Merge branch next into master

.github/workflows/ci.yml

@@ -1,37 +1,62 @@
 name: ci
 on:
   push:
-    branches: [master]
-  pull_request:
-    branches: [master]
+    branches: [master, next]
+    paths-ignore: ['**.md']
+  pull_request: {}
+  workflow_dispatch: {}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.head.label || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: oven-sh/setup-bun@v2
         with:
-          node-version: 18
-      - run: npm install --global pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run build
-      - run: pnpm run test
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: bun run test --coverage-reporter=lcov --coverage-reporter=text
       - name: Report coverage
         if: ${{ github.repository_owner == 'maxmilton' }}
         run: |
-          curl -Lo ./cc-test-reporter https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64
-          chmod +x ./cc-test-reporter
-          ./cc-test-reporter format-coverage -t lcov -o coverage/codeclimate.json coverage/lcov.info
-          ./cc-test-reporter upload-coverage
+          curl -LO https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 \
+               -LO https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64.sha256
+          grep test-reporter-latest-linux-amd64 test-reporter-latest-linux-amd64.sha256 | shasum -a 256 -c -
+          mv test-reporter-latest-linux-amd64 test-reporter
+          chmod +x ./test-reporter
+          ./test-reporter format-coverage -t lcov -o coverage/codeclimate.json coverage/lcov.info
+          ./test-reporter upload-coverage
         env:
           CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
+  e2e:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun playwright install chromium
+      - run: bun run build
+      - run: bun run test:e2e --reporter=dot,html
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: playwright-report
+          path: playwright-report/
+          retention-days: 30
   lint:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: oven-sh/setup-bun@v2
         with:
-          node-version: 18
-      - run: npm install --global pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run lint
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run lint

.github/workflows/codeql-analysis.yml

@@ -1,14 +1,18 @@
 name: codeql
 on:
   push:
-    branches: [master]
-  pull_request:
-    branches: [master]
+    branches: [master, next]
+  pull_request: {}
+  workflow_dispatch: {}
   schedule:
     - cron: '28 6 * * 4'
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.head.label || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 jobs:
   analyze:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     permissions:
       actions: read
       contents: read

.github/workflows/publish.yml

@@ -0,0 +1,38 @@
+name: publish
+on:
+  release:
+    types: [published]
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Check valid version tag
+        run: |
+          [[ "${{ github.ref }}" =~ ^refs/tags/v[0-9]+\.[0-9]+\.[0-9]+(-next.[0-9]+)? ]] || exit 1
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: bun run lint
+      - run: bun run test
+      - uses: actions/setup-node@v4
+        with:
+          node-version: latest
+          registry-url: 'https://registry.npmjs.org'
+      - name: Determine npm tag
+        run: |
+          if [[ "${{ github.ref }}" == *"-next."* ]]; then
+            echo "NPM_TAG=next" >> $GITHUB_ENV
+          else
+            echo "NPM_TAG=latest" >> $GITHUB_ENV
+          fi
+      - run: npm publish --provenance --access public --tag ${{ env.NPM_TAG }}
+        shell: bash
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/release.yml

@@ -0,0 +1,23 @@
+name: release
+on:
+  push:
+    tags: [v*.*.*]
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: bun run lint
+      - run: bun run test
+      - run: gh release create "${{ github.ref_name }}" --draft --generate-notes
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/semgrep-analysis.yml

@@ -2,24 +2,28 @@ name: semgrep
 on:
   push:
     branches: [master, next]
-  pull_request:
-    branches: [master, next]
+  pull_request: {}
+  workflow_dispatch: {}
   schedule:
     - cron: '28 6 * * 4'
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.head.label || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 jobs:
   analyze:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     container:
-      image: returntocorp/semgrep
+      image: semgrep/semgrep
     permissions:
       actions: read
       contents: read
       security-events: write
     steps:
       - uses: actions/checkout@v4
-      - run: semgrep ci --sarif --output=semgrep.sarif || true
+      - run: semgrep ci --sarif > semgrep.sarif
         env:
-          SEMGREP_RULES: p/default
+          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
       - uses: github/codeql-action/upload-sarif@v3
         if: always()
         with:

