🚀 release: v0.1.1

## Release v0.1.1

### 🌈 Improvements

- reduce cognitive complexity in health check handler (#9)
- detect all Biome finding severities as failures (#8)
- revamp badge row (#21)
- add Renovate commit format and squash strategy (#10)
- consolidate test utilities (#6)

### 🧺 Chores

- update undici to v7
- update install-action digest

---

**After merging**, the tag-release job will automatically:
- Tag this commit as `v0.1.1`
- Create a GitHub Release with the changelog

Author: UniquePixels

.github/workflows/ci-bun.yml

@@ -25,7 +25,7 @@ jobs:
       matrix:
         include:
           - name: Lint
-            command: bun biome ci --reporter=github
+            command: bun scripts/biome-lint.ts ci --reporter=github
           - name: Type Check
             command: echo "::add-matcher::.github/matchers/tsc.json" && tsc --noEmit --skipLibCheck --pretty false
           - name: Test

.github/workflows/ci-release.yml

@@ -48,7 +48,7 @@ jobs:
           token: ${{ steps.app-token.outputs.token }}
 
       - name: Install git-cliff
-        uses: taiki-e/install-action@f23382d582832e41d5eb4fff2bddb06bc5adf8d3 # v2
+        uses: taiki-e/install-action@b18b9d93a43496aeda12369e7563d9251abc2fe1 # v2
         with:
           tool: git-cliff
 
@@ -175,7 +175,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install git-cliff
-        uses: taiki-e/install-action@f23382d582832e41d5eb4fff2bddb06bc5adf8d3 # v2
+        uses: taiki-e/install-action@b18b9d93a43496aeda12369e7563d9251abc2fe1 # v2
         with:
           tool: git-cliff
 

.vscode/settings.json

@@ -1,6 +1,6 @@
 {
 	"sonarlint.connectedMode.project": {
 		"connectionId": "uniquepixels",
-		"projectKey": "UniquePixels_Unicorn"
+		"projectKey": "UniquePixels_unicorn"
 	}
 }

CHANGELOG.md

@@ -5,10 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.1] - 2026-03-09
+
+### 🌈 Improved
+
+- **testing:** consolidate test utilities (#6) ([#6](https://github.com/UniquePixels/unicorn/pull/6)) (@UniquePixels)
+- reduce cognitive complexity in health check handler (#9) ([#9](https://github.com/UniquePixels/unicorn/pull/9)) (@UniquePixels)
+- **readme:** revamp badge row (#21) ([#21](https://github.com/UniquePixels/unicorn/pull/21)) (@UniquePixels)
+- **config:** add Renovate commit format and squash strategy (#10) ([#10](https://github.com/UniquePixels/unicorn/pull/10)) (@UniquePixels)
+
+### 🦠 Fixed
+
+- **qa:** detect all Biome finding severities as failures (#8) ([#8](https://github.com/UniquePixels/unicorn/pull/8)) (@UniquePixels)
 ## [0.1.0] - 2026-03-08
 
 ### 🦄 New
 
-- initial framework
+- initial framework (@UniquePixels)
+[0.1.1]: https://github.com/UniquePixels/unicorn/compare/v0.1.0...v0.1.1
 [0.1.0]: https://github.com/UniquePixels/unicorn/releases/tag/v0.1.0
 

