XS⚠️ ◾ [WIP2] Enable Biome Linting by muiriswoulfe · Pull Request #751 · microsoft/PR-Metrics

muiriswoulfe · 2026-03-30T13:25:21Z

Summary

Enables Biome linting in the Super-Linter GitHub Actions workflow by removing the VALIDATE_BIOME_LINT: false override and resolving all resulting lint violations across the codebase.

Adds a biome.json configuration scoped to TypeScript source files, disabling only the noUselessSwitchCase rule to preserve intentional fall-through patterns
Applies Biome auto-fixes for type-only imports, Node.js import protocol prefixes, Number.isNaN()/Number.isFinite() replacements, and other recommended rules
Renames the toString export in the converter utility to convertToString to avoid shadowing the global name

Combine the default switch case with DeletedFile to log skipped file types instead of silently breaking. Remove unnecessary eslint-disable and c8 ignore comments. Also add biome.json configuration file for the repository.

muiriswoulfe · 2026-03-30T13:28:09Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Fail ❌
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Pass ✅
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

EDITORCONFIG

�[33;1mbiome.json:�[33;0m
�[31;1m	2-13: Wrong indent style found (tabs instead of spaces)�[33;0m
�[31;1m
1 errors found�[33;0m

omex-github-bot-external · 2026-03-30T13:30:50Z

PR Metrics

✔ Thanks for keeping your pull request small.
⚠️ Consider adding additional tests.

	Lines
Product Code	111
Test Code	98
Subtotal	209
Ignored Code	89
Total	298

Metrics computed by PR Metrics. Add it to your Azure DevOps and GitHub PRs!

package-lock.json

Copilot

Pull request overview

Enables Biome linting in CI by adding a Biome configuration and applying lint-driven refactors/formatting changes across the TypeScript codebase, alongside workflow/runtime updates.

Changes:

Add biome.json and update CI lint configuration to enable Biome linting.
Apply Biome-driven refactors (type-only imports, node: protocol imports, Number.isNaN/isFinite, converter rename).
Update declared/used Node runtimes (Action, workflows, Azure DevOps task metadata, engines).

Reviewed changes

Copilot reviewed 70 out of 72 changed files in this pull request and generated 24 comments.

