From 7253010491a3011a4ed8533cba911be34506b5f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 10 Sep 2025 13:13:22 +0000 Subject: [PATCH 1/2] Bump @trimble-oss/modus-bootstrap from 2.0.13 to 2.1.0 Bumps [@trimble-oss/modus-bootstrap](https://github.com/trimble-oss/modus-bootstrap) from 2.0.13 to 2.1.0. - [Release notes](https://github.com/trimble-oss/modus-bootstrap/releases) - [Commits](https://github.com/trimble-oss/modus-bootstrap/compare/v2.0.13...v2.1.0) --- updated-dependencies: - dependency-name: "@trimble-oss/modus-bootstrap" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- package-lock.json | 16 ++++++++-------- package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index 85d03cb..6e512c7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "1.0.0", "license": "private", "devDependencies": { - "@trimble-oss/modus-bootstrap": "^2.0.13", + "@trimble-oss/modus-bootstrap": "^2.1.0", "@trimble-oss/modus-docs-hugo-theme": "1.0.0-alpha31", "autoprefixer": "10.4.21", "clipboard": "2.0.11", @@ -469,13 +469,13 @@ "dev": true }, "node_modules/@trimble-oss/modus-bootstrap": { - "version": "2.0.13", - "resolved": "https://registry.npmjs.org/@trimble-oss/modus-bootstrap/-/modus-bootstrap-2.0.13.tgz", - "integrity": "sha512-SQ/x7gH5Ao9ezIdPwDK1P6b54UPrXrG7rd5R/tu8e8pg7GwP7KePFKJbis4NXk24n8OJs3Ls4V7PRu9GQsJncg==", + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/@trimble-oss/modus-bootstrap/-/modus-bootstrap-2.1.0.tgz", + "integrity": "sha512-fpRJ8TTetIvcA938Qzb09sXQDAHnz63WIWFcHrpLkzqhETLsgplLD/XfHp2UdvWLb2N2erYgAMzagYFwAp8+SQ==", "dev": true, "license": "MIT", "dependencies": { - "bootstrap": "^5.3.7" + "bootstrap": "^5.3.8" } }, "node_modules/@trimble-oss/modus-docs-hugo-theme": { @@ -955,9 +955,9 @@ } }, "node_modules/bootstrap": { - "version": "5.3.7", - "resolved": "https://registry.npmjs.org/bootstrap/-/bootstrap-5.3.7.tgz", - "integrity": "sha512-7KgiD8UHjfcPBHEpDNg+zGz8L3LqR3GVwqZiBRFX04a1BCArZOz1r2kjly2HQ0WokqTO0v1nF+QAt8dsW4lKlw==", + "version": "5.3.8", + "resolved": "https://registry.npmjs.org/bootstrap/-/bootstrap-5.3.8.tgz", + "integrity": "sha512-HP1SZDqaLDPwsNiqRqi5NcP0SSXciX2s9E+RyqJIIqGo+vJeN5AJVM98CXmW/Wux0nQ5L7jeWUdplCEf0Ee+tg==", "dev": true, "funding": [ { diff --git a/package.json b/package.json index 02e9f9b..28d388a 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "test": "npm-run-all lint-css && npm run lint-html && npx hugo" }, "devDependencies": { - "@trimble-oss/modus-bootstrap": "^2.0.13", + "@trimble-oss/modus-bootstrap": "^2.1.0", "@trimble-oss/modus-docs-hugo-theme": "1.0.0-alpha31", "autoprefixer": "10.4.21", "clipboard": "2.0.11", From 0b208a4a03d42f82610460f40da902c7edd7589d Mon Sep 17 00:00:00 2001 From: Christian Oliff Date: Wed, 10 Sep 2025 22:18:33 +0900 Subject: [PATCH 2/2] Update workflows and instructions for tooling versions Updated CodeQL actions to v3.30.2 in codeql-analysis.yml and pinned Super Linter to commit ffde3b2 (v8.1.0) in super-linter.yml. Also clarified in copilot-instructions.md that CSS uses Modus Bootstrap v2 based on Bootstrap 5. --- .github/copilot-instructions.md | 2 +- .github/workflows/codeql-analysis.yml | 4 ++-- .github/workflows/super-linter.yml | 3 +-- 3 files changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md index 22675ef..23ad6d9 100644 --- a/.github/copilot-instructions.md +++ b/.github/copilot-instructions.md @@ -6,5 +6,5 @@ - The site is written in US English. - Most code is formatted with Prettier. - The site is deployed to Azure SWA. -- The CSS is built with Bootstrap 5. +- The CSS is built with Modus Bootstrap v2 (based on Bootstrap 5). - Page URLs should always end with a trailing slash. diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 7ac5015..9b01526 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -33,12 +33,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0 + uses: github/codeql-action/init@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.30.2 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0 + uses: github/codeql-action/analyze@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.30.2 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml index 78bebed..319344b 100644 --- a/.github/workflows/super-linter.yml +++ b/.github/workflows/super-linter.yml @@ -25,11 +25,10 @@ jobs: persist-credentials: false - name: Lint Code Base - uses: super-linter/super-linter/slim@v8 + uses: super-linter/super-linter/slim@ffde3b2b33b745cb612d787f669ef9442b1339a6 # v8.1.0 env: DEFAULT_BRANCH: main GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - JAVASCRIPT_DEFAULT_STYLE: prettier LINTER_RULES_PATH: / LOG_LEVEL: NOTICE MARKDOWN_CONFIG_FILE: .markdownlint.json