README.md

@@ -7,11 +7,12 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/uniquepixels/unicorn/actions"><img src="https://img.shields.io/github/actions/workflow/status/uniquepixels/unicorn/ci-bun.yml?style=for-the-badge&label=CI" alt="CI" /></a>
   <a href="https://github.com/uniquepixels/unicorn/actions/workflows/ci-codeql.yml"><img src="https://img.shields.io/github/actions/workflow/status/uniquepixels/unicorn/ci-codeql.yml?style=for-the-badge&label=CodeQL" alt="CodeQL" /></a>
-  <a href="https://securityscorecards.dev/viewer/?uri=github.com/uniquepixels/unicorn"><img src="https://img.shields.io/ossf-scorecard/github.com/uniquepixels/unicorn?style=for-the-badge&label=OpenSSF" alt="OpenSSF Scorecard" /></a>
-  <a href="LICENSE"><img src="https://img.shields.io/github/license/uniquepixels/unicorn?style=for-the-badge" alt="License" /></a>
+  <a href="https://sonarcloud.io/summary/overall?id=UniquePixels_unicorn"><img src="https://img.shields.io/sonar/quality_gate/UniquePixels_unicorn?server=https%3A%2F%2Fsonarcloud.io&style=for-the-badge&label=SonarCloud" alt="SonarCloud" /></a>
+  <a href="https://securityscorecards.dev/viewer/?uri=github.com/uniquepixels/unicorn"><img src="https://img.shields.io/ossf-scorecard/github.com/UniquePixels/unicorn?style=for-the-badge&label=OpenSSF%20Scorecard" alt="OpenSSF Scorecard" /></a>
+  <a href="https://www.bestpractices.dev/projects/12120"><img src="https://img.shields.io/cii/summary/12120?style=for-the-badge&label=OpenSSF%20Best%20Practices" alt="OpenSSF Best Practices" /></a>
   <a href="https://discord.gg/Dk8P8h3e9u"><img src="https://img.shields.io/badge/Discord-Join-5865F2?style=for-the-badge&logo=discord&logoColor=white" alt="Discord" /></a>
+  <a href="https://github.com/uniquepixels/unicorn"><img src="https://img.shields.io/badge/built_with-Unicorn-6366f1?style=for-the-badge&logo=data:image/svg%2bxml;base64,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" alt="Built with Unicorn" /></a>
   <a href="https://github.com/UniquePixels/OpenCommunities"><img src=".github/assets/badge.svg" alt="open communities: aligned" /></a>
 </p>
 
@@ -205,9 +206,3 @@ See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, code style, and pu
 [MIT](LICENSE)
 
 ---
-
-<p align="center">
-  <a href="https://github.com/uniquepixels/unicorn">
-    <img src="https://img.shields.io/badge/built_with-Unicorn-6366f1?style=for-the-badge&logo=data:image/svg%2bxml;base64,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" alt="Built with Unicorn" />
-  </a>
-</p>

bun.lock

@@ -1,6 +1,6 @@
 {
 	"name": "unicorn",
-	"version": "0.1.0",
+	"version": "0.1.1",
 	"description": "A type-safe Discord bot framework with modular Sparks, composable Guards, and Zod-validated configuration — built on Discord.js and Bun.",
 	"author": "Brian L. <[email protected]> (http://uniquepixels.xyz)",
 	"contributors": [],
@@ -14,7 +14,7 @@
 		"start": "bun ./src/index.ts",
 		"qa": "bun scripts/qa.ts",
 		"qa:format": "biome format --write",
-		"qa:lint": "biome check",
+		"qa:lint": "bun scripts/biome-lint.ts check",
 		"qa:tsc": "tsc --noEmit --skipLibCheck",
 		"qa:test": "bun test && bun scripts/check-coverage.ts"
 	},
@@ -32,7 +32,7 @@
 		"bun": ">=1.3.0"
 	},
 	"overrides": {
-		"undici": ">=6.23.0"
+		"undici": "^7.22.0"
 	},
 	"dependencies": {
 		"@sentry/bun": "^10.42.0",

