📜 Changelog

✨ What's Changed in v1.0.10

• Commit Range: ➡️ v1.0.9...v1.0.10

🛠️ Bug Fixes

• 58ac381 — (lint) Pin cross-platform Tombi format _{(1 file, +22, -0)}

• ac29f37 — (ci) Apply npm bootstrap policy to ESLint lanes _{(1 file, +1, -1)}

Place package-manager-cache: false on the ESLint compatibility bootstrap call rather than the already-safe post-install cache configuration.

• 97b147b — (ci) Disable npm auto-cache during bootstrap _{(5 files, +12, -0)}

setup-node v6 infers npm caching from packageManager even without a cache input. Disable that bootstrap behavior, install npm 12 outside the npm 12-only workspace, then enable the pinned cache step after the declared version is active.

• e35d404 — (ci) Install npm before configuring cache _{(5 files, +43, -12)}

Prevent setup-node cache discovery from invoking the bundled npm 11 inside an npm 12-only workspace. Establish Node first, install and verify the declared npm version, then configure the dependency cache with the same pinned action.

• 6415256 — (plugin) Restore ESLint 10 rule contracts _{(57 files, +885, -859)}

Declare JavaScript language support on every rule, retain package-derived plugin metadata, tighten typed registries and tests, and normalize generated preset documentation so release verification remains drift-free.

🧪 Testing

• 499c4a0 — (metadata) Cover array-shaped rule docs _{(1 file, +12, -0)}

Exercise the non-record branch in rule metadata validation so malformed array values fail with the documented contract error and patch coverage is complete.

🧹 Chores

• adecafa — Release v1.0.10 _{(2 files, +3, -3)}

• f64a8a9 — (repo) Clean repository metadata _{(2 files, +58, -174)}

Replace unsupported title and body labeler matchers with branch-aware rules, cap large changed-file labeling, update the Vitest config path, and remove the stale editor extension recommendations.

• 6e0b3fb — 🧹 [chore] Adopt shared tooling configs _{(18 files, +2896, -3769)}

🧹 [chore] Replace copied NCU, JSCPD, and TypeDoc helpers with maintained shared packages and refresh tooling dependencies.

🐛 [fix] Preserve repository-specific release, docs, and rule behavior under the upgraded lint stack.

• 09e71a4 — 🔧 [chore] Keep JSCPD and Lychee out of lint all _{(1 file, +1, -1)}

🔧 [chore] Leave the dedicated JSCPD and Lychee scripts available while keeping aggregate CI lint runs focused on existing gates.

• a1a3624 — 🔧 [chore] Adopt shared validation configs _{(5 files, +175, -495)}

🔧 [chore] Wire JSCPD, git-cliff, and Lychee through shared config packages.

👷 [ci] Point release-note generation at the shared git-cliff config where workflows invoke git-cliff directly.

👷 CI/CD

• 9baf038 — (release) Align workflows with npm 12 _{(5 files, +83, -12)}

Install the packageManager-declared npm version across CI and documentation jobs, keep Windows runners on an explicit Bash shell, require clean verification on manual releases, and parse both npm pack JSON metadata shapes.

• cf18e95 — (release) Guard git-cliff note generation _{(8 files, +217, -342)}

Validate the authoritative release tag at HEAD immediately before git-cliff and export GitHub authentication for enriched notes. Standardize Actionlint configuration and direct package CLI usage where applicable.

📦 Dependencies

• b3152ad — (npm) Migrate workspace tooling to npm 12 _{(30 files, +4263, -11409)}

Pin npm 12.0.2, enforce exact lifecycle-script policy, refresh dependencies, and replace copied tooling configs with maintained shared presets. Align TypeScript, Vitest, Stryker, Mermaid, Madge, Grype, package-size, and documentation tooling while preserving repository-specific behavior.

• 36abcb1 — ⬆️ [build] Update npm_and_yarn dependencies _{(0 files, +0, -0)}

• f76401c — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +6, -6)}

• 9d24ff3 — ⬆️ [build] Update npm_and_yarn dependencies _{(0 files, +0, -0)}

• 57be009 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +3, -3)}

• e555a8b — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +10, -10)}

• 8bebb33 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +28, -28)}

• f2bf0e4 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +3, -3)}

• 028bc2a — Bump adm-zip in the npm_and_yarn group across 1 directory (#6) _{(2 files, +3084, -553)}

Bumps the npm_and_yarn group with 1 update in the / directory: adm-zip.

Removes adm-zip

updated-dependencies:

• dependency-name: adm-zip
  dependency-version:
  dependency-type: indirect
  dependency-group: npm_and_yarn
  ...
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

🛡️ Security

• b64a06a — (ci) Pin workflow tool execution _{(4 files, +353, -15)}

• 0b42816 — (security) Harden secret scanning gates _{(5 files, +287, -256)}

Remove unsupported GitHub secret-scanning keys, replace copied broad exclusions with narrow generated-output ignores, baseline seven reviewed false positives, and scan every tracked file through a Windows-safe detect-secrets wrapper.

⭐ Contributors

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.