build: update justfile and reuseable-ci

Signed-off-by: Josef Andersson <josef.andersson@digg.se>

Author: janderssonse

.conform.yaml

@@ -1,8 +1,3 @@
-# SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government
-#
-# SPDX-License-Identifier: CC0-1.0
-
----
 policies:
   - type: commit
     spec:
@@ -17,6 +12,6 @@ policies:
       body:
         required: false
       conventional:
-        types: ['chore', 'build', 'docs', 'ci', 'perf', 'refactor', 'style', 'test', 'release']
-        scopes: ['.*']
+        types: ["build", "chore", "docs", "ci", "perf", "refactor", "style", "test", "release"]
+        scopes: [".*"]
         descriptionLength: 92

.github/workflows/openssf-scorecard.yml

@@ -21,6 +21,6 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: diggsweden/reusable-ci/.github/workflows/security-openssf-scorecard.yml@8a16cb75501be27dde6b5fba6c93ae091442d476 # v2.4.1
+    uses: diggsweden/reusable-ci/.github/workflows/security-openssf-scorecard.yml@e29145e720cef0b86ef147c72c2d001b5ac6c8b9 # v2.4.2
     with:
       publish-results: true

.github/workflows/pullrequest-workflow.yml

@@ -18,16 +18,19 @@ permissions:
 
 jobs:
   pr-checks:
-    uses: diggsweden/reusable-ci/.github/workflows/pullrequest-orchestrator.yml@8a16cb75501be27dde6b5fba6c93ae091442d476 # v2.4.1
+    uses: diggsweden/reusable-ci/.github/workflows/pullrequest-orchestrator.yml@e29145e720cef0b86ef147c72c2d001b5ac6c8b9 # v2.4.2
     secrets: inherit # Pass org-level secrets (NPM token if private packages)
     permissions:
       contents: read # Clone repository and read source code
       packages: read # Access private NPM packages from GitHub registry
       security-events: write # Upload ESLint/security findings to GitHub Security tab
     with:
       project-type: npm
-      # MegaLinter is disabled for this project
-      linters.megalint: false # Skip MegaLinter
+      # Use just+mise linting (replaces megalint, commitlint, licenselint)
+      linters.justmiselint: true
+      linters.megalint: false
+      linters.commitlint: false
+      linters.licenselint: false
       linters.publiccodelint: true
 
   test:

.github/workflows/release-dev-workflow.yml

@@ -31,7 +31,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    uses: diggsweden/reusable-ci/.github/workflows/release-dev-orchestrator.yml@8a16cb75501be27dde6b5fba6c93ae091442d476 # v2.4.1
+    uses: diggsweden/reusable-ci/.github/workflows/release-dev-orchestrator.yml@e29145e720cef0b86ef147c72c2d001b5ac6c8b9 # v2.4.2
     with:
       project-type: npm
       package-scope: '@diggsweden'

.github/workflows/release-workflow.yml

@@ -24,7 +24,7 @@ permissions:
 
 jobs:
   release:
-    uses: diggsweden/reusable-ci/.github/workflows/release-orchestrator.yml@8a16cb75501be27dde6b5fba6c93ae091442d476 # v2.4.1
+    uses: diggsweden/reusable-ci/.github/workflows/release-orchestrator.yml@e29145e720cef0b86ef147c72c2d001b5ac6c8b9 # v2.4.2
     permissions:
       contents: write # Create GitHub releases, push changelog commits
       packages: write # Publish to GitHub Packages

.mise.toml

@@ -0,0 +1,29 @@
+# SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government
+#
+# SPDX-License-Identifier: CC0-1.0
+
+[settings]
+experimental = true
+paranoid = true
+
+[env]
+HTTP_PROXY = "{{ get_env(name='HTTP_PROXY', default='') }}"
+HTTPS_PROXY = "{{ get_env(name='HTTPS_PROXY', default='') }}"
+NO_PROXY = "{{ get_env(name='NO_PROXY', default='') }}"
+http_proxy = "{{ get_env(name='http_proxy', default='') }}"
+https_proxy = "{{ get_env(name='https_proxy', default='') }}"
+no_proxy = "{{ get_env(name='no_proxy', default='') }}"
+PIP_INDEX_URL = "{{ get_env(name='PIP_INDEX_URL', default='') }}"
+
+[tools]
+node = "22"
+"aqua:casey/just" = "1.43.0"
+"aqua:rhysd/actionlint" = "v1.7.8"
+"aqua:siderolabs/conform" = "v0.1.0-alpha.30"
+"aqua:zricethezav/gitleaks" = "v8.29.1"
+"ubi:rvben/rumdl" = "v0.0.173"
+"aqua:koalaman/shellcheck" = "v0.11.0"
+"aqua:mvdan/sh" = "v3.12.0"
+"aqua:google/yamlfmt" = "v0.20.0"
+"aqua:hadolint/hadolint" = "v2.12.0"
+"pipx:reuse" = "6.2.0"

REUSE.toml

@@ -6,7 +6,7 @@ version = 1
 
 # configurations
 [[annotations]]
-path = ["CHANGELOG.md","tsconfig.json","package.json","package-lock.json"]
+path = ["CHANGELOG.md","tsconfig.json","package.json","package-lock.json",".conform.yaml"]
 precedence = "aggregate"
 SPDX-FileCopyrightText = "2025 Digg - Agency for Digital Government"
 SPDX-License-Identifier = "CC0-1.0"