Merge remote-tracking branch 'origin/main' into 3-dev

angrykoala · angrykoala · commit 74b238bd4bfe · 2025-10-28T10:47:29.000Z
diff --git a/.github/workflows/cla-check.yml b/.github/workflows/cla-check.yml
@@ -11,11 +11,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: neo-technology/whitelist-check
           token: ${{ secrets.NEO4J_TEAM_GRAPHQL_PERSONAL_ACCESS_TOKEN }}
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: 3
       - name: Install dependencies
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -27,26 +27,26 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
       - name: Install Dependencies
         run: |
           npm install
           cd docs && npm install
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
       - name: Build Docs
         run: |
           npm run docs
           touch ./docs/build/site/.nojekyll
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
         with:
           # Upload docs
           path: "./docs/build/site"
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -11,9 +11,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Use Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
       - run: npm install
@@ -23,8 +23,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: "^1.17.0"
       - name: Install addlicense
@@ -36,9 +36,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Use Node.js lts/*
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
       - run: npm install
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -26,13 +26,13 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: Setup Node.js LTS
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
           registry-url: https://registry.npmjs.org
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
@@ -5,23 +5,23 @@ on:
     workflows: [Test]
     types: [completed]
 jobs:
-  sonarcloud:
-    name: SonarCloud
+  sonarqube:
+    name: SonarQube
     runs-on: ubuntu-latest
     if: github.event.workflow_run.conclusion == 'success'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: ${{ github.event.workflow_run.head_repository.full_name }}
           ref: ${{ github.event.workflow_run.head_branch }}
           fetch-depth: 0
       - name: Use Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
       - run: npm install
       - name: "Download artifact"
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -46,8 +46,8 @@ jobs:
           unzip lcov_info.zip
           mkdir coverage
           mv lcov.info coverage
-      - name: SonarCloud Scan
-        uses: SonarSource/sonarcloud-github-action@master
+      - name: SonarQubeScan Scan
+        uses: SonarSource/sonarqube-scan-action@fd88b7d7ccbaefd23d8f36f73b59db7a3d246602 # v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -15,9 +15,9 @@ jobs:
         node-version: [20.x, latest]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm install
@@ -28,16 +28,16 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Use Node.js LTS
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
       - run: npm install
       - run: npm run build --if-present
       - run: npm test -- --coverage
       - name: Upload code coverage
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
         with:
           name: coverage
           path: coverage/lcov.info
@@ -47,10 +47,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version: lts/*
 
diff --git a/docs/package.json b/docs/package.json
@@ -29,8 +29,8 @@
         "@neo4j-documentation/remote-include": "^1.0.0"
     },
     "devDependencies": {
-        "express": "^5.1.0",
-        "nodemon": "^3.1.10"
+        "express": "5.1.0",
+        "nodemon": "3.1.10"
     },
     "overrides": {
         "@antora/site-generator-default": {
diff --git a/package.json b/package.json
@@ -42,22 +42,22 @@
     },
     "homepage": "https://neo4j.github.io/cypher-builder/",
     "devDependencies": {
-        "@changesets/changelog-github": "^0.5.1",
-        "@changesets/cli": "^2.29.7",
-        "@eslint/js": "^9.37.0",
-        "@tsconfig/node20": "^20.1.6",
-        "@types/jest": "^30.0.0",
-        "@types/node": "^24.7.2",
-        "@typescript-eslint/eslint-plugin": "^8.46.1",
-        "@typescript-eslint/parser": "^8.46.1",
-        "eslint": "^9.37.0",
-        "eslint-config-prettier": "^10.1.8",
-        "eslint-plugin-tsdoc": "^0.4.0",
-        "jest": "^30.2.0",
-        "jest-extended": "^6.0.0",
-        "prettier": "^3.6.2",
-        "ts-jest": "^29.4.5",
-        "typedoc": "^0.28.14",
-        "typescript": "^5.9.3"
+        "@changesets/changelog-github": "0.5.1",
+        "@changesets/cli": "2.29.7",
+        "@eslint/js": "9.38.0",
+        "@tsconfig/node20": "20.1.6",
+        "@types/jest": "30.0.0",
+        "@types/node": "24.7.2",
+        "@typescript-eslint/eslint-plugin": "8.46.2",
+        "@typescript-eslint/parser": "8.46.2",
+        "eslint": "9.38.0",
+        "eslint-config-prettier": "10.1.8",
+        "eslint-plugin-tsdoc": "0.4.0",
+        "jest": "30.2.0",
+        "jest-extended": "6.0.0",
+        "prettier": "3.6.2",
+        "ts-jest": "29.4.5",
+        "typedoc": "0.28.14",
+        "typescript": "5.9.3"
     }
 }
diff --git a/renovate.json b/renovate.json
@@ -1,6 +1,6 @@
 {
-    "extends": ["config:base"],
-    "baseBranches": ["main"],
+    "extends": ["config:best-practices"],
+    "baseBranchPatterns": ["main"],
     "rebaseWhen": "auto",
     "automerge": true,
     "major": {

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`		`- "extends": ["config:base"],`
`3`		`- "baseBranches": ["main"],`
	`2`	`+ "extends": ["config:best-practices"],`
	`3`	`+ "baseBranchPatterns": ["main"],`
`4`	`4`	`"rebaseWhen": "auto",`
`5`	`5`	`"automerge": true,`
`6`	`6`	`"major": {`