Release v1.0.15

.github/copilot-instructions.md

@@ -0,0 +1,53 @@
+# Copilot Instructions
+
+## Architecture
+
+This is a **GitHub Action** (Node.js, TypeScript) that detects CRLF line endings in pull request files and blocks merges. It runs on `pull_request_target` events.
+
+**Flow:** `src/index.ts` (entry point) uses `@actions/github` to fetch PR files via the GitHub API, passes them to `src/validation.ts` which downloads each file's base64 content and checks for `\r\n`. If CRLF is found, the action posts a PR comment with fix instructions, adds a `crlf detected` label, and calls `core.setFailed()`.
+
+**Key modules:**
+
+- `src/index.ts` — Action entry point, orchestrates GitHub API calls
+- `src/validation.ts` — Core logic: file content checking, exclusion matching (minimatch), PR comment generation
+- `src/types.ts` — TypeScript types derived from `@octokit/openapi-types`
+- `src/strings.ts` — User-facing string constants for PR comments
+
+The `dist/` directory contains the bundled action output (committed to the repo) produced by Rollup.
+
+## Build, Test, and Lint
+
+```bash
+# Build (TypeScript compilation)
+npm run build
+
+# Run all tests
+npm run test
+
+# Run a single test by name
+npx cross-env NODE_OPTIONS='--experimental-vm-modules' jest -t "File with CRLF is detected properly"
+
+# Lint
+npm run lint
+
+# Bundle for distribution (must be committed)
+npm run package
+
+# Full pipeline (format + build + test + package)
+npm run all
+```
+
+After making changes, run `npm run package` and commit the updated `dist/` directory.
+
+## Conventions
+
+- **ESM modules** — The project uses `"type": "module"` with `.js` extensions in import paths (e.g., `'./types.js'`).
+- **Copyright header** — Every `.ts` and `.js` file must start with:
+  ```
+  // Copyright (c) Microsoft Corporation.
+  // Licensed under the MIT license.
+  ```
+  This is enforced by ESLint (`@tony.ganchev/eslint-plugin-header`).
+- **Prettier** — Single quotes, auto line endings. Integrated via ESLint.
+- **Tests** — Jest with `ts-jest` in ESM mode. Tests live in `test/` and mock Octokit HTTP calls by injecting a `jest.fn()` via Octokit's `request: { fetch }` option with native `Response` objects. Test files match `**/*.test.ts`.
+- **Unused variables** — Prefix with `_` (enforced by `@typescript-eslint/no-unused-vars`).

.github/workflows/auto-merge-dependabot.yml

@@ -19,7 +19,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v2.0.0
+        uses: dependabot/fetch-metadata@v3.1.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
 

.github/workflows/node.yml

@@ -15,10 +15,10 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Verify npm all runs and build output matches
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
-        node-version: '20'
+        node-version: '24'
     - run: npm ci
     - run: npm run all

.github/workflows/release.yml

@@ -13,19 +13,19 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
       with:
         fetch-depth: '0'
     - name: Bump version and push tag
       id: version
-      uses: anothrNick/github-tag-action@1.69.0
+      uses: anothrNick/github-tag-action@1.75.0
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         WITH_V: true
         DEFAULT_BUMP: patch
         RELEASE_BRANCHES: release
     - name: Create release
-      uses: ncipollo/release-action@v1.14.0
+      uses: ncipollo/release-action@v1.21.0
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:

.gitignore

@@ -104,4 +104,5 @@ typings/
 .tern-port
 
 # TSC output
-lib
+dist/*
+!dist/index.js

CODE_OF_CONDUCT.md

@@ -0,0 +1,10 @@
+# Microsoft Open Source Code of Conduct
+
+This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
+
+Resources:
+
+- [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/)
+- [Microsoft Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/)
+- Contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with questions or concerns
+- Employees can reach out at [aka.ms/opensource/moderation-support](https://aka.ms/opensource/moderation-support)

action.yml

@@ -8,5 +8,5 @@ inputs:
     description: 'Custom exclusion list. Semi-colon delimited list of glob patterns.'
     required: false
 runs:
-  using: 'node20'
+  using: 'node24'
   main: 'dist/index.js'