Merge branch 'main' into perf/hashset-declaration-lookups

Author: jedel1043

.github/ISSUE_TEMPLATE/bug_report.md

@@ -2,7 +2,7 @@
 name: "\U0001F41B Bug report"
 about: Create a report to help us improve
 title: ""
-labels: bug
+type: "Bug"
 assignees: ""
 ---
 

.github/ISSUE_TEMPLATE/custom.md

@@ -1,8 +1,9 @@
 ---
 name: Custom
-about: Open an issue in the repo that is neither a bug or a feature, such a new idea
+about: Open an issue in the repo that is neither a bug or a feature.
 title: ""
 labels: ""
+type: ""
 assignees: ""
 ---
 

.github/ISSUE_TEMPLATE/feature_request.md

@@ -2,7 +2,8 @@
 name: "\U0001F680 Feature request"
 about: Suggest a new ECMAScript feature to be implemented, or a new capability of the engine.
 title: ""
-labels: enhancement
+type: "Feature"
+labels: ""
 assignees: ""
 ---
 

.github/dependabot.yml

@@ -4,6 +4,9 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    labels:
+      - "C-Dependencies"
+      - "C-Actions"
     groups:
       ci-dependencies:
         applies-to: version-updates
@@ -15,6 +18,8 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    labels:
+      - "C-Dependencies"
     groups:
       rust-dependencies:
         applies-to: version-updates
@@ -26,6 +31,8 @@ updates:
     directory: /tests/fuzz/
     schedule:
       interval: weekly
+    labels:
+      - "C-Dependencies"
     groups:
       fuzz-dependencies:
         applies-to: version-updates

.github/labeler.yml

@@ -0,0 +1,86 @@
+C-Actions:
+- changed-files:
+  - any-glob-to-any-file:
+    - '.github/**'
+
+C-AST:
+- changed-files:
+  - any-glob-to-any-file: 'core/ast/**'
+
+C-Benchmark:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'benches/**'
+    - 'core/engine/benches/**'
+
+C-Builtins:
+- all:
+  - changed-files:
+    - any-glob-to-any-file:
+        - 'core/engine/src/builtins/**'
+        - 'core/engine/src/object/builtins/**'
+    - all-globs-to-all-files:
+        - '!core/engine/src/object/builtins/intl/**'
+
+C-CLI:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'cli/**'
+
+C-Dependencies:
+- changed-files:
+  - any-glob-to-any-file:
+    - '**/Cargo.lock'
+    - '**/Cargo.toml'
+
+C-Documentation:
+- changed-files:
+  - any-glob-to-any-file:
+    - '**/*.md'
+
+C-FFI:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'ffi/**'
+
+C-GC:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'core/gc/**'
+
+C-Intl:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'core/engine/src/builtins/intl/**'
+
+C-Javascript:
+- changed-files:
+  - any-glob-to-any-file:
+    - '**/*.js'
+
+C-Parser:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'core/parser/**'
+
+C-Runtime:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'core/runtime/**'
+
+C-Tests:
+- changed-files:
+  - any-glob-to-any-file:
+    - '**/tests/**'
+    - '**/test*'
+
+C-VM:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'core/engine/src/bytecompiler/**'
+    - 'core/engine/src/vm/**'
+
+C-WebAssembly:
+- changed-files:
+  - any-glob-to-any-file:
+    - 'ffi/wasm/**'

.github/release.yml

@@ -7,14 +7,18 @@ changelog:
   categories:
     - title: Feature Enhancements
       labels:
-        - enhancement
+        - A-Enhancement
     - title: Bug Fixes
       labels:
-        - bug
+        - A-Bug
+    - title: Performance Improvements
+      labels:
+        - A-Performance
+        - A-Memory
     - title: Internal Improvements
       labels:
-        - Internal
-        - memory
+        - A-Internal
+        - A-Technical Debt
     - title: Other Changes
       labels:
         - "*"

.github/workflows/codeql.yml

@@ -0,0 +1,41 @@
+name: "CodeQL SAST Scanning"
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 0 * * 0' # Run weekly on Sundays
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'rust' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: none
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+      with:
+        category: "/language:${{matrix.language}}"

.github/workflows/labeler.yml

@@ -0,0 +1,16 @@
+name: "Pull Request Labeler"
+on:
+- pull_request_target
+
+permissions:
+  contents: read
+
+jobs:
+  labeler:
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+    - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6

.github/workflows/nightly_build.yml

@@ -1,6 +1,6 @@
 name: Nightly Build
 permissions:
-  "contents": "write"
+  contents: read
 
 # Schedule this workflow to run at midnight every day
 on:
@@ -10,6 +10,8 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: write
     strategy:
       matrix:
         include:
@@ -25,31 +27,27 @@ jobs:
             os: windows-latest
             binary_extension: ".exe"
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 60
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
         with:
           toolchain: stable
           targets: ${{ matrix.target }}
 
-      - name: Restore cache
-        id: cache
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            target
-          key: ${{ matrix.os }}-${{ runner.arch }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+      - name: Cache Cargo
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
 
       - name: Build
         run: cargo build --target ${{ matrix.target }} --release --locked --bin boa
 
       - name: Upload binaries to release
-        uses: svenstaro/upload-release-action@v2
+        uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # v2
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           file: target/${{ matrix.target }}/release/boa${{ matrix.binary_extension }}

.github/workflows/pr_management.yml

@@ -0,0 +1,78 @@
+name: PR Management
+
+on:
+  pull_request_target:
+    types: [opened, reopened, synchronize, closed]
+
+permissions:
+  contents: read
+
+jobs:
+  manage_pr:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      pull-requests: write
+      issues: write
+    steps:
+      - name: Auto Add Label
+        if: github.event.action == 'opened' || github.event.action == 'reopened' || github.event.action == 'synchronize'
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        with:
+          script: |
+            const labels = await github.rest.issues.listLabelsOnIssue({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number
+            });
+
+            if (labels.data.every(label => label.name != "Waiting On Author")) {
+              github.rest.issues.addLabels({
+                issue_number: context.issue.number,
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                labels: ['Waiting On Review']
+              })
+            }
+
+
+      - name: Auto Remove Label
+        if: github.event.action == 'closed'
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        continue-on-error: true
+        with:
+          script: |
+            try {
+              await github.rest.issues.removeLabel({
+                issue_number: context.issue.number,
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                name: 'Waiting On Review'
+              });
+            } catch (error) {
+              console.log('Label "Waiting On Review" not found or could not be removed.');
+            }
+
+      - name: Auto Assign Milestone
+        if: github.event.action == 'opened'
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        with:
+          script: |
+            // Fetch open milestones and assign the closest one
+            const { data: milestones } = await github.rest.issues.listMilestones({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              state: 'open',
+              sort: 'due_on',
+              direction: 'asc'
+            });
+
+            if (milestones.length > 0) {
+              const latestMilestone = milestones[0];
+              await github.rest.issues.update({
+                issue_number: context.issue.number,
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                milestone: latestMilestone.number
+              });
+            }