From e36ccd2558823af2cc9567ab34c28228886c241d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 3 Aug 2022 18:34:02 +0000 Subject: [PATCH 1/5] Bump eslint-plugin-lit-a11y from 2.2.1 to 2.2.2 Bumps [eslint-plugin-lit-a11y](https://github.com/open-wc/open-wc/tree/HEAD/packages/eslint-plugin-lit-a11y) from 2.2.1 to 2.2.2. - [Release notes](https://github.com/open-wc/open-wc/releases) - [Changelog](https://github.com/open-wc/open-wc/blob/master/packages/eslint-plugin-lit-a11y/CHANGELOG.md) - [Commits](https://github.com/open-wc/open-wc/commits/eslint-plugin-lit-a11y@2.2.2/packages/eslint-plugin-lit-a11y) --- updated-dependencies: - dependency-name: eslint-plugin-lit-a11y dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- src/Umbraco.Web.UI.Client/package-lock.json | 14 +++++++------- src/Umbraco.Web.UI.Client/package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/src/Umbraco.Web.UI.Client/package-lock.json b/src/Umbraco.Web.UI.Client/package-lock.json index 6395c8a501..c424ce0d3a 100644 --- a/src/Umbraco.Web.UI.Client/package-lock.json +++ b/src/Umbraco.Web.UI.Client/package-lock.json @@ -38,7 +38,7 @@ "eslint-import-resolver-typescript": "^3.4.0", "eslint-plugin-import": "^2.26.0", "eslint-plugin-lit": "^1.6.1", - "eslint-plugin-lit-a11y": "^2.2.1", + "eslint-plugin-lit-a11y": "^2.2.2", "eslint-plugin-storybook": "^0.6.2", "lit-html": "^2.2.7", "msw": "^0.44.2", @@ -12093,9 +12093,9 @@ } }, "node_modules/eslint-plugin-lit-a11y": { - "version": "2.2.1", - "resolved": "https://registry.npmjs.org/eslint-plugin-lit-a11y/-/eslint-plugin-lit-a11y-2.2.1.tgz", - "integrity": "sha512-Ao2MP3NjMGON8x8sdwGgmVW79MiQ4nOB7OQzodLPk4sljGAvdyXulyGVNY6PGWfIPVee+3X262z4Aq2poXO+LA==", + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/eslint-plugin-lit-a11y/-/eslint-plugin-lit-a11y-2.2.2.tgz", + "integrity": "sha512-9dJfnwPOOA6x7Ow/+GFoOt1hr4mSNrF6KBWQ2OFFAY/9aBYtyBX4fRbpxqS2y3ld66/bjWru2+LGWgNVr5GxzQ==", "dev": true, "dependencies": { "aria-query": "^4.2.2", @@ -34163,9 +34163,9 @@ } }, "eslint-plugin-lit-a11y": { - "version": "2.2.1", - "resolved": "https://registry.npmjs.org/eslint-plugin-lit-a11y/-/eslint-plugin-lit-a11y-2.2.1.tgz", - "integrity": "sha512-Ao2MP3NjMGON8x8sdwGgmVW79MiQ4nOB7OQzodLPk4sljGAvdyXulyGVNY6PGWfIPVee+3X262z4Aq2poXO+LA==", + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/eslint-plugin-lit-a11y/-/eslint-plugin-lit-a11y-2.2.2.tgz", + "integrity": "sha512-9dJfnwPOOA6x7Ow/+GFoOt1hr4mSNrF6KBWQ2OFFAY/9aBYtyBX4fRbpxqS2y3ld66/bjWru2+LGWgNVr5GxzQ==", "dev": true, "requires": { "aria-query": "^4.2.2", diff --git a/src/Umbraco.Web.UI.Client/package.json b/src/Umbraco.Web.UI.Client/package.json index 405fe97e3b..ae8b9215b8 100644 --- a/src/Umbraco.Web.UI.Client/package.json +++ b/src/Umbraco.Web.UI.Client/package.json @@ -63,7 +63,7 @@ "eslint-import-resolver-typescript": "^3.4.0", "eslint-plugin-import": "^2.26.0", "eslint-plugin-lit": "^1.6.1", - "eslint-plugin-lit-a11y": "^2.2.1", + "eslint-plugin-lit-a11y": "^2.2.2", "eslint-plugin-storybook": "^0.6.2", "lit-html": "^2.2.7", "msw": "^0.44.2", From a6e9d363f07ac33d2eee4ab25d5357e5a8fc2685 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 4 Aug 2022 07:58:35 +0000 Subject: [PATCH 2/5] Bump eslint-plugin-storybook