package.json

@@ -5,80 +5,55 @@
 		"group:allNonMajor",
 		":separateMajorReleases"
 	],
-	"baseBranchPatterns": [
-		"develop"
-	],
-	"labels": [
-		"dependencies"
-	],
+	"commitMessagePrefix": "🧺 chore(deps):",
+	"commitMessageAction": "update",
+	"automergeStrategy": "squash",
+	"baseBranchPatterns": ["develop"],
+	"labels": ["dependencies"],
 	"timezone": "America/Chicago",
 	"rangeStrategy": "bump",
 	"minimumReleaseAge": "3 days",
 	"lockFileMaintenance": {
 		"enabled": true,
-		"schedule": [
-			"before 6am on monday"
-		],
+		"schedule": ["before 6am on monday"],
 		"automerge": true
 	},
 	"packageRules": [
 		{
 			"description": "Automerge non-major updates during work hours",
-			"matchUpdateTypes": [
-				"minor",
-				"patch"
-			],
+			"matchUpdateTypes": ["minor", "patch"],
 			"automerge": true,
 			"platformAutomerge": false,
-			"schedule": [
-				"after 9am and before 5pm every weekday"
-			],
-			"automergeSchedule": [
-				"after 9am and before 5pm every weekday"
-			]
+			"schedule": ["after 9am and before 5pm every weekday"],
+			"automergeSchedule": ["after 9am and before 5pm every weekday"]
 		},
 		{
 			"description": "Group Bun runtime, types, and Docker image — require review",
 			"groupName": "bun",
-			"matchDepNames": [
-				"bun",
-				"@types/bun",
-				"oven/bun"
-			],
+			"matchDepNames": ["bun", "@types/bun", "oven/bun"],
 			"automerge": false
 		},
 		{
 			"description": "Group Biome linter and tooling — require review",
 			"groupName": "biome",
-			"matchDepNames": [
-				"biome",
-				"@biomejs/biome"
-			],
+			"matchDepNames": ["biome", "@biomejs/biome"],
 			"automerge": false
 		},
 		{
 			"description": "Group Prisma packages — require review",
 			"groupName": "prisma",
-			"matchDepNames": [
-				"/^prisma$/",
-				"/^@prisma\\//"
-			],
+			"matchDepNames": ["/^prisma$/", "/^@prisma\\//"],
 			"automerge": false
 		},
 		{
 			"description": "Group Discord.js ecosystem",
 			"groupName": "discord.js",
-			"matchDepNames": [
-				"/^discord\\.js$/",
-				"/^@discordjs\\//"
-			]
+			"matchDepNames": ["/^discord\\.js$/", "/^@discordjs\\//"]
 		},
 		{
 			"description": "Group Sentry packages",
 			"groupName": "sentry",
-			"matchDepNames": [
-				"/^@sentry\\//"
-			]
+			"matchDepNames": ["/^@sentry\\//"]
 		}
 	]
 }

renovate.json

@@ -0,0 +1,52 @@
+/**
+ * Biome lint wrapper that treats all finding severities (info, warn, error) as failures.
+ *
+ * Biome's exit code only reflects `error` findings by default, and `--error-on-warnings`
+ * covers `warn` but there is no equivalent for `info`. This wrapper runs biome with all
+ * provided arguments, streams output through to the caller (preserving GitHub reporter
+ * annotations in CI), and exits non-zero if any findings are detected in the output.
+ *
+ * Usage:
+ *   bun scripts/biome-lint.ts check              # local QA
+ *   bun scripts/biome-lint.ts ci --reporter=github  # CI
+ */
+
+import process from 'node:process';
+
+/** Matches Biome's "Found N error(s)" / "Found N info" / "Found N warn" output. */
+const RE_FOUND_FINDINGS = /Found \d+ (error|warn|info)/;
+
+const args = process.argv.slice(2);
+
+if (args.length === 0) {
+	process.stderr.write(
+		'Usage: bun scripts/biome-lint.ts <check|ci> [...biome flags]\n',
+	);
+	process.exit(1);
+}
+
+const proc = Bun.spawn(['bun', 'biome', ...args], {
+	stdout: 'pipe',
+	stderr: 'pipe',
+});
+
+const [stdout, stderr] = await Promise.all([
+	new Response(proc.stdout).text(),
+	new Response(proc.stderr).text(),
+]);
+
+const code = await proc.exited;
+
+// Write buffered output so callers (QA script, CI) see it as-is
+if (stdout) {
+	process.stdout.write(stdout);
+}
+if (stderr) {
+	process.stderr.write(stderr);
+}
+
+const combined = `${stdout}${stderr}`;
+const hasFindings = RE_FOUND_FINDINGS.test(combined);
+
+// Exit non-zero if biome failed OR any findings were detected
+process.exit(code !== 0 || hasFindings ? 1 : 0);