Show a summary per file

File	Description
src/task/tests/wrappers/execSyncResult.ts	Type-only import cleanup (tests)
src/task/tests/wrappers/errorWithStatus.ts	Type-only import cleanup (tests)
src/task/tests/utilities/validator.spec.ts	Update converter API usage in tests
src/task/tests/utilities/converter.spec.ts	Update converter API usage in tests
src/task/tests/utilities/converter.property.spec.ts	Update converter API usage in tests
src/task/tests/testUtilities/resolvableInstance.ts	Type-only import cleanup (tests)
src/task/tests/testUtilities/createRequestError.ts	Type-only import cleanup (tests)
src/task/tests/task.spec.ts	`node:` imports + type-only imports (tests)
src/task/tests/runners/runnerInvoker.spec.ts	Type-only import cleanup (tests)
src/task/tests/runners/gitHubRunnerInvoker.spec.ts	`node:` imports + type-only imports (tests)
src/task/tests/runners/azurePipelinesRunnerInvoker.spec.ts	`node:` imports + type-only imports (tests)
src/task/tests/repos/tokenManager.spec.ts	Type-only import cleanup (tests)
src/task/tests/repos/reposInvoker.spec.ts	Type-only import cleanup (tests)
src/task/tests/repos/gitHubReposInvokerConstants.ts	Type-only import cleanup (tests)
src/task/tests/repos/gitHubReposInvoker.spec.ts	Type-only import cleanup + converter rename (tests)
src/task/tests/repos/azureReposInvoker.spec.ts	Type-only import cleanup + converter rename (tests)
src/task/tests/pullRequests/pullRequestComments.spec.ts	Type-only import cleanup + converter rename (tests)
src/task/tests/pullRequests/pullRequest.spec.ts	Converter rename (tests)
src/task/tests/metrics/inputs.spec.ts	Converter rename (tests)
src/task/tests/git/octokitGitDiffParser.spec.ts	Type-only import cleanup (tests)
src/task/tests/git/gitInvoker.spec.ts	Type-only import cleanup (tests)
src/task/tests/Strings/resources.resjson.spec.ts	`node:` imports + type-only imports (tests)
src/task/task.loc.json	Azure task Node handler + agent min version
src/task/task.json	Azure task Node handler + agent min version
src/task/src/wrappers/octokitWrapper.ts	Type-only imports (Octokit wrapper)
src/task/src/wrappers/octokitInterfaces/updatePullResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/updateIssueCommentResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/listCommitsResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/getReviewCommentsResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/getPullResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/getIssueCommentsResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/deleteReviewCommentResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/createReviewCommentResponse.ts	Type-only import cleanup
src/task/src/wrappers/octokitInterfaces/createIssueCommentResponse.ts	Type-only import cleanup
src/task/src/wrappers/azurePipelinesRunnerWrapper.ts	Type-only import cleanup
src/task/src/wrappers/azureDevOpsApiWrapper.ts	Type-only import cleanup
src/task/src/wrappers/axiosWrapper.ts	Inline type-only import cleanup
src/task/src/utilities/validator.ts	Converter rename + `Number.isNaN` change
src/task/src/utilities/logger.ts	Type-only import change (DI-sensitive)
src/task/src/utilities/converter.ts	Rename `toString` export to `convertToString`
src/task/src/runners/runnerInvoker.ts	Type-only import change (DI-sensitive)
src/task/src/runners/gitHubRunnerInvoker.ts	`node:` imports + type-only imports (DI-sensitive)
src/task/src/runners/azurePipelinesRunnerInvoker.ts	`node:` imports + type-only imports (DI-sensitive)
src/task/src/repos/tokenManager.ts	Type-only imports (DI-sensitive)
src/task/src/repos/reposInvoker.ts	Type-only imports (DI-sensitive)
src/task/src/repos/interfaces/fileCommentData.ts	Type-only import cleanup
src/task/src/repos/interfaces/commentData.ts	Type-only import cleanup
src/task/src/repos/gitHubReposInvoker.ts	Type-only imports + converter rename (DI-sensitive)
src/task/src/repos/baseReposInvoker.ts	Type-only imports + formatting
src/task/src/repos/azureReposInvoker.ts	Type-only imports (DI-sensitive)
src/task/src/pullRequests/pullRequestCommentsData.ts	Type-only import cleanup
src/task/src/pullRequests/pullRequestComments.ts	Type-only imports (DI-sensitive)
src/task/src/pullRequests/pullRequest.ts	Type-only imports (DI-sensitive)
src/task/src/pullRequestMetrics.ts	Type-only imports (DI-sensitive)
src/task/src/metrics/inputs.ts	`Number.isNaN/isFinite` changes + type-only imports (DI-sensitive)
src/task/src/metrics/codeMetricsCalculator.ts	Type-only imports (DI-sensitive)
src/task/src/metrics/codeMetrics.ts	`Number.isNaN` + type-only imports (DI-sensitive)
src/task/src/git/octokitGitDiffParser.ts	Type-only imports (DI-sensitive)
src/task/src/git/gitInvoker.ts	`Number.isNaN` + type-only imports (DI-sensitive)
src/task/index.ts	`node:` imports
package.json	Bump Node engine requirement
package-lock.json	Bump Node engine requirement
docs/workload-identity-federation.md	Markdown lint formatting cleanup
docs/verification.md	Markdown lint formatting cleanup
biome.json	Add Biome config
action.yml	Update GitHub Action runtime to node24
.github/workflows/release-publish.yml	Update pinned actions + Node version
.github/workflows/release-initiate.yml	Update pinned actions + Node version
.github/workflows/build.yml	Update pinned actions + enable Biome linting
.github/azure-devops/template.yml	Update Azure pipeline Node tool/task
.github/azure-devops/release.yml	Update Azure pipeline Node tool/task

src/task/src/utilities/logger.ts

src/task/src/metrics/inputs.ts

src/task/src/repos/azureReposInvoker.ts

src/task/src/runners/azurePipelinesRunnerInvoker.ts

src/task/src/repos/tokenManager.ts

src/task/src/repos/reposInvoker.ts

src/task/src/pullRequests/pullRequest.ts

src/task/src/pullRequests/pullRequestComments.ts

src/task/src/metrics/inputs.ts

muiriswoulfe · 2026-03-30T13:36:05Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Fail ❌
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌───────────────────┬──────┬─────────────────┬───────────────────┬─────────┐
│      Target       │ Type │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼──────┼─────────────────┼───────────────────┼─────────┤
│ package-lock.json │ npm  │        1        │         -         │    -    │
└───────────────────┴──────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