from 0.6.2 to 0.6.3 Bumps [eslint-plugin-storybook](https://github.com/storybookjs/eslint-plugin-storybook) from 0.6.2 to 0.6.3. - [Release notes](https://github.com/storybookjs/eslint-plugin-storybook/releases) - [Changelog](https://github.com/storybookjs/eslint-plugin-storybook/blob/main/CHANGELOG.md) - [Commits](https://github.com/storybookjs/eslint-plugin-storybook/compare/v0.6.2...v0.6.3) --- updated-dependencies: - dependency-name: eslint-plugin-storybook dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- src/Umbraco.Web.UI.Client/package-lock.json | 20 +++++++++++--------- src/Umbraco.Web.UI.Client/package.json | 2 +- 2 files changed, 12 insertions(+), 10 deletions(-) diff --git a/src/Umbraco.Web.UI.Client/package-lock.json b/src/Umbraco.Web.UI.Client/package-lock.json index c424ce0d3a..dacfd86a93 100644 --- a/src/Umbraco.Web.UI.Client/package-lock.json +++ b/src/Umbraco.Web.UI.Client/package-lock.json @@ -39,7 +39,7 @@ "eslint-plugin-import": "^2.26.0", "eslint-plugin-lit": "^1.6.1", "eslint-plugin-lit-a11y": "^2.2.2", - "eslint-plugin-storybook": "^0.6.2", + "eslint-plugin-storybook": "^0.6.3", "lit-html": "^2.2.7", "msw": "^0.44.2", "msw-storybook-addon": "^1.6.3", @@ -12121,14 +12121,15 @@ "dev": true }, "node_modules/eslint-plugin-storybook": { - "version": "0.6.2", - "resolved": "https://registry.npmjs.org/eslint-plugin-storybook/-/eslint-plugin-storybook-0.6.2.tgz", - "integrity": "sha512-lL69axZtp+IhF3Y812dQL9JJh9dsuInrdVA4ARAAtcyEOlvDOQXBNLwaFizche/jah7kfuLNhvkR62+UEG9KWA==", + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/eslint-plugin-storybook/-/eslint-plugin-storybook-0.6.3.tgz", + "integrity": "sha512-e0zIqHsgUz3Bs3PSyiYwCZ3QqyVmRgNQceBtYlnWXscCJLgdvBH8WwqBOvZUb3SAB4ZTYDLG3GMqpxI6PJZwKg==", "dev": true, "dependencies": { "@storybook/csf": "^0.0.1", "@typescript-eslint/experimental-utils": "^5.3.0", - "requireindex": "^1.1.0" + "requireindex": "^1.1.0", + "ts-dedent": "^2.2.0" }, "engines": { "node": "12.x || 14.x || >= 16" @@ -34190,14 +34191,15 @@ } }, "eslint-plugin-storybook": { - "version": "0.6.2", - "resolved": "https://registry.npmjs.org/eslint-plugin-storybook/-/eslint-plugin-storybook-0.6.2.tgz", - "integrity": "sha512-lL69axZtp+IhF3Y812dQL9JJh9dsuInrdVA4ARAAtcyEOlvDOQXBNLwaFizche/jah7kfuLNhvkR62+UEG9KWA==", + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/eslint-plugin-storybook/-/eslint-plugin-storybook-0.6.3.tgz", + "integrity": "sha512-e0zIqHsgUz3Bs3PSyiYwCZ3QqyVmRgNQceBtYlnWXscCJLgdvBH8WwqBOvZUb3SAB4ZTYDLG3GMqpxI6PJZwKg==", "dev": true, "requires": { "@storybook/csf": "^0.0.1", "@typescript-eslint/experimental-utils": "^5.3.0", - "requireindex": "^1.1.0" + "requireindex": "^1.1.0", + "ts-dedent": "^2.2.0" }, "dependencies": { "@storybook/csf": { diff --git a/src/Umbraco.Web.UI.Client/package.json b/src/Umbraco.Web.UI.Client/package.json index ae8b9215b8..0108b34857 100644 --- a/src/Umbraco.Web.UI.Client/package.json +++ b/src/Umbraco.Web.UI.Client/package.json @@ -64,7 +64,7 @@ "eslint-plugin-import": "^2.26.0", "eslint-plugin-lit": "^1.6.1", "eslint-plugin-lit-a11y": "^2.2.2", - "eslint-plugin-storybook": "^0.6.2", + "eslint-plugin-storybook": "^0.6.3", "lit-html": "^2.2.7", "msw": "^0.44.2", "msw-storybook-addon": "^1.6.3", From 