21 Commits
Author SHA1 Message Date
BillyOutlast 0371a13761 chore(deps): pin @droposs sdk/cli to 0.6.1 (fixes cross-scope import in plugin-cli) 2026-09-17 15:37:26 -04:00
BillyOutlast 20b4b77fd8 chore(deps): follow configurable SDK scope onto @droposs 0.6.x mirror 2026-09-17 15:23:28 -04:00
BillyOutlast a0f3c05801 fix(conformance): add apiVersion to client plugin metadata for plugin-sdk 0.6.0 2026-09-17 15:22:55 -04:00
BillyOutlast d24781cea5 chore: ignore local build artifacts 2026-09-17 14:54:33 -04:00
BillyOutlast dc49432a45 fix(deps): pin typescript ^5.7.2 for typescript-eslint 8 compatibility 2026-09-17 14:54:07 -04:00
BillyOutlast 591f7cdbb2 chore: configurable SDK scope (@droposs cutover) and .dropplugin release workflow 2026-09-17 14:48:45 -04:00
BillyOutlast 1577d67d15 chore: align plugin with @droposs plugin-sdk 0.6.0 via workspace links v0.1.0 2026-09-15 16:57:21 -04:00
BillyOutlast a9baf2d027 Merge pull request #6 from Heretek-Games/dependabot/npm_and_yarn/typescript-7.0.2
chore(deps-dev): bump typescript from 5.9.3 to 7.0.2
2026-09-15 16:52:59 -04:00
dependabot[bot] 38609eda2d chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (#5)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...820762786026740c76f36085b0efc47a31fe5020)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 11:41:22 -04:00
dependabot[bot] 7ceebf5668 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#3)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/11d5960a326750d5838078e36cf38b85af677262...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 11:37:44 -04:00
dependabot[bot] 3daf319f30 chore(deps-dev): bump typescript from 5.9.3 to 7.0.2
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-09-15 02:18:22 +00:00
BillyOutlast 40a567335b Merge pull request #2 from Heretek-Games/chore/security-policy-and-dependabot
[audit] Add SECURITY.md and Dependabot config
2026-09-14 22:07:16 -04:00
BillyOutlast ff89a30133 ci: add a shared ESLint flat-config lint gate
Add eslint.config.mjs (eslint:recommended + typescript-eslint recommended,
type-unaware) with a `lint` script and a CI step. Rules that need a baseline
cleanup pass (no-explicit-any, ban-ts-comment, no-useless-assignment,
preserve-caught-error) are warnings; core rules and unused vars are errors.

Refs Heretek-Games/drop#69 (audit finding F-23).
2026-09-14 19:59:38 -04:00
BillyOutlast 6c93e5144e ci: pin GitHub Actions to commit SHAs
Pin actions/checkout, setup-node, upload-artifact, setup-dotnet, and
github-script to immutable commit SHAs (version kept in a trailing comment) so
a moved tag cannot change the code executed in CI.

Refs Heretek-Games/drop#69 (audit finding F-23).
2026-09-14 19:41:03 -04:00
BillyOutlast 40791074b8 chore: add SECURITY.md and Dependabot config
Add a private vulnerability-reporting policy and weekly Dependabot updates
(npm/cargo as applicable + GitHub Actions) to satisfy the org security-posture
baseline.

Refs Heretek-Games/drop#69
2026-09-14 19:36:13 -04:00
BillyOutlast 83baadb43c Merge pull request #1 from Heretek-Games/chore/sdk-ci
chore: registry SDK, CI/typecheck, VDF-backed Steam scanner
2026-09-14 09:13:31 -04:00
BillyOutlast 6204801649 ci: ignore dependency lifecycle scripts during install 2026-09-14 09:04:23 -04:00
BillyOutlast 58d056b314 feat(steam): parse libraryfolders.vdf and app manifests from host snapshots 2026-09-14 08:55:27 -04:00
BillyOutlast 12d776e2db ci: add npm ci/build/test/typecheck workflow on node 22 2026-09-14 08:55:27 -04:00
BillyOutlast 1afd73dbc2 chore(deps): use published @droposs/plugin-sdk@^0.4.0 2026-09-14 08:55:27 -04:00
BillyOutlast 5983838b8d feat(init): scaffold drop-store-steam (plugin API v2) 2026-09-14 01:24:16 -04:00