Sync upstream ctrf-io/main (picks up Node 24 runtime)

.devcontainer/devcontainer.json

@@ -1,6 +1,6 @@
 {
   "name": "GitHub Actions (TypeScript)",
-  "image": "mcr.microsoft.com/devcontainers/typescript-node:20",
+  "image": "mcr.microsoft.com/devcontainers/typescript-node:24",
   "postCreateCommand": "npm install",
   "customizations": {
     "codespaces": {

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'monthly'

.github/workflows/build-and-test.yaml

@@ -10,16 +10,42 @@ on:
   schedule:
     - cron: '0 2 * * *'
 
+permissions: {}
+
 jobs:
+  check-build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+      - name: Install dependencies
+        run: npm install
+      - name: Rebuild dist
+        run: npm run package
+      - name: Check for uncommitted build changes
+        run: |
+          if ! git diff --exit-code dist/; then
+            echo "::error::dist/ is out of date. Run 'npm run all' locally and commit the result."
+            exit 1
+          fi
+
   build-and-test:
+    needs: check-build
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
+      pull-requests: write
+      actions: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install dependencies
         run: npm install
       - name: Build
-        run: npm run all:action
+        run: npm run all
       - name: Publish Test Report
         uses: ./
         with:
@@ -60,9 +86,11 @@ jobs:
   standard-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Basic Test Report
         uses: ./
         with:
@@ -73,9 +101,12 @@ jobs:
   github-report-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Detailed Test Report
         uses: ./
         with:
@@ -88,9 +119,12 @@ jobs:
   detailed-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Detailed Test Report
         uses: ./
         with:
@@ -104,9 +138,12 @@ jobs:
   failed-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Failed Test Reports
         uses: ./
         with:
@@ -120,9 +157,12 @@ jobs:
   flaky-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Flaky Test Reports
         uses: ./
         with:
@@ -135,9 +175,11 @@ jobs:
   ai-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: AI Test Reports
         uses: ./
         with:
@@ -149,9 +191,11 @@ jobs:
   skipped-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Skipped Test Reports
         uses: ./
         with:
@@ -162,9 +206,11 @@ jobs:
   suite-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Suite Test Reports
         uses: ./
         with:
@@ -176,9 +222,11 @@ jobs:
   commit-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Commit Test Reports
         uses: ./
         with:
@@ -189,9 +237,11 @@ jobs:
   custom-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Custom Test Reports
         uses: ./
         with:
@@ -203,9 +253,11 @@ jobs:
   community-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Community Test Reports
         uses: ./
         with:
@@ -217,9 +269,13 @@ jobs:
   previous-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
+      actions: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install dependencies
         run: npm install
       - name: Modify reports
@@ -240,9 +296,12 @@ jobs:
   report-order-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install dependencies
         run: npm install
       - name: Modify reports
@@ -262,9 +321,12 @@ jobs:
   collapse-large-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install dependencies
         run: npm install
       - name: Modify reports
@@ -283,9 +345,12 @@ jobs:
   junit-to-ctrf-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install dependencies
         run: npm install
       - name: Modify reports
@@ -316,9 +381,12 @@ jobs:
   file-reports-test:
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Install dependencies
         run: npm install
       - name: Modify reports

.node-version

@@ -1 +1 @@
-21.6.2
+24.14.0

README.md

@@ -17,7 +17,7 @@ your project's needs, ensuring that test results are always where you need them.
 You can support the project by:
 
 - Giving this repository a ⭐
-- [Following the @ctrf organization on GitHub](https://github.com/ctrf-io)
+- Starring the CTRF specification repository (https://github.com/ctrf-io/ctrf) which helps support the standard.
 
 ## Key Features
 

__tests__/ctrf/helpers.test.ts

@@ -1,4 +1,4 @@
-import { getEmoji, normalizeSuite, stripAnsi } from '../../src/ctrf/helpers'
+import { getEmoji, normalizeSuite, stripAnsi } from '../../src/ctrf/helpers.js'
 
 describe('getEmoji', () => {
   it('returns the correct emoji for "passed"', () => {

__tests__/ctrf/report-preparation.test.ts

@@ -1,6 +1,6 @@
-import { Inputs, ReportConditionals } from '../../src/types'
-import { Report } from '../../src/ctrf/core/types/ctrf'
-import { addFooterDisplayFlags } from '../../src/ctrf/report-conditionals'
+import { Inputs, ReportConditionals } from '../../src/types/index.js'
+import { Report } from '../../src/ctrf/core/types/ctrf.js'
+import { addFooterDisplayFlags } from '../../src/ctrf/report-conditionals.js'
 
 describe('addFooterDisplayFlags', () => {
   const createBaseReport = (): Report => ({

__tests__/github/core.test.ts

@@ -1,11 +1,12 @@
+import { vi, describe, it, expect, beforeEach } from 'vitest'
 import * as core from '@actions/core'
 import { context } from '@actions/github'
-import { addReportFooters } from '../../src/github/core'
-import { Report } from '../../src/ctrf/core/types/ctrf'
-import { Inputs, ReportConditionals } from '../../src/types'
+import { addReportFooters } from '../../src/github/core.js'
+import { Report } from '../../src/ctrf/core/types/ctrf.js'
+import { Inputs, ReportConditionals } from '../../src/types/index.js'
 
-jest.mock('@actions/core')
-jest.mock('@actions/github', () => ({
+vi.mock('@actions/core')
+vi.mock('@actions/github', () => ({
   context: {
     serverUrl: 'https://github.com',
     repo: {
@@ -17,10 +18,10 @@ jest.mock('@actions/github', () => ({
 }))
 
 describe('addReportFooters', () => {
-  const mockCore = jest.mocked(core)
+  const mockCore = vi.mocked(core)
 
   beforeEach(() => {
-    jest.clearAllMocks()
+    vi.clearAllMocks()
     mockCore.summary.addRaw.mockReturnValue(mockCore.summary)
     mockCore.summary.addEOL.mockReturnValue(mockCore.summary)
   })