feat: dx improvements (#31)

* chore: update and normalize dependencies

- Add conventional-changelog-cli@5.0.0
- Add typedoc@0.28.12
- Update typescript@5.6.3
- Fix zod version to 3.24.1
- Resolve peer dependency conflicts

Signed-off-by: Rubens <rubenssegundo404@gmail.com>

* docs: enhance documentation with DevSecOps features

- Update README.md with comprehensive badges
- Add CONTRIBUTING.md with license compliance policy
- Update CHANGELOG.md with v2.0.0 changes
- Add SECURITY.md with vulnerability disclosure
- Add CONTRIBUTORS.md with acknowledgments

Signed-off-by: Rubens <rubenssegundo404@gmail.com>

* feat: add comprehensive DevSecOps validation script

- Add scripts/validate-devsecops.sh
- Validate environment and toolchain
- Check security configurations
- Verify license compliance
- Test SBOM generation

Signed-off-by: Rubens <rubenssegundo404@gmail.com>

* docs: add comprehensive usage examples

- Add monorepo filter examples
- Add simple filter configurations
- Add GitHub event payloads
- Add workflow usage examples

Signed-off-by: Rubens <rubenssegundo404@gmail.com>

* chore: remove .vscode skips from .gitignore

Signed-off-by: Rubens <rubenssegundo404@gmail.com>

---------

Signed-off-by: Rubens <rubenssegundo404@gmail.com>

Author: santosr2

.gitignore

@@ -68,9 +68,6 @@ scan-results/
 
 # Editor directories and files
 .vscode/
-!.vscode/settings.json
-!.vscode/launch.json  
-!.vscode/tasks.json
 .idea/
 *.swp
 *.swo

CHANGELOG.md

@@ -1,113 +1,60 @@
 # Changelog
 
-## Changelog from fork
+All notable changes to this project will be documented in this file.
 
-## v3.0.2
-- [Add config parameter for predicate quantifier](https://github.com/dorny/paths-filter/pull/224)
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## v3.0.1
-- [Compare base and ref when token is empty](https://github.com/dorny/paths-filter/pull/133)
+## [Unreleased]
 
-## v3.0.0
-- [Update to Node.js 20](https://github.com/dorny/paths-filter/pull/210)
-- [Update all dependencies](https://github.com/dorny/paths-filter/pull/215)
+### ✨ Features
 
-## v2.11.1
-- [Update @actions/core to v1.10.0 - Fixes warning about deprecated set-output](https://github.com/dorny/paths-filter/pull/167)
-- [Document need for pull-requests: read permission](https://github.com/dorny/paths-filter/pull/168)
-- [Updating to actions/checkout@v3](https://github.com/dorny/paths-filter/pull/164)
+- Complete DevSecOps transformation with comprehensive CI/CD pipeline
+- Node.js 22 runtime with mise toolchain management
+- SBOM generation with CycloneDX v1.4 format
+- License compliance automation with SPDX headers
+- GitHub Pages documentation with TypeDoc API docs
+- Performance monitoring and bundle analysis reports
+- Release automation with conventional commits and release-please
 
-## v2.11.0
-- [Set list-files input parameter as not required](https://github.com/dorny/paths-filter/pull/157)
-- [Update Node.js](https://github.com/dorny/paths-filter/pull/161)
-- [Fix incorrect handling of Unicode characters in exec()](https://github.com/dorny/paths-filter/pull/162)
-- [Use Octokit pagination](https://github.com/dorny/paths-filter/pull/163)
-- [Updates real world links](https://github.com/dorny/paths-filter/pull/160)
+### 🔒 Security
 
-## v2.10.2
-- [Fix getLocalRef() returns wrong ref](https://github.com/dorny/paths-filter/pull/91)
+- Static Application Security Testing (SAST) with CodeQL
+- Secret scanning with GitLeaks configuration
+- Dependency vulnerability scanning with Trivy
+- SHA-pinned GitHub Actions with minimal permissions
+- Supply chain transparency with Software Bill of Materials
 
-## v2.10.1
-- [Improve robustness of change detection](https://github.com/dorny/paths-filter/pull/85)
+### 🛠️ Developer Experience
 
-## v2.10.0
-- [Add ref input parameter](https://github.com/dorny/paths-filter/pull/82)
-- [Fix change detection in PR when pullRequest.changed_files is incorrect](https://github.com/dorny/paths-filter/pull/83)
+- Enhanced development environment with mise configuration
+- Pre-commit hooks for quality assurance
+- Automated dependency updates with intelligent Dependabot grouping
+- Comprehensive test coverage (≥80% enforced)
+- Quality gates with automated license header enforcement
 
-## v2.9.3
-- [Fix change detection when base is a tag](https://github.com/dorny/paths-filter/pull/78)
+### 📚 Documentation
 
