chore(deps): update dependency oxfmt to v0.61.0

This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [oxfmt](https://oxc.rs/docs/guide/usage/formatter) ([source](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)) | [`0.58.0` → `0.60.0`](https://renovatebot.com/diffs/npm/oxfmt/0.58.0/0.60.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/oxfmt/0.60.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/oxfmt/0.58.0/0.60.0?slim=true) |
| [rolldown](https://rolldown.rs/) ([source](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown)) | [`1.1.5` → `1.2.0`](https://renovatebot.com/diffs/npm/rolldown/1.1.5/1.2.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/rolldown/1.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/rolldown/1.1.5/1.2.0?slim=true) |

---

### Release Notes

<details>
<summary>oxc-project/oxc (oxfmt)</summary>

### [`v0.60.0`](https://github.com/oxc-project/oxc/compare/oxfmt_v0.59.0...oxfmt_v0.60.0)

[Compare Source](https://github.com/oxc-project/oxc/compare/oxfmt_v0.59.0...oxfmt_v0.60.0)

### [`v0.59.0`](https://github.com/oxc-project/oxc/blob/HEAD/npm/oxfmt/CHANGELOG.md#0590---2026-07-13)

[Compare Source](https://github.com/oxc-project/oxc/compare/oxfmt_v0.58.0...oxfmt_v0.59.0)

##### 🐛 Bug Fixes

- [`415fe1e`](https://github.com/oxc-project/oxc/commit/415fe1e) oxfmt: Error on ignorePatterns that cannot match files outside the config directory ([#&#8203;24286](https://github.com/oxc-project/oxc/issues/24286)) (leaysgur)

</details>

<details>
<summary>rolldown/rolldown (rolldown)</summary>

### [`v1.2.0`](https://github.com/rolldown/rolldown/blob/HEAD/CHANGELOG.md#120---2026-07-15)

[Compare Source](https://github.com/rolldown/rolldown/compare/v1.1.5...v1.2.0)

##### 🚀 Features

- dev: skip shipping factories for newly imported top-level modules ([#&#8203;10223](https://github.com/rolldown/rolldown/issues/10223)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- dev: per-client ship map for HMR patch sizing ([#&#8203;10208](https://github.com/rolldown/rolldown/issues/10208)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- dev: client-side HMR ([#&#8203;10164](https://github.com/rolldown/rolldown/issues/10164)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- dev: send a full-reload update to clients when a tsconfig changes ([#&#8203;10262](https://github.com/rolldown/rolldown/issues/10262)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- treat `import.meta['url']` and `import.meta['ROLLUP_FILE_URL_*']` as side-effect free ([#&#8203;10267](https://github.com/rolldown/rolldown/issues/10267)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- rewrite `import.meta['url']` ([#&#8203;10251](https://github.com/rolldown/rolldown/issues/10251)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- add `FILE_NOT_FOUND` error ([#&#8203;10220](https://github.com/rolldown/rolldown/issues/10220)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- treat `import.meta.ROLLUP_FILE_URL_*` as side-effect free ([#&#8203;10217](https://github.com/rolldown/rolldown/issues/10217)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)

##### 🐛 Bug Fixes

- sourcemap: preserve unmapped boundaries during composition ([#&#8203;10254](https://github.com/rolldown/rolldown/issues/10254)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- `[format]` in `*FileNames` option for ESM format should be `es` instead of `esm` ([#&#8203;10214](https://github.com/rolldown/rolldown/issues/10214)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- sourcemap: preserve coarse mappings during composition ([#&#8203;10249](https://github.com/rolldown/rolldown/issues/10249)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- rolldown\_plugin\_vite\_import\_glob: support tsconfig paths with `import.meta.glob` ([#&#8203;10167](https://github.com/rolldown/rolldown/issues/10167)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- dev: clear tsconfig caches for bare full builds ([#&#8203;10276](https://github.com/rolldown/rolldown/issues/10276)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- dev: force a full rebuild when a tsconfig changes ([#&#8203;10261](https://github.com/rolldown/rolldown/issues/10261)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- treat rooted drive-less module ids as absolute in preserveModules naming ([#&#8203;10235](https://github.com/rolldown/rolldown/issues/10235)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- watch: rebuild when tsconfig files change ([#&#8203;10258](https://github.com/rolldown/rolldown/issues/10258)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- watch: drop tsconfig-merged transform options on each rebuild ([#&#8203;10257](https://github.com/rolldown/rolldown/issues/10257)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- incorrect `EMPTY_IMPORT_META` warning for `import.meta.ROLLUP_FILE_URL_*` for CJS output ([#&#8203;10221](https://github.com/rolldown/rolldown/issues/10221)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- deconflict: rename CJS locals shadowing wrapped-ESM namespace objects ([#&#8203;9970](https://github.com/rolldown/rolldown/issues/9970)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: drop the unused runtime module after entry-level external flattening ([#&#8203;10237](https://github.com/rolldown/rolldown/issues/10237)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: re-propagate has\_dynamic\_exports to transitive star importers ([#&#8203;10239](https://github.com/rolldown/rolldown/issues/10239)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- tree-shaking: tree-shake destructured dynamic import namespace bindings ([#&#8203;10213](https://github.com/rolldown/rolldown/issues/10213)) by [@&#8203;logaretm](https://github.com/logaretm)
- s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix ([#&#8203;10211](https://github.com/rolldown/rolldown/issues/10211)) by [@&#8203;satyamg1620](https://github.com/satyamg1620)