scripts/biome-lint.ts

@@ -47,6 +47,8 @@ const RE_FORMATTED_FILES = /Formatted (\d+) file/;
 const RE_CHECKED_FILES = /Checked (\d+) file/;
 /** Matches Biome's "Found N error(s)" output. */
 const RE_FOUND_ERRORS = /Found (\d+) error/;
+/** Matches all Biome "Found N info" or "Found N warn" occurrences in output. */
+const RE_FOUND_INFO_WARN_G = /Found (\d+) (info|warn)/g;
 /** Matches Bun test runner's "N pass" output. */
 const RE_TEST_PASS = /(\d+) pass/;
 /** Matches Bun test runner's "N fail" output. */
@@ -97,8 +99,15 @@ const steps: StepDef[] = [
 				const checked = RE_CHECKED_FILES.exec(out);
 				return checked ? `${checked[1]} files` : '';
 			}
+			const parts: string[] = [];
 			const errors = RE_FOUND_ERRORS.exec(out);
-			return errors ? `${errors[1]} error(s)` : 'failed';
+			if (errors) {
+				parts.push(`${errors[1]} error(s)`);
+			}
+			for (const match of out.matchAll(RE_FOUND_INFO_WARN_G)) {
+				parts.push(`${match[1]} ${match[2]} finding(s)`);
+			}
+			return parts.length > 0 ? parts.join(', ') : 'failed';
 		},
 	},
 	{
@@ -163,7 +172,6 @@ async function runStep(def: StepDef): Promise<StepResult> {
 	]);
 	const code = await proc.exited;
 	const output = `${stdout}${stderr}`.trim();
-
 	return {
 		name: def.name,
 		passed: code === 0,
@@ -293,13 +301,45 @@ function printAndExit(results: StepResult[], passed: boolean): never {
 	process.exit(passed ? 0 : 1);
 }
 
+/** CSI u prefix used by the Kitty keyboard protocol (`ESC [`). */
+const CSI_PREFIX = '\x1b[';
+
+/**
+ * Normalizes Kitty keyboard protocol sequences to standard key values.
+ *
+ * Kitty protocol encodes keys as `ESC [ <code> ; <modifiers> u`. This converts
+ * them to their standard equivalents so key handlers work across terminals.
+ */
+function normalizeKey(raw: string): string {
+	if (!(raw.startsWith(CSI_PREFIX) && raw.endsWith('u'))) {
+		return raw;
+	}
+
+	const inner = raw.slice(CSI_PREFIX.length, -1);
+	const [codeStr, modStr] = inner.split(';');
+	const code = Number(codeStr);
+	const mods = modStr ? Number(modStr) - 1 : 0;
+
+	// biome-ignore lint/suspicious/noBitwiseOperators: bitwise mask extracts Ctrl modifier flag per Kitty protocol spec
+	const isCtrl = (mods & 4) !== 0;
+
+	// Ctrl+letter → control character (e.g. Ctrl+C → 0x03)
+	if (isCtrl && code >= 97 && code <= 122) {
+		return String.fromCodePoint(code - 96);
+	}
+
+	return String.fromCodePoint(code);
+}
+
 /** Handles a single keypress in interactive mode. */
 function handleKey(
-	key: string,
+	raw: string,
 	state: { cursor: number },
 	results: StepResult[],
 	passed: boolean,
 ): void {
+	const key = normalizeKey(raw);
+
 	if (key === 'q' || key === '\x03') {
 		process.stdout.write(SHOW_CURSOR);
 		process.stdin.setRawMode(false);
@@ -316,7 +356,7 @@ function handleKey(
 		render(results, state.cursor, passed);
 	}
 
-	if (key === '\r' || key === ' ') {
+	if (key === '\r' || key === '\n' || key === ' ') {
 		const selected = results[state.cursor];
 		if (selected) {
 			selected.expanded = !selected.expanded;