Merge pull request #5 from qualcomm/feature/github-workflow

feature/github-workflow

Author: R-Bower

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/config.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
+  "changelog": [
+    "../scripts/changeset-conventional-commits/changelog-formatter.cjs",
+    { "repo": "qualcomm/qualcomm-ui-utils" }
+  ],
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "changedFilePatterns": [
+    "**",
+    "!dist",
+    "!build",
+    "!CHANGELOG.md",
+    "!node_modules",
+    "!.turbo",
+    "!scripts",
+    "!vite.config.ts",
+    "!vitest.config.ts"
+  ],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH": {
+    "updateInternalDependents": "always",
+    "onlyUpdatePeerDependentsWhenOutOfRange": true
+  },
+  "ignore": []
+}

.github/workflows/qcom-preflight-checks.yml

@@ -16,8 +16,10 @@ jobs:
     with:
         # ✅ Preflight Checkers
         repolinter: true                   # default: true
-        semgrep: true                      # default: true
-        copyright-license-detector: true   # default: true
+        # This is run daily on a cron. See: semgrep.yml
+        semgrep: false                     # default: true
+        # This is handled from code-quality.yml using a faster local script
+        copyright-license-detector: false  # default: true
         pr-check-emails: true              # default: true
         dependency-review: true            # default: true
     secrets:

.github/workflows/semgrep.yml

@@ -0,0 +1,43 @@
+name: Semgrep Supply Chain
+on:
+  schedule:
+  - cron: '0 6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  run-semgrep-scan:
+    name: Run Semgrep Scan
+    runs-on: ubuntu-latest
+
+    env:
+      SEMGREP_REPO_NAME: ${{ github.repository }}
+      SEMGREP_COMMIT: ${{ github.sha }}
+      SEMGREP_APP_TOKEN: ${{secrets.SEMGREP_APP_TOKEN}}
+
+    container:
+      image: semgrep/semgrep:1.125.0
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+        ref: ${{ github.head_ref }}
+
+    - name: Configure git
+      run: git config --global --add safe.directory "$(pwd)"
+
+    - name: Run Semgrep Scan
+      run: |
+        semgrep ci --sarif-output=semgrep-report.sarif
+
+    - name: Upload to Security Tab
+      uses: github/codeql-action/upload-sarif@v4
+      if: ${{ always() && github.event.repository.visibility == 'public' }}
+      with:
+        sarif_file: semgrep-report.sarif
+        category: semgrep

.github/workflows/stale-issues.yaml .github/workflows/stale-issues.yml.github/workflows/stale-issues.yaml renamed to .github/workflows/stale-issues.yml

@@ -13,7 +13,6 @@
     "lint": "turbo run lint --continue",
     "lint:ci": "turbo run lint --concurrency 6",
     "check-updates": "pnpm npm-check-updates",
-    "changeset-publish": "pnpm changeset publish",
     "changeset-generate": "tsx scripts/changeset-conventional-commits/main.ts",
     "bump": "pnpm changeset version",
     "consolidate-changelogs": "tsx scripts/changeset-conventional-commits/consolidate-changelogs.ts",
@@ -46,6 +45,7 @@
     "cross-env": "^10.1.0",
     "dayjs": "^1.11.19",
     "dotenv": "^17.2.4",
+    "envalid": "^8.1.1",
     "eslint": "catalog:",
     "execa": "^9.6.1",
     "glob": "catalog:",

package.json

@@ -41,7 +41,7 @@
     "@commander-js/extra-typings": "^14.0.0",
     "@qualcomm-ui/cli": "workspace:^1.0.6",
     "@qualcomm-ui/esbuild": "workspace:^1.0.5",
-    "@qualcomm-ui/tsconfig": "workspace:^1.0.4",
+    "@qualcomm-ui/tsconfig": "workspace:^2.0.0",
     "autoprefixer": "^10.4.21",
     "chalk": "^5.6.2",
     "chokidar": "^4.0.3",

packages/css-utils/package.json

@@ -40,7 +40,7 @@
   "devDependencies": {
     "@commander-js/extra-typings": "^14.0.0",
     "@qualcomm-ui/cli": "workspace:^1.0.6",
-    "@qualcomm-ui/tsconfig": "workspace:^1.0.4",
+    "@qualcomm-ui/tsconfig": "workspace:^2.0.0",
     "chalk": "^5.6.2",
     "chokidar": "^4.0.3",
     "esbuild": "^0.25.8",

packages/esbuild/package.json

@@ -1,5 +1,11 @@
 # @qualcomm-ui/tsconfig Changelog
 
+## 2.0.0 (2026/02/14)
+
+### BREAKING CHANGES
+
+- remove legacy tsconfig files
+
 ## 1.0.4 (2025/11/21)
 
 ### Miscellaneous Chores

packages/tsconfig/CHANGELOG.md

@@ -1,6 +1,6 @@
 {
   "name": "@qualcomm-ui/tsconfig",
-  "version": "1.0.4",
+  "version": "2.0.0",
   "author": "Ryan Bower",
   "license": "BSD-3-Clause-Clear",
   "repository": "https://github.com/qualcomm/qualcomm-ui",