package-lock.json (npm)
=======================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────────────────┬─────────────────────────────────────────────────────────┐
│     Library     │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version        │                          Title                          │
├─────────────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────────────────┼─────────────────────────────────────────────────────────┤
│ brace-expansion │ CVE-2026-33750 │ MEDIUM   │ fixed  │ 1.1.12            │ 5.0.5, 3.0.2, 2.0.3, 1.1.13 │ The brace-expansion library generates arbitrary strings │
│                 │                │          │        │                   │                             │ containing a c ...                                      │
│                 │                │          │        │                   │                             │ https://avd.aquasec.com/nvd/cve-2026-33750              │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────────┴─────────────────────────────────────────────────────────┘

With emitDecoratorMetadata enabled, tsyringe needs runtime type references for constructor-injected dependencies. Reverts import type back to value imports for all DI-injected classes. Also fixes Number.isNaN/isFinite line breaks and disables useImportType in biome.json to prevent conflicts with tsyringe.

muiriswoulfe · 2026-03-30T14:31:40Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Fail ❌
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌───────────────────┬──────┬─────────────────┬───────────────────┬─────────┐
│      Target       │ Type │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼──────┼─────────────────┼───────────────────┼─────────┤
│ package-lock.json │ npm  │        1        │         -         │    -    │
└───────────────────┴──────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


package-lock.json (npm)
=======================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────────────────┬─────────────────────────────────────────────────────────┐
│     Library     │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version        │                          Title                          │
├─────────────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────────────────┼─────────────────────────────────────────────────────────┤
│ brace-expansion │ CVE-2026-33750 │ MEDIUM   │ fixed  │ 1.1.12            │ 5.0.5, 3.0.2, 2.0.3, 1.1.13 │ The brace-expansion library generates arbitrary strings │
│                 │                │          │        │                   │                             │ containing a c ...                                      │
│                 │                │          │        │                   │                             │ https://avd.aquasec.com/nvd/cve-2026-33750              │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────────┴─────────────────────────────────────────────────────────┘

muiriswoulfe · 2026-03-30T14:32:48Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Fail ❌
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌───────────────────┬──────┬─────────────────┬───────────────────┬─────────┐
│      Target       │ Type │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼──────┼─────────────────┼───────────────────┼─────────┤
│ package-lock.json │ npm  │        1        │         -         │    -    │
└───────────────────┴──────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


package-lock.json (npm)
=======================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────────────────┬─────────────────────────────────────────────────────────┐
│     Library     │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version        │                          Title                          │
├─────────────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────────────────┼─────────────────────────────────────────────────────────┤
│ brace-expansion │ CVE-2026-33750 │ MEDIUM   │ fixed  │ 1.1.12            │ 5.0.5, 3.0.2, 2.0.3, 1.1.13 │ The brace-expansion library generates arbitrary strings │
│                 │                │          │        │                   │                             │ containing a c ...                                      │
│                 │                │          │        │                   │                             │ https://avd.aquasec.com/nvd/cve-2026-33750              │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────────┴─────────────────────────────────────────────────────────┘

Copilot

Pull request overview

Copilot reviewed 67 out of 69 changed files in this pull request and generated 2 comments.

src/task/tests/utilities/converter.property.spec.ts

.github/workflows/build.yml

muiriswoulfe · 2026-03-30T15:23:12Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Fail ❌
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌───────────────────┬──────┬─────────────────┬───────────────────┬─────────┐
│      Target       │ Type │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼──────┼─────────────────┼───────────────────┼─────────┤
│ package-lock.json │ npm  │        1        │         -         │    -    │
└───────────────────┴──────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


package-lock.json (npm)
=======================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────────────────┬─────────────────────────────────────────────────────────┐
│     Library     │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version        │                          Title                          │
├─────────────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────────────────┼─────────────────────────────────────────────────────────┤
│ brace-expansion │ CVE-2026-33750 │ MEDIUM   │ fixed  │ 1.1.12            │ 5.0.5, 3.0.2, 2.0.3, 1.1.13 │ The brace-expansion library generates arbitrary strings │
│                 │                │          │        │                   │                             │ containing a c ...                                      │
│                 │                │          │        │                   │                             │ https://avd.aquasec.com/nvd/cve-2026-33750              │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────────┴─────────────────────────────────────────────────────────┘

