Build Refactor / Devops

.devcontainer/Dockerfile

@@ -1,4 +1,3 @@
-
 FROM us-docker.pkg.dev/elide-fw/tools/codespace:latest
 ENTRYPOINT ["/usr/local/share/docker-init.sh"]
 CMD ["sleep", "infinity"]

.devcontainer/devcontainer.json

@@ -8,10 +8,7 @@
     "java.debug.settings.enableRunDebugCodeLens": true,
     "java.test.editor.enableShortcuts": true
   },
-  "runArgs": [
-    "--init",
-    "--privileged"
-  ],
+  "runArgs": ["--init", "--privileged"],
   "overrideCommand": false,
   "extensions": [
     "asf.apache-netbeans-java",

.editorconfig

@@ -16,5 +16,8 @@ indent_size = 2
 [*.{kt,kts}]
 disabled_rules = indent,experimental:argument-list-wrapping,no-wildcard-imports
 
+[packages/proto/build/generated/source/proto]
+disabled_rules = indent,experimental:spacing-between-declarations-with-annotations,parameter-list-wrapping,no-wildcard-imports,experimental:spacing-between-declarations-with-comments,experimental:argument-list-wrapping,comment-spacing,no-semi,no-consecutive-blank-lines,no-blank-line-before-rbrace,curly-spacing
+
 [tools/plugin/gradle-plugin/plugin-build/plugin/src/model/**/*.*]
 disabled_rules = indent,experimental:spacing-between-declarations-with-annotations,parameter-list-wrapping,no-wildcard-imports,experimental:spacing-between-declarations-with-comments,experimental:argument-list-wrapping,comment-spacing,no-semi,no-consecutive-blank-lines,no-blank-line-before-rbrace,curly-spacing

.github/CODEOWNERS

@@ -1 +1 @@
-*.* @sgammon
+*.* @sgammon

.github/CODE_OF_CONDUCT.md

@@ -1,3 +1 @@
-
 **Coming soon.**
-

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,5 +1,3 @@
-
 ## Pull Request Template
 
 **Coming soon.**
-

.github/SECURITY.md

@@ -1,3 +1 @@
-
 **Coming soon.**
-

.github/codeql/codeql-config.yml

@@ -0,0 +1,18 @@
+name: "CodeQL"
+
+languages: java, javascript
+
+queries:
+  - uses: security-and-quality
+
+packs:
+  - codeql/java-queries
+
+paths:
+  - packages
+
+paths-ignore:
+  - node_modules
+  - build
+  - samples
+  - tools/plugin

.github/dependency-review-config.yml

@@ -0,0 +1,11 @@
+license-check: true
+vulnerability-check: true
+fail-on-severity: "high"
+
+allow-ghsas:
+  ## Allow `node-fetch`, because it is unused in actual outputs made by this library.
+  - "GHSA-r683-j2x4-v87g"
+  - "GHSA-w7rc-rwvf-8q5r"
+
+  ## Allow `jszip`, because we do not use it in the browser.
+  - "GHSA-jg8v-48h5-wgxg"

.github/labeler.yml

@@ -1,11 +1,11 @@
 frontend:
-  - any: ['graalvm*/**/*']
-    all: ['module:graalvm']
-  - any: ['frontend/**/*']
-    all: ['module:frontend']
-  - any: ['rpc/**/*']
-    all: ['module:rpc']
-  - any: ['server/**/*']
-    all: ['module:server']
-  - any: ['base/**/*']
-    all: ['module:base']
+  - any: ["graalvm*/**/*"]
+    all: ["module:graalvm"]
+  - any: ["frontend/**/*"]
+    all: ["module:frontend"]
+  - any: ["rpc/**/*"]
+    all: ["module:rpc"]
+  - any: ["server/**/*"]
+    all: ["module:server"]
+  - any: ["base/**/*"]
+    all: ["module:base"]

renovate.json → .github/renovate.json

@@ -1,8 +1,6 @@
 {
   "enabled": true,
-  "extends": [
-    "config:base"
-  ],
+  "extends": ["config:base"],
   "enabledManagers": [
     "bazel",
     "cloudbuild",
@@ -17,9 +15,7 @@
     "gradle",
     "gradle-wrapper"
   ],
-  "baseBranches": [
-    "v3"
-  ],
+  "baseBranches": ["v3"],
   "pinDigests": true,
   "rangeStrategy": "pin",
   "updateLockFiles": true,
@@ -43,7 +39,5 @@
       "groupName": "Firebase"
     }
   ],
-  "postUpdateOptions": [
-    "yarnDedupeHighest"
-  ]
+  "postUpdateOptions": ["yarnDedupeHighest"]
 }