides the base lint-staged.config.js present in the root directory.
  * It allows to run eslint based the package specific requirements.

packages/eslint-config-bases/package.json

@@ -159,7 +159,7 @@
     "@wayofdev/lint-staged-config": "workspace:*",
     "eslint": "8.36.0",
     "graphql": "16.6.0",
-    "prettier": "2.8.3 || >= 3.0.0-alpha.4",
+    "prettier": "2.8.4",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "tailwindcss": "3.2.7",

packages/htmlhint-config/package.json

@@ -29,8 +29,7 @@
   "scripts": {
     "clean": "rimraf ./dist ./coverage ./tsconfig.tsbuildinfo",
     "lint": "eslint --ext .json --cache --cache-location ../../.cache/eslint/htmlhint-config.eslintcache",
-    "lint:fix": "eslint --ext .json --fix --cache --cache-location ../../.cache/eslint/htmlhint-config.eslintcache",
-    "lint:types": "tsc --project tsconfig.json --noEmit"
+    "lint:fix": "eslint --ext .json --fix --cache --cache-location ../../.cache/eslint/htmlhint-config.eslintcache"
   },
   "devDependencies": {
     "@wayofdev/lint-staged-config": "workspace:*",

packages/secretlint-config/package.json

@@ -30,8 +30,7 @@
   "scripts": {
     "clean": "rimraf ./dist ./coverage ./tsconfig.tsbuildinfo",
     "lint": "eslint --ext .js --cache --cache-location ../../.cache/eslint/secretlint-config.eslintcache",
-    "lint:fix": "eslint --ext .js --fix --cache --cache-location ../../.cache/eslint/secretlint-config.eslintcache",
-    "lint:types": "tsc --project tsconfig.json --noEmit"
+    "lint:fix": "eslint --ext .js --fix --cache --cache-location ../../.cache/eslint/secretlint-config.eslintcache"
   },
   "dependencies": {
     "@secretlint/secretlint-rule-preset-recommend": "6.2.3"

packages/stylelint-config/lint-staged.config.js

@@ -1,5 +1,3 @@
-// @ts-check
-
 /**
  * This files overrides the base lint-staged.config.js present in the root directory.
  * It allows to run eslint based the package specific requirements.

packages/tsconfig-config/package.json

@@ -35,7 +35,7 @@
     "lint:fix": "eslint --ext .ts,.tsx,.js,.jsx,.mjs,.cjs,.mts,.cts --fix --cache --cache-location ../../.cache/eslint/tsconfig-config.eslintcache"
   },
   "peerDependencies": {
-    "typescript": ">= 4"
+    "typescript": "^4.9 || ^5"
   },
   "publishConfig": {
     "access": "public"

renovate.json

@@ -1,8 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:base"
-  ],
+  "extends": ["config:base"],
+  "prHourlyLimit": 0,
   "automerge": true,
   "platformAutomerge": true,
   "lockFileMaintenance": {
@@ -14,10 +13,7 @@
   "packageRules": [
     {
       "description": "Automerge non-major updates",
-      "matchUpdateTypes": [
-        "minor",
-        "patch"
-      ],
+      "matchUpdateTypes": ["minor", "patch"],
       "automerge": true,
       "platformAutomerge": true
     }