-## v2.9.2
-- [Fix fetching git history](https://github.com/dorny/paths-filter/pull/75)
+- Interactive SBOM viewer at GitHub Pages /sbom endpoint
+- Performance reports at GitHub Pages /performance endpoint
+- Complete API documentation at GitHub Pages /docs endpoint
+- Enhanced README with comprehensive DevSecOps badge collection
 
-## v2.9.1
-- [Fix fetching git history + fallback to unshallow repo](https://github.com/dorny/paths-filter/pull/74)
+## [1.0.0] - 2024-12-06
 
-## v2.9.0
-- [Add list-files: csv format](https://github.com/dorny/paths-filter/pull/68)
+### 🎉 Initial Release
 
-## v2.8.0
-- [Add count output variable](https://github.com/dorny/paths-filter/pull/65)
-- [Fix log grouping of changes](https://github.com/dorny/paths-filter/pull/61)
+- TypeScript GitHub Action for conditional path filtering
+- Support for glob patterns and change type detection
+- Multiple output formats (JSON, CSV, shell, escaped)
+- Comprehensive test suite with unit, integration, and E2E tests
+- Modern ESM module system with Node.js 22 support
+- MIT license with full SPDX compliance
 
-## v2.7.0
-- [Add "changes" output variable to support matrix job configuration](https://github.com/dorny/paths-filter/pull/59)
-- [Improved listing of matching files with `list-files: shell` and `list-files: escape` options](https://github.com/dorny/paths-filter/pull/58)
+### Previous Changelog
 
-## v2.6.0
-- [Support local changes](https://github.com/dorny/paths-filter/pull/53)
+This project builds upon [dorny/paths-filter](https://github.com/dorny/paths-filter).
+See the [original changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) for previous development history.
 
-## v2.5.3
-- [Fixed mapping of removed/deleted change status from github API](https://github.com/dorny/paths-filter/pull/51)
-- [Fixed retrieval of all changes via Github API when there are 100+ changes](https://github.com/dorny/paths-filter/pull/50)
-
-## v2.5.2
-- [Add support for multiple patterns when using file status](https://github.com/dorny/paths-filter/pull/48)
-- [Use picomatch directly instead of micromatch wrapper](https://github.com/dorny/paths-filter/pull/49)
-
-## v2.5.1
-- [Improved path matching with micromatch](https://github.com/dorny/paths-filter/pull/46)
-
-## v2.5.0
-- [Support workflows triggered by any event](https://github.com/dorny/paths-filter/pull/44)
-
-## v2.4.2
-- [Fixed compatibility with older (<2.23) versions of git](https://github.com/dorny/paths-filter/pull/42)
-
-## v2.4.0
-- [Support pushes of tags or when tag is used as base](https://github.com/dorny/paths-filter/pull/40)
-- [Use git log to detect changes from PRs merge commit if token is not available](https://github.com/dorny/paths-filter/pull/40)
-- [Support local execution with act](https://github.com/dorny/paths-filter/pull/40)
-- [Improved processing of repository initial push](https://github.com/dorny/paths-filter/pull/40)
-- [Improved processing of first push of new branch](https://github.com/dorny/paths-filter/pull/40)
-
-
-## v2.3.0
-- [Improved documentation](https://github.com/dorny/paths-filter/pull/37)
-- [Change detection using git "three dot" diff](https://github.com/dorny/paths-filter/pull/35)
-- [Export files matching filter](https://github.com/dorny/paths-filter/pull/32)
-- [Extend filter syntax with optional specification of file status: add, modified, deleted](https://github.com/dorny/paths-filter/pull/22)
-- [Add working-directory input](https://github.com/dorny/paths-filter/pull/21)
-
-## v2.2.1
-- [Add support for pull_request_target](https://github.com/dorny/paths-filter/pull/29)
-
-## v2.2.0
-- [Improve change detection for feature branches](https://github.com/dorny/paths-filter/pull/16)
-
-## v2.1.0
-- [Support reusable paths blocks with yaml anchors](https://github.com/dorny/paths-filter/pull/13)
-
-## v2.0.0
-- [Added support for workflows triggered by push events](https://github.com/dorny/paths-filter/pull/10)
-- Action and repository renamed to paths-filter - original name doesn't make sense anymore
-
-## v1.1.0
-- [Allows filters to be specified in own .yml file](https://github.com/dorny/paths-filter/pull/8)
-- [Adds alternative change detection using git fetch and git diff-index](https://github.com/dorny/paths-filter/pull/9)
-
-## v1.0.1
-Updated dependencies - fixes github security alert
-
-## v1.0.0
-First official release uploaded to marketplace.
+[Unreleased]: https://github.com/santosr2/conditional-paths-action/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/santosr2/conditional-paths-action/releases/tag/v1.0.0

CONTRIBUTING.md

@@ -27,7 +27,7 @@ Pull requests are the best way to propose changes to the codebase. We actively w
 
