Merge pull request #371 from htmlhint/copilot/update-eslint-and-github-actions

Updates: ESLint v10, GitHub Actions, Dependabot cooldown, housekeeping

Author: coliff

.gemini/config.yaml

@@ -0,0 +1,17 @@
+# AGENTS.md
+
+<!-- https://agents.md -->
+
+## GitHub Actions
+
+- The GitHub Actions workflows should be placed in the .github/workflows directory.
+- The workflows should be named <workflow-name>.yml.
+- All GitHub Actions should be pinned versions to avoid breaking changes (SHA-1).
+- If using actions/checkout, it should have persist-credentials: false set.
+
+## Dependabot
+
+- GitHub Actions updates should be grouped and updated monthly.
+- npm packages should be grouped and updated monthly.
+- Dependabot config should be formatted with Prettier.
+- Dependencies should have a cooldown period of 7 days

.github/AGENTS.md

@@ -4,6 +4,8 @@ updates:
     directory: "/"
     schedule:
       interval: monthly
+    cooldown:
+      default-days: 7
     labels:
       - github-actions
     groups:
@@ -16,19 +18,25 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7
     versioning-strategy: increase
     open-pull-requests-limit: 1
 
   - package-ecosystem: npm
     directory: "/htmlhint"
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7
     versioning-strategy: increase
     open-pull-requests-limit: 1
 
   - package-ecosystem: npm
     directory: "/htmlhint-server"
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7
     versioning-strategy: increase
     open-pull-requests-limit: 1

.github/copilot-instructions.md

@@ -32,7 +32,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           languages: ${{ matrix.language }}
           queries: +security-and-quality
@@ -41,9 +41,9 @@ jobs:
               - test/*
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/autobuild@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           category: "/language:${{matrix.language}}"

.github/dependabot.yml

@@ -38,6 +38,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           sarif_file: results.sarif

.github/workflows/codeql-analysis.yml

@@ -1909,7 +1909,6 @@ function findTagBoundaries(
   position: number,
 ): { tagStart: number; tagEnd: number } | null {
   // Start from the position and work backwards to find the opening <
-  let tagStart = -1;
   let i = position;
 
   // Look backwards for the start of a tag
@@ -1920,8 +1919,7 @@ function findTagBoundaries(
       const tagEndResult = findTagEnd(text, i);
       if (tagEndResult && tagEndResult.tagEnd >= position) {
         // This tag contains our position
-        tagStart = i;
-        return { tagStart, tagEnd: tagEndResult.tagEnd };
+        return { tagStart: i, tagEnd: tagEndResult.tagEnd };
       }
     }
     i--;
@@ -2694,7 +2692,7 @@ function doValidate(connection: Connection, document: TextDocument): void {
   } catch (err) {
     trace(`[DEBUG] doValidate error: ${err}`);
     if (isErrorWithMessage(err)) {
-      throw new Error(err.message);
+      throw new Error(err.message, { cause: err });
     }
     throw err;
   }