46ec8de5db4c15c3adf8fce9b20f52e6a73fa3e5 Mon Sep 17 00:00:00 2001 From: Jacob Overgaard <752371+iOvergaard@users.noreply.github.com> Date: Thu, 4 Aug 2022 11:21:47 +0200 Subject: [PATCH 3/5] add storybook eslint plugin to extensions --- src/Umbraco.Web.UI.Client/.eslintrc.json | 1 + 1 file changed, 1 insertion(+) diff --git a/src/Umbraco.Web.UI.Client/.eslintrc.json b/src/Umbraco.Web.UI.Client/.eslintrc.json index a3bfe0790b..0d13a00b4d 100644 --- a/src/Umbraco.Web.UI.Client/.eslintrc.json +++ b/src/Umbraco.Web.UI.Client/.eslintrc.json @@ -23,6 +23,7 @@ "plugin:@typescript-eslint/recommended", "plugin:lit/recommended", "plugin:lit-a11y/recommended", + "plugin:storybook/recommended", "prettier" ], "env": { From 6cd687dc4e66d6243346f71048af33143eab49c6 Mon Sep 17 00:00:00 2001 From: Jacob Overgaard <752371+iOvergaard@users.noreply.github.com> Date: Thu, 4 Aug 2022 11:23:52 +0200 Subject: [PATCH 4/5] test build on main branch --- src/Umbraco.Web.UI.Client/.github/workflows/build_test.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/Umbraco.Web.UI.Client/.github/workflows/build_test.yml b/src/Umbraco.Web.UI.Client/.github/workflows/build_test.yml index f5f425f12f..23e2c23745 100644 --- a/src/Umbraco.Web.UI.Client/.github/workflows/build_test.yml +++ b/src/Umbraco.Web.UI.Client/.github/workflows/build_test.yml @@ -4,6 +4,8 @@ name: Build and test on: + push: + branches: [ main ] pull_request: branches: [ main ] From 3a4664a816dfb7cd6f38af220dfeb052890fbf5e Mon Sep 17 00:00:00 2001 From: Jacob Overgaard <752371+iOvergaard@users.noreply.github.com> Date: Thu, 4 Aug 2022 11:25:54 +0200 Subject: [PATCH 5/5] Create codeql.yml --- .../.github/workflows/codeql.yml | 56 +++++++++++++++++++ 1 file changed, 56 insertions(+) create mode 100644 src/Umbraco.Web.UI.Client/.github/workflows/codeql.yml diff --git a/src/Umbraco.Web.UI.Client/.github/workflows/codeql.yml b/src/Umbraco.Web.UI.Client/.github/workflows/codeql.yml new file mode 100644 index 0000000000..796d548755 --- /dev/null +++ b/src/Umbraco.Web.UI.Client/.github/workflows/codeql.yml @@ -0,0 +1,56 @@ +# For most projects, this workflow file will not need changing; you simply need +# to commit it to your repository. +# +# You may wish to alter this file to override the set of languages analyzed, +# or to provide custom queries or build logic. +# +# ******** NOTE ******** +# We have attempted to detect the languages in your repository. Please check +# the `language` matrix defined below to confirm you have the correct set of +# supported CodeQL languages. +# +name: "CodeQL" + +on: + push: + branches: [ "main" ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ "main" ] + schedule: + - cron: '33 2 * * 1' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ 'javascript' ] + # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] + # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file. + # By default, queries listed here will override any specified in a config file. + # Prefix the list here with "+" to use these queries and those in the config file. + + # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs + # queries: security-extended,security-and-quality + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2