.github/workflows/typos.yml

@@ -0,0 +1,16 @@
+name: typos
+on:
+  push:
+    branches: [master, next]
+  pull_request: {}
+  workflow_dispatch: {}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.head.label || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+jobs:
+  typos:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: crate-ci/typos@master

.gitignore

@@ -1,6 +1,8 @@
 *-lock.json*
+*-lock.yaml
+*.bak
 *.lock
 *.log
 /coverage/
-dist
-node_modules
+/dist/
+/node_modules/

.vscode/extensions.json

@@ -1,6 +1,8 @@
 {
   "recommendations": [
+    "biomejs.biome",
+    "oven.bun-vscode",
     "dbaeumer.vscode-eslint",
-    "esbenp.prettier-vscode"
+    "tekumara.typos-vscode"
   ]
 }

.vscode/launch.json

@@ -1,41 +1,21 @@
-// https://code.visualstudio.com/docs/editor/debugging#_launch-configurations
 {
   "version": "0.2.0",
   "configurations": [
     {
-      "name": "Attach by Process ID",
-      "type": "pwa-node",
-      "processId": "${command:PickProcess}",
+      "name": "Attach to Bun",
+      "type": "bun",
       "request": "attach",
-      "sourceMaps": true,
-      "skipFiles": ["<node_internals>/**"],
-      "smartStep": true
+      // use `bun --inspect` to open a debug port
+      "url": "ws://localhost:6499/"
     },
-    // https://github.com/Microsoft/vscode-recipes/tree/master/debugging-jest-tests
     {
-      "name": "uvu All",
-      "type": "pwa-node",
+      "name": "bun test <CURRENT_FILE>",
+      "type": "bun",
       "request": "launch",
-      "sourceMaps": true,
-      "skipFiles": [
-        "<node_internals>/**",
-        "${workspaceFolder}/node_modules/uvu/**"
-      ],
-      "program": "${workspaceFolder}/node_modules/uvu/bin.js",
-      "args": ["-r", "tsm", "./test", "\\.test\\.ts$"],
-      "console": "integratedTerminal"
-    },
-    {
-      "name": "uvu Current File",
-      "type": "pwa-node",
-      "request": "launch",
-      "sourceMaps": true,
-      "skipFiles": [
-        "<node_internals>/**",
-        "${workspaceFolder}/node_modules/uvu/**"
-      ],
-      "args": ["-r", "tsm", "${relativeFile}"],
-      "console": "integratedTerminal"
+      "runtimeArgs": ["test"],
+      "program": "${file}",
+      "internalConsoleOptions": "openOnSessionStart"
     }
+    // TODO: Add a way to run all tests
   ]
 }

.vscode/settings.json

@@ -1,26 +1,32 @@
 {
-  "editor.codeActionsOnSave": {
-    "source.fixAll": true
-  },
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
   "editor.formatOnPaste": false,
   "editor.formatOnSave": true,
   "editor.formatOnType": false,
-  "eslint.lintTask.options": "--ignore-path .gitignore",
-  "git.branchProtection": ["master"],
+  "eslint.format.enable": false,
+  "eslint.useFlatConfig": true,
+  "git.branchProtection": ["master", "next"],
   "js/ts.implicitProjectConfig.checkJs": true,
-  "prettier.ignorePath": ".gitignore",
+  "prettier.enable": false, // use biome instead
+  "typescript.enablePromptUseWorkspaceTsdk": true,
+  "typescript.format.enable": false,
   "typescript.tsdk": "node_modules/typescript/lib",
-  "[javascript]": {
+
+  "[css][html][json][jsonc][markdown][scss][xml]": {
     "editor.codeActionsOnSave": {
-      "source.sortImports": true,
-      "source.fixAll": true
-    }
+      "source.fixAll": "explicit",
+      "quickfix.biome": "explicit"
+    },
+    "editor.defaultFormatter": "biomejs.biome"
   },
-  "[typescript]": {
+  "[javascript][typescript]": {
     "editor.codeActionsOnSave": {
-      "source.sortImports": true,
-      "source.fixAll": true
-    }
+      "source.sortImports": "never",
+      "source.organizeImports": "never",
+      "source.organizeImports.biome": "explicit",
+      "source.fixAll": "never",
+      "source.fixAll.eslint": "never",
+      "quickfix.biome": "explicit"
+    },
+    "editor.defaultFormatter": "biomejs.biome"
   }
 }