Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: step-security-bot/htmlhint_HTMLHint
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: htmlhint/HTMLHint
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 15 commits
  • 57 files changed
  • 4 contributors

Commits on Sep 10, 2025

  1. [StepSecurity] Apply security best practices (htmlhint#1718) 

    * [StepSecurity] Apply security best practices

Signed-off-by: StepSecurity Bot <[email protected]>

* Delete .github/workflows/dependency-review.yml

* Remove validation for GitHub Actions Zizmor

---------

Signed-off-by: StepSecurity Bot <[email protected]>
Co-authored-by: Christian Oliff <[email protected]>
    @step-security-bot @coliff
    step-security-bot and coliff authored Sep 10, 2025
    Configuration menu
    Copy the full SHA
    b52aae2 View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump vite (htmlhint#1717) 

    Bumps the npm_and_yarn group with 1 update in the /website directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `vite` from 6.3.5 to 6.3.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.3.6/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.3.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Oliff <[email protected]>
    @dependabot @coliff
    dependabot[bot] and coliff authored Sep 10, 2025
    Configuration menu
    Copy the full SHA
    422aa48 View commit details
    Browse the repository at this point in the history

Commits on Sep 11, 2025

  1. Update Node.js engine, workflows, and test coverage (htmlhint#1719) 

    Lowered the minimum Node.js engine requirement to 18 in package.json and added Node.js 18 to the test matrix. Updated CodeQL GitHub Actions to v3.30.2 and improved documentation for GitHub Actions usage. Removed a test that checked for rule presence in rules/index.mdx.

Update website.yml

Update project rules and labeler workflow formatting

Expanded general project rules to include line endings, code formatting, rule ordering, and GitHub Actions best practices. Also standardized comment spacing in the labeler workflow permissions section.
    @coliff
    coliff authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    294d58f View commit details
    Browse the repository at this point in the history

  2. Update Super-Linter GH Action (htmlhint#1720)

    @coliff
    coliff authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    b8e5968 View commit details
    Browse the repository at this point in the history

  3. Add link-rel-canonical-require rule (htmlhint#1721) 

    Introduces a new rule that enforces the presence of a <link rel="canonical"> tag with a non-blank href in the <head> element. Includes implementation, tests, documentation, and configuration updates.

Update link-rel-canonical-require.mdx

Refactor link-rel-canonical-require formatting

Improves code readability by reformatting the description string and simplifying the conditional for detecting canonical link elements.
    @coliff
    coliff authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    fd0d131 View commit details
    Browse the repository at this point in the history

  4. Release v1.7.0 (htmlhint#1722) 

    Updated htmlhint and website package versions to 1.7.0. Upgraded ESLint and @typescript-eslint dependencies, as well as Astro and esbuild-related packages in the website. Also removed lockfile-version from website/.npmrc and updated documentation files.
    @coliff
    coliff authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    5e924e9 View commit details
    Browse the repository at this point in the history

  5. docs: Add 'Why this rule is important' sections to rule docs (htmlhin… 

    …t#1723)

* Add 'Why this rule is important' sections to rule docs

Added explanations to multiple rule documentation files describing the importance of each rule for accessibility, SEO, and code quality. Also updated the configuration example to include the new 'form-method-require' rule and fixed changelog issue links.

* Update website/src/content/docs/changelog.mdx

Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: Copilot <[email protected]>
    @coliff @Copilot
    coliff and Copilot authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    8a3a247 View commit details
    Browse the repository at this point in the history

  6. docs: Update rules and GitHub Actions (htmlhint#1724) 

    Removed 'New' badge from h1-require and main-require rule docs. Updated GitHub Actions usage docs to use latest actions/checkout@v5 and actions/setup-node@v5, and set persist-credentials to false.
    @coliff
    coliff authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    5a5b8c1 View commit details
    Browse the repository at this point in the history

  7. Add OpenSSF best practices badge (htmlhint#1725)

    @coliff
    coliff authored Sep 11, 2025
    Configuration menu
    Copy the full SHA
    800d03f View commit details
    Browse the repository at this point in the history

Commits on Sep 15, 2025

  1. chore(deps): bump @astrojs/starlight (htmlhint#1728) 

    Bumps the dependencies group in /website with 1 update: [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight).


Updates `@astrojs/starlight` from 0.35.2 to 0.35.3
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/[email protected]/packages/starlight)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Sep 15, 2025
    Configuration menu
    Copy the full SHA
    1e6f08e View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump github/codeql-action from 3.30.1 to 3.30.3 (htmlhin… 

    …t#1726)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.1 to 3.30.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3.30.1...192325c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Sep 15, 2025
    Configuration menu
    Copy the full SHA
    6181096 View commit details
    Browse the repository at this point in the history

Commits on Sep 16, 2025

  1. Update and refactor glob (htmlhint#1730) 

    * Refactor glob usage in CLI for improved API and options

Replaces deprecated or less preferred glob API usages with updated methods (globSync, globStream) in formatter and htmlhint CLI modules. Removes unused or deprecated options and updates event handling for file matching, improving maintainability and compatibility.

* Update sourceMappingURL in htmlhint.js

The sourceMappingURL comment at the end of dist/cli/htmlhint.js was updated, likely reflecting a new or rebuilt source map. No other code changes were made.

* Update sarif.sarif
    @coliff
    coliff authored Sep 16, 2025
    Configuration menu
    Copy the full SHA
    6b2f35a View commit details
    Browse the repository at this point in the history

  2. Update dev dependencies and Dependabot schedule (htmlhint#1731) 

    Bump @typescript-eslint/eslint-plugin and @typescript-eslint/parser to 8.44.0, and rollup to 4.50.2 in package.json and package-lock.json. Update Node.js version in Volta config to 20.19.5. Change Dependabot update interval from weekly to monthly for npm and GitHub Actions.
    @coliff
    coliff authored Sep 16, 2025
    Configuration menu
    Copy the full SHA
    a72e545 View commit details
    Browse the repository at this point in the history

  3. Release v1.7.1 (htmlhint#1732)

    @coliff
    coliff authored Sep 16, 2025
    Configuration menu
    Copy the full SHA
    38d090c View commit details
    Browse the repository at this point in the history

Commits on Sep 17, 2025

  1. Add 'Why this rule is important' sections to rule docs (htmlhint#1733) 

    Add 'Why this rule is important' sections to rule docs

Added explanations to multiple rule documentation files describing the importance of each rule, along with further reading links where relevant. Also updated some headings for consistency.

Update further reading links to use markdown format

Replaced plain angle-bracketed URLs with markdown link syntax in the 'Further reading' sections of doctype-html5, frame-title-require, and main-require rule documentation for improved readability.

Update spec-char-escape.mdx

Update id-class-ad-disabled.mdx
    @coliff
    coliff authored Sep 17, 2025
    Configuration menu
    Copy the full SHA
    196e9f4 View commit details
    Browse the repository at this point in the history
Loading