20 Commits
Author SHA1 Message Date
BillyOutlast 6378073ecb feat: migrate launch customization to the RunnerProvider SPI (#7)
Replaces the pre-launch launch-command mutation with an EmulationRunnerProvider
that returns LaunchOverrides (executable + arguments) through the game:runner
SPI. Declares game:runner in class metadata and the shipped manifest (dropping
the now-unused game:launch-hook), and bumps the SDK to ^0.7.0.
2026-09-17 23:53:59 -04:00
BillyOutlast fe2b51068e chore(deps): pin @droposs sdk/cli to 0.6.1 (fixes cross-scope import in plugin-cli) 2026-09-17 15:37:26 -04:00
BillyOutlast 554cf6f46a chore(deps): follow configurable SDK scope onto @droposs 0.6.x mirror 2026-09-17 15:23:28 -04:00
BillyOutlast 309f644123 chore: ignore local build artifacts 2026-09-17 14:54:33 -04:00
BillyOutlast 2ba9af6d06 fix(deps): pin typescript ^5.7.2 for typescript-eslint 8 compatibility 2026-09-17 14:54:07 -04:00
BillyOutlast a4add52f5b chore: configurable SDK scope (@droposs cutover) and .dropplugin release workflow 2026-09-17 14:48:44 -04:00
BillyOutlast 785ecd16e2 chore: align plugin with @droposs plugin-sdk 0.6.0 via workspace links v0.1.0 2026-09-15 16:57:21 -04:00
BillyOutlast c3e0bf25f7 Merge pull request #4 from Heretek-Games/dependabot/npm_and_yarn/typescript-7.0.2
chore(deps-dev): bump typescript from 5.9.3 to 7.0.2
2026-09-15 16:53:29 -04:00
dependabot[bot] 9ac2adf927 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#5)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/11d5960a326750d5838078e36cf38b85af677262...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 11:37:07 -04:00
dependabot[bot] fede542084 chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (#6)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...820762786026740c76f36085b0efc47a31fe5020)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 11:36:47 -04:00
dependabot[bot] 343765b8c0 chore(deps-dev): bump typescript from 5.9.3 to 7.0.2
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-09-15 02:16:56 +00:00
BillyOutlast 0930f8573f Merge pull request #2 from Heretek-Games/chore/security-policy-and-dependabot
[audit] Add SECURITY.md and Dependabot config
2026-09-14 22:07:34 -04:00
BillyOutlast 35833a7af3 ci: add a shared ESLint flat-config lint gate
Add eslint.config.mjs (eslint:recommended + typescript-eslint recommended,
type-unaware) with a `lint` script and a CI step. Rules that need a baseline
cleanup pass (no-explicit-any, ban-ts-comment, no-useless-assignment,
preserve-caught-error) are warnings; core rules and unused vars are errors.

Refs Heretek-Games/drop#69 (audit finding F-23).
2026-09-14 19:59:21 -04:00
BillyOutlast cbfdae9537 ci: pin GitHub Actions to commit SHAs
Pin actions/checkout, setup-node, upload-artifact, setup-dotnet, and
github-script to immutable commit SHAs (version kept in a trailing comment) so
a moved tag cannot change the code executed in CI.

Refs Heretek-Games/drop#69 (audit finding F-23).
2026-09-14 19:40:45 -04:00
BillyOutlast 208bb04d81 chore: add SECURITY.md and Dependabot config
Add a private vulnerability-reporting policy and weekly Dependabot updates
(npm/cargo as applicable + GitHub Actions) to satisfy the org security-posture
baseline.

Refs Heretek-Games/drop#69
2026-09-14 19:35:48 -04:00
BillyOutlast 03b4cd4e9d Merge pull request #1 from Heretek-Games/chore/sdk-ci
feat(launch): ROM binding validation + command rewrite + registry SDK/CI baseline
2026-09-14 09:14:28 -04:00
BillyOutlast 20f8fb57a1 fix(ci): harden npm install and drop unused import 2026-09-14 09:10:12 -04:00
BillyOutlast 4be72761bf feat(launch): rewrite ROM launch command with validated bindings 2026-09-14 09:02:13 -04:00
BillyOutlast 22878b0018 chore: resolve plugin SDK from registry and add typecheck/CI 2026-09-14 09:02:13 -04:00
BillyOutlast a5aac5d1d6 feat(init): scaffold drop-emulation (plugin API v2) 2026-09-14 01:24:26 -04:00