##### 🚜 Refactor

- dev: move full-reload to client side ([#&#8203;10207](https://github.com/rolldown/rolldown/issues/10207)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- readability follow-ups to the ReplaceWith migration ([#&#8203;10286](https://github.com/rolldown/rolldown/issues/10286)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- replace take\_in-then-write-back with ReplaceWith and by-value moves ([#&#8203;10285](https://github.com/rolldown/rolldown/issues/10285)) by [@&#8203;Boshen](https://github.com/Boshen)
- share the main resolver's cache with the transformer's tsconfig lookups ([#&#8203;10205](https://github.com/rolldown/rolldown/issues/10205)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- rolldown: extract the ns star-external \_\_reExport emission rule into LinkingMetadata ([#&#8203;10238](https://github.com/rolldown/rolldown/issues/10238)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: unify link/generate diagnostics into a Diagnostics accumulator ([#&#8203;10234](https://github.com/rolldown/rolldown/issues/10234)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- sourcemap\_filenames: drop dead sourcemap-filename plumbing ([#&#8203;10189](https://github.com/rolldown/rolldown/issues/10189)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- extract external import symbol merging into a method ([#&#8203;10224](https://github.com/rolldown/rolldown/issues/10224)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: skip CJS namespace merging under strict execution order ([#&#8203;10203](https://github.com/rolldown/rolldown/issues/10203)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- resolve the manual tsconfig per file instead of once at startup ([#&#8203;10200](https://github.com/rolldown/rolldown/issues/10200)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- rolldown: route interop ESM init emission through a shared init-target view ([#&#8203;10202](https://github.com/rolldown/rolldown/issues/10202)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- rolldown: collapse vestigial wrap-kind state and share chunk sort helper ([#&#8203;10201](https://github.com/rolldown/rolldown/issues/10201)) by [@&#8203;hyfdev](https://github.com/hyfdev)

##### 📚 Documentation

- show plugin kinds in JSDoc and each hook's description ([#&#8203;10218](https://github.com/rolldown/rolldown/issues/10218)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- add an explanation about removing imports from external modules without any messages ([#&#8203;10215](https://github.com/rolldown/rolldown/issues/10215)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)

##### ⚡ Performance

- sourcemap: owned merge in SourceJoiner::join (4005->5 allocs/chunk) ([#&#8203;10250](https://github.com/rolldown/rolldown/issues/10250)) by [@&#8203;Boshen](https://github.com/Boshen)
- avoid redundant sourcemap string copies in collapse and minify paths ([#&#8203;10093](https://github.com/rolldown/rolldown/issues/10093)) by [@&#8203;Boshen](https://github.com/Boshen)

##### 🧪 Testing

- code-splitting: establish strict-order review baselines ([#&#8203;10287](https://github.com/rolldown/rolldown/issues/10287)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- dev: add hot API test cases ([#&#8203;10181](https://github.com/rolldown/rolldown/issues/10181)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- code-splitting: normalize strict execution order variants ([#&#8203;10277](https://github.com/rolldown/rolldown/issues/10277)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- code-splitting: harden strict execution order coverage ([#&#8203;10252](https://github.com/rolldown/rolldown/issues/10252)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- code-splitting: add strict execution order regressions ([#&#8203;10253](https://github.com/rolldown/rolldown/issues/10253)) by [@&#8203;hyfdev](https://github.com/hyfdev)

##### ⚙️ Miscellaneous Tasks

- deps: update github actions ([#&#8203;10241](https://github.com/rolldown/rolldown/issues/10241)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update oxc to 0.140.0 ([#&#8203;10274](https://github.com/rolldown/rolldown/issues/10274)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- update Yunfei's GitHub username ([#&#8203;10275](https://github.com/rolldown/rolldown/issues/10275)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- deps: update napi ([#&#8203;10260](https://github.com/rolldown/rolldown/issues/10260)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update test262 submodule for tests ([#&#8203;10266](https://github.com/rolldown/rolldown/issues/10266)) by [@&#8203;rolldown-guard](https://