 ### Prerequisites
 
-- Node.js 24 or later
+- Node.js 22 or later
 - pnpm 10 or later
 
 ### Setup
@@ -71,7 +71,30 @@ pnpm test:coverage
 - We use ESLint and Prettier for code formatting
 - Run `pnpm format` to format your code
 - Run `pnpm lint` to check for linting errors
-- Pre-commit hooks will automatically format and lint your code
+- **Pre-commit hooks are mandatory** - they will automatically format, lint, type-check, test, and validate licenses/SBOM
+
+### Pre-commit Hooks Setup
+
+```bash
+# Hooks are installed automatically during pnpm install
+pnpm install
+
+# Manually install if needed
+pre-commit install
+
+# Run hooks on all files
+pre-commit run --all-files
+
+# Skip hooks for emergency commits (not recommended)
+git commit --no-verify
+```
+
+The pre-commit hooks enforce:
+- **Code formatting** with Prettier
+- **Linting** with ESLint and TypeScript type checking
+- **Testing** of affected code
+- **License compliance** validation
+- **SBOM compliance** ensuring security transparency
 
 ### Commit Messages
 

CONTRIBUTORS.md

@@ -0,0 +1,88 @@
+# Contributors ✨
+
+Thank you to all the amazing people who have contributed to the Conditional Paths Action! This project exists because of your dedication, expertise, and collaborative spirit.
+
+## 🏆 Core Contributors
+
+<div align="center">
+
+<!-- This section is automatically updated by contrib.rocks -->
+<a href="https://github.com/santosr2/conditional-paths-action/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=santosr2/conditional-paths-action&max=100&columns=10" alt="Contributors" />
+</a>
+
+</div>
+
+## 🙏 Special Recognition
+
+### Original Inspiration
+Special thanks to [**@dorny**](https://github.com/dorny) and the contributors to [dorny/paths-filter](https://github.com/dorny/paths-filter), whose foundational work enabled this enhanced version. This project builds upon their excellent foundation with modern improvements and additional features.
+
+### Community Contributors
+We deeply appreciate everyone who has:
+- 🐛 Reported bugs and issues
+- 💡 Suggested new features and improvements
+- 📖 Improved documentation and examples
+- 🔧 Contributed code and fixes
+- ⭐ Starred the repository and spread the word
+- 🧪 Tested the action in real-world scenarios
+- 💬 Participated in discussions and provided feedback
+
+## 📈 Contribution Stats
+
+<!-- GitHub stats widgets -->
+![Contributors](https://img.shields.io/github/contributors/santosr2/conditional-paths-action)
+![Last Commit](https://img.shields.io/github/last-commit/santosr2/conditional-paths-action)
+![Commit Activity](https://img.shields.io/github/commit-activity/m/santosr2/conditional-paths-action)
+
+## 🌟 Contributing
+
+Want to join this amazing group of contributors? Here's how you can help:
+
+### 🚀 Getting Started
+1. **Fork the repository** and clone it locally
+2. **Read our [Contributing Guide](CONTRIBUTING.md)** for detailed setup instructions
+3. **Pick an issue** or suggest a new feature
+4. **Follow our coding standards** and submit a pull request
+
+### 🎯 Ways to Contribute
+- **Code**: Bug fixes, new features, performance improvements
+- **Documentation**: Examples, guides, API documentation, README improvements
+- **Testing**: Real-world usage feedback, edge case testing, local testing with `act`
+- **Community**: Answer questions, help other users, write tutorials
+- **Security**: Report vulnerabilities, suggest security improvements
+
+### 📋 Contribution Areas
+We especially welcome contributions in:
+- 🏢 **Real-world usage examples** for different industries and use cases
+- 🔧 **Performance optimizations** for large repositories
+- 📚 **Documentation improvements** and better examples
+- 🧪 **Enhanced testing** including edge cases and performance benchmarks
+- 🔒 **Security enhancements** and vulnerability reporting
+- 🌐 **Internationalization** and accessibility improvements
+
+## 🏅 Recognition System
+
+We recognize contributors through:
+- **🏆 GitHub contributor graph** - Automatic recognition for all contributors
+- **📜 This contributors file** - Permanent recognition with profile links
+- **📰 Release notes** - Special mentions for significant contributions
+- **🎖️ GitHub achievements** - Earn badges for different types of contributions
+- **⭐ Special thanks** - Recognition in our documentation for exceptional contributions
+
+## 💬 Community
+
+Join our community discussions:
+- **[GitHub Discussions](https://github.com/santosr2/conditional-paths-action/discussions)** - General discussions and Q&A
+- **[GitHub Issues](https://github.com/santosr2/conditional-paths-action/issues)** - Bug reports and feature requests
+- **[Security Advisories](https://github.com/santosr2/conditional-paths-action/security/advisories)** - Security-related discussions
+
+---
+
+<div align="center">
+
+**🚀 Ready to contribute? Check out our [Contributing Guide](CONTRIBUTING.md) to get started!**
+
+Made with ❤️ by the Conditional Paths Action community
+
+</div>