0.1.7 - Use .mjs extension for Azure DevOps ES module support (v0.1.7)

- Replace CommonJS conversion with native ES module approach using .mjs extension
- Simplify build process by directly copying ncc output as index.mjs
- Remove complex regex-based ES-to-CommonJS conversion script
- Update Azure DevOps task execution target from index.js to index.mjs
- Leverage Node20_1 native ES module support instead of compatibility workarounds

This eliminates the need for post-processing ES modules to CommonJS,
resulting in cleaner code and a more maintainable build pipeline.

Author: felickz

component-detection-github-submission-task/index.js renamed to component-detection-github-submission-task/index.mjs

@@ -1,4 +1,4 @@
-require('./sourcemap-register.cjs');const { createRequire: __WEBPACK_EXTERNAL_createRequire } = require("module");
+import './sourcemap-register.cjs';import { createRequire as __WEBPACK_EXTERNAL_createRequire } from "module";
 /******/ var __webpack_modules__ = ({
 
 /***/ 4914:

component-detection-github-submission-task/package.json

@@ -9,7 +9,7 @@
   "version": {
     "Major": 0,
     "Minor": 1,
-    "Patch": 5
+    "Patch": 7
   },
   "instanceNameFormat": "Component Detection $(filePath)",
   "groups": [
@@ -159,7 +159,7 @@
   ],
   "execution": {
     "Node20_1": {
-      "target": "index.js",
+      "target": "index.mjs",
       "argumentFormat": ""
     }
   },

component-detection-github-submission-task/task.json

@@ -9,7 +9,7 @@
     "prepare": "ncc build index.ts -o dist --source-map --license licenses.txt",
     "test": "cross-env NODE_OPTIONS=--experimental-vm-modules jest",
     "all": "npm run lint && npm run prepare && npm run test",
-    "ado:build": "ncc build ado-index.ts -o ado-dist --source-map --license licenses.txt --target es2020 && node scripts/convert-to-cjs.cjs",
+    "ado:build": "ncc build ado-index.ts -o ado-dist --source-map --license licenses.txt --target es2020 && node -e \"require('fs').copyFileSync('ado-dist/index.js', 'component-detection-github-submission-task/index.mjs')\"",
     "ado:package": "tfx extension create --manifest-globs vss-extension.json",
     "ado:all": "npm run ado:build && npm run ado:package"
   },

package.json

@@ -1,3 +1,21 @@
+/**
+ * ES Module to CommonJS Converter for Azure DevOps Extension
+ * 
+ * This script is necessary because:
+ * 1. ncc (Node.js Compiler Collection) always outputs ES modules with import/export syntax
+ * 2. Azure DevOps task runtime expects CommonJS modules with require() syntax
+ * 3. Even with "type": "commonjs" in package.json, the bundled code contains ES module syntax
+ * 4. Azure DevOps cannot execute ES modules, resulting in "Cannot use import statement outside a module" errors
+ * 
+ * The script converts:
+ * - import statements → require() calls
+ * - import.meta.url → __filename (CommonJS equivalent)
+ * - ES module destructuring → CommonJS destructuring
+ * 
+ * This allows the same TypeScript codebase to work in both GitHub Actions (ES modules) 
+ * and Azure DevOps (CommonJS) environments.
+ */
+
 const fs = require('fs');
 const path = require('path');
 
@@ -32,6 +50,18 @@ content = content.replace(
   'const { createRequire: __WEBPACK_EXTERNAL_createRequire } = require("module");'
 );
 
+// Replace createRequire usage with import.meta.url to use __filename
+content = content.replace(
+  /__WEBPACK_EXTERNAL_createRequire\(import\.meta\.url\)/g,
+  '__WEBPACK_EXTERNAL_createRequire(__filename)'
+);
+
+// Replace any remaining import.meta.url with __filename (CommonJS equivalent)
+content = content.replace(
+  /import\.meta\.url/g,
+  '__filename'
+);
+
 // Replace any remaining import statements
 content = content.replace(
   /^import\s+(.*?)\s*;/gm,

scripts/convert-to-cjs.cjs

@@ -2,7 +2,7 @@
   "manifestVersion": 1,
   "id": "component-detection-github-submission-task",
   "name": "Component Detection for GitHub Dependency Submission",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "publisher": "AdvancedSecurityOSS",
   "description": "Upload information about your dependencies to the GitHub dependency graph using Microsoft's component detection library",
   "public": false,