Skip to content

release: v0.0.2 - adopt CLDMV @v4 workflows + vitest-runner test setup - #8

Merged
Shinrai merged 5 commits into
masterfrom
next
Aug 2, 2026
Merged

release: v0.0.2 - adopt CLDMV @v4 workflows + vitest-runner test setup#8
Shinrai merged 5 commits into
masterfrom
next

Conversation

@cldmv-bot

@cldmv-botcldmv-botBot commented Aug 2, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

🚀 What's Changed

💥 Breaking Changes

No breaking changes

✨ Features

No new features

🐛 Bug Fixes

No bug fixes

📦 Dependencies

🔧 Other Changes

👥 Contributors

coverage

MetricCoverage
Statements100.0%
Branches100.0%
Functions100.0%
Lines100.0%

Avg: 100.0% · a3b6f4a · Node lts/*

Shinraiand others added 3 commits August 1, 2026 23:55
@Shinrai
ci: adopt CLDMV@v4workflows + vitest-runner test setup
dc2ae19
- Add the CLDMV @v4 staging-branch workflow set (22 workflows) + .github/dependabot.yml
- Wire vitest + @cldmv/vitest-runner: .configs/vitest.config.mjs, tests/run-vitest.mjs, scripts (incl. build stub)
- Add a vitest characterization suite covering gitmulti.js at 100% coverage
- publish.yml set to release-source-only (not published to npm)
@Shinrai
ci: adopt CLDMV@v4workflows + vitest-runner test setup (#6)
d254eaa
@cldmv-bot
chore: bump version to 0.0.2
b0ef6c7
@cldmv-botcldmv-botBot added ! release → master v4 flow: persistent next → master release PR (carries the next feature release) release Marks a pull request as a pending release — merge to publish a new version semver: patch This release contains only backwards-compatible bug fixes labels Aug 2, 2026
@cldmv-bot

cldmv-botBot commented Aug 2, 2026

Copy link
Copy Markdown
ContributorAuthor

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 5 package(s) with unknown licenses.
  • ⚠️ 5 packages with OpenSSF Scorecard issues.

View full job summary

Shinrai
Shinrai previously approved these changes Aug 2, 2026
View reviewed changes
Shinraiand others added 2 commits August 2, 2026 11:16
@Shinrai
chore(deps): remove unused lodash
32051c6
lodash is not require()d anywhere (the CLI is a commander stub); removing it
resolves the stale Dependabot lodash bump. commander (the only real dep) stays.
@Shinrai
chore(deps): remove unused lodash (#9)
8f02c90
@cldmv-bot

cldmv-botBot commented Aug 2, 2026

Copy link
Copy Markdown
ContributorAuthor

🔒 Dependency Review

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️5 package(s) with unknown licenses
    • CLDMV/.github/.github/workflows/reusable-dependabot-auto-merge.yml@4.*.*
    • CLDMV/.github/.github/workflows/reusable-pr-labeler.yml@4.*.*
    • CLDMV/.github/.github/workflows/workflow-publish.yml@4.*.*
    • CLDMV/.github/.github/workflows/workflow-update-major-version-tags.yml@4.*.*
    • CLDMV/.github/.github/workflows/reusable-welcome.yml@4.*.*
  • ✅ 0 denied package(s)
  • ⚠️5 package(s) with OpenSSF Scorecard score < 3
    • @jridgewell/resolve-uri@3.1.2 — score 2.8
    • estree-walker@3.0.3 — score 2.1
    • html-escaper@2.0.2 — score 2
    • js-tokens@10.0.0 — score 2.9
    • siginfo@2.0.0 — score 2.1

Full job summary

@Shinrai
Shinrai merged commit 76524c4 into masterAug 2, 2026
30 checks passed
@cldmv-bot
cldmv-botBot deleted the next branch August 2, 2026 23:42
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ShinraiShinraiShinrai approved these changes

Assignees

No one assigned

Labels

! release → masterv4 flow: persistent next → master release PR (carries the next feature release)releaseMarks a pull request as a pending release — merge to publish a new versionsemver: patchThis release contains only backwards-compatible bug fixes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Shinrai