feat: initial commit

.czrc

@@ -0,0 +1,3 @@
+{
+  "path": "cz-conventional-changelog"
+}

.editorconfig

@@ -0,0 +1,21 @@
+# editorconfig.org
+# https://github.com/twbs/bootstrap/blob/main/.editorconfig
+
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 4
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.{yml,yaml}]
+indent_size = 2
+
+[Makefile]
+indent_style = tab

.eslintrc.js

@@ -0,0 +1,3 @@
+module.exports = {
+  extends: './packages/eslint-config',
+};

.github/dependabot.yml

@@ -0,0 +1,27 @@
+---
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    commit-message:
+      include: "scope"
+      prefix: "github-actions"
+    labels:
+      - "deps"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "npm"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      include: "scope"
+      prefix: "npm"
+    labels:
+      - "deps"
+    open-pull-requests-limit: 16
+    versioning-strategy: "increase"
+
+...

.github/labeler.yml

@@ -0,0 +1,17 @@
+---
+
+# this file is for the labeler workflow job
+# Documentation https://github.com/marketplace/actions/labeler
+
+"type: documentation":
+  - assets/**/*
+  - .github/*
+  - ./*.md
+
+"type: maintenance":
+  - .dependabot/*
+  - .github/**/*
+  - app/tests/**/*
+  - tests/**/*
+
+...

.github/workflows/auto-merge.yml

@@ -0,0 +1,44 @@
+# yamllint disable rule:line-length
+---
+
+name: Dependabot auto-approve and auto-merge
+
+on: # yamllint disable-line rule:truthy
+  pull_request:
+
+permissions:
+  pull-requests: write
+  contents: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/[email protected]
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+      - name: Approve a PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Enable auto-merge for Dependabot PRs (for patch and minor updates)
+        if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch' }}
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Request reviews for Dependabot PRs (for all other updates)
+        if: ${{ steps.metadata.outputs.update-type != 'version-update:semver-minor' && steps.metadata.outputs.update-type != 'version-update:semver-patch' }}
+        run: gh pr edit "$PR_URL" --add-reviewer lotyp
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+...

.github/workflows/auto-rebase.yml

@@ -0,0 +1,24 @@
+---
+
+name: Rebase pull requests
+
+on: # yamllint disable-line rule:truthy
+  push:
+  release:
+    types:
+      - published
+
+jobs:
+  auto-rebase:
+    name: Rebase dependabot PRs
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/master' || github.event == 'release'
+    timeout-minutes: 5
+
+    steps:
+      - name: Request rebase
+        uses: 'bbeesley/[email protected]'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+...

.github/workflows/ci.yml

@@ -0,0 +1,64 @@
+---
+
+name: CI
+
+on:  # yamllint disable-line rule:truthy
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+      - develop
+
+jobs:
+  integration:
+    name: Node ${{ matrix.node }} - ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: true
+      matrix:
+        os: ["ubuntu-22.04"]
+        node: ["18"]
+    steps:
+      - name: Check out the codebase
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Setup node
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node }}
+          cache: 'npm'
+          registry-url: 'https://registry.npmjs.org/'
+
+      - name: Load cached frontend dependencies
+        id: cached-yarn-dependencies
+        uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
+
+      - name: Install frontend dependencies
+        if: steps.cached-yarn-dependencies.outputs.cache-hit != 'true'
+        run: yarn install
+
+      - name: Mix frontend code
+        run: pnpm run build
+
+      - if: github.event_name == 'pull_request'
+        name: Validate all commits from PR
+        uses: wagoid/commitlint-github-action@v5
+        env:
+          NODE_PATH: ${{ github.workspace }}/node_modules
+
+      - name: Linting
+        run: pnpm run lint
+
+      - name: Config git user
+        run: |
+          git config --global user.name "${{ github.actor }}"
+          git config --global user.email "${{ github.actor }}@users.noreply.github.com"
+
+...

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,42 @@
+---
+name: CodeQL
+
+'on':
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+  schedule:
+    - cron: '22 6 * * 0'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language:
+          - javascript
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

.github/workflows/label.yml

@@ -0,0 +1,24 @@
+---
+
+# This workflow will triage pull requests and apply a label based on the
+# paths that are modified in the pull request.
+#
+# To use this workflow, you will need to set up a .github/labeler.yml
+# file with configuration.  For more information, see:
+# https://github.com/actions/labeler/blob/master/README.md
+
+name: Add labels
+
+on: # yamllint disable-line rule:truthy
+  pull_request:
+
+jobs:
+  label:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Apply labels
+        uses: actions/labeler@v4
+        with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"
+
+...

.github/workflows/release-please.yml

@@ -0,0 +1,39 @@
+---
+
+# https://github.com/google-github-actions/release-please-action#release-types-supported
+
+name: Release please
+
+on:  # yamllint disable-line rule:truthy
+  push:
+    branches:
+      - master
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create release and changelog
+        uses: google-github-actions/release-please-action@v3
+        id: release
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          release-type: node
+          package-name: npm-shareable-configs
+          default-branch: master
+          changelog-types: |
+            [
+              { "type": "feat", "section": "Features", "hidden": false },
+              { "type": "fix", "section": "Bug Fixes", "hidden": false },
+              { "type": "perf", "section": "Performance Improvements", "hidden": false },
+              { "type": "docs", "section": "Documentation", "hidden": false },
+              { "type": "style", "section": "Styles", "hidden": false },
+              { "type": "deps", "section": "Dependencies", "hidden": false },
+              { "type": "refactor", "section": "Code Refactoring", "hidden": false },
+              { "type": "ci", "section": "Continuous Integration", "hidden": false },
+              { "type": "test", "section": "Tests", "hidden": false },
+              { "type": "revert", "section": "Reverts", "hidden": true },
+              { "type": "build", "section": "Build System", "hidden": true },
+              { "type": "chore", "section": "Miscellaneous", "hidden": true }
+            ]
+...

.gitignore

@@ -0,0 +1,35 @@
+# https://github.com/toptal/gitignore/blob/master/templates/Node.gitignore
+
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+.pnpm-debug.log*
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Turborepo task cache
+.turbo
+
+# Custom Additions
+
+# Bundle output directories
+dist/
+build/
+
+# Jest folder of detailed test coverage
+coverage/

.markdownlint.json

@@ -0,0 +1,3 @@
+{
+  "extends": "./packages/markdownlint-config/index.json"
+}

.npmrc

@@ -0,0 +1 @@
+auto-install-peers=true

.prettierrc.js

@@ -0,0 +1 @@
+module.exports = './packages/prettier-config';

.secretlintrc.js

@@ -0,0 +1 @@
+module.exports = {...require('./packages/secretlint-config/index.json')};