Re-enables the useImportType rule globally and uses overrides to disable it only for the 17 tsyringe DI-decorated files that need runtime imports. Also makes the schema URL version-agnostic.

muiriswoulfe · 2026-03-30T15:52:12Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Fail ❌
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌───────────────────┬──────┬─────────────────┬───────────────────┬─────────┐
│      Target       │ Type │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼──────┼─────────────────┼───────────────────┼─────────┤
│ package-lock.json │ npm  │        1        │         -         │    -    │
└───────────────────┴──────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


package-lock.json (npm)
=======================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────────────────┬─────────────────────────────────────────────────────────┐
│     Library     │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version        │                          Title                          │
├─────────────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────────────────┼─────────────────────────────────────────────────────────┤
│ brace-expansion │ CVE-2026-33750 │ MEDIUM   │ fixed  │ 1.1.12            │ 5.0.5, 3.0.2, 2.0.3, 1.1.13 │ The brace-expansion library generates arbitrary strings │
│                 │                │          │        │                   │                             │ containing a c ...                                      │
│                 │                │          │        │                   │                             │ https://avd.aquasec.com/nvd/cve-2026-33750              │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────────┴─────────────────────────────────────────────────────────┘

Copilot

Pull request overview

Copilot reviewed 67 out of 69 changed files in this pull request and generated no new comments.

…to muiriswoulfe/github-actions-biome

muiriswoulfe · 2026-03-30T16:29:51Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
TRIVY	Pass ✅
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

muiriswoulfe · 2026-04-01T16:22:45Z

TODO: Remove suppressions after merging #755

muiriswoulfe added 2 commits March 30, 2026 13:55

Initial fixes

2769575

muiriswoulfe requested review from a team and Copilot March 30, 2026 13:25

muiriswoulfe added the enhancement New feature or request label Mar 30, 2026

muiriswoulfe self-assigned this Mar 30, 2026

muiriswoulfe changed the title ~~Enable Biome Linting~~ [WIP] Enable Biome Linting Mar 30, 2026

Copilot started reviewing on behalf of muiriswoulfe March 30, 2026 13:26 View session

omex-github-bot-external changed the title ~~[WIP] Enable Biome Linting~~ XS⚠️ ◾ [WIP] Enable Biome Linting Mar 30, 2026

omex-github-bot-external reviewed Mar 30, 2026

View reviewed changes

package-lock.json Show resolved Hide resolved

style: fix biome.json indentation to use spaces

09a491c

Copilot AI reviewed Mar 30, 2026

View reviewed changes

muiriswoulfe added 2 commits March 30, 2026 15:28

chore: fix linting, update dist folder

a1bee32

Copilot AI review requested due to automatic review settings March 30, 2026 14:29

Copilot started reviewing on behalf of muiriswoulfe March 30, 2026 14:30 View session

Copilot AI reviewed Mar 30, 2026

View reviewed changes

src/task/tests/utilities/converter.property.spec.ts Show resolved Hide resolved

.github/workflows/build.yml Show resolved Hide resolved

test: rename toString() test suites to convertToString()

2707d42

refactor(biome): re-enable useImportType with DI file overrides

8ca981d

Re-enables the useImportType rule globally and uses overrides to disable it only for the 17 tsyringe DI-decorated files that need runtime imports. Also makes the schema URL version-agnostic.

Copilot AI review requested due to automatic review settings March 30, 2026 15:49

Copilot started reviewing on behalf of muiriswoulfe March 30, 2026 15:50 View session

Copilot AI reviewed Mar 30, 2026

View reviewed changes

Merge remote-tracking branch 'origin/muiriswoulfe/super-linter-v8' in…

20329a5

…to muiriswoulfe/github-actions-biome

muiriswoulfe changed the base branch from main to muiriswoulfe/super-linter-v8 March 30, 2026 17:08

muiriswoulfe changed the title ~~XS⚠️ ◾ [WIP] Enable Biome Linting~~ XS⚠️ ◾ [WIP2] Enable Biome Linting Apr 1, 2026

Conversation

muiriswoulfe commented Mar 30, 2026

Summary

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

omex-github-bot-external commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Metrics

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

muiriswoulfe commented Mar 30, 2026

Super-linter summary

Uh oh!

muiriswoulfe commented Apr 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

omex-github-bot-external commented Mar 30, 2026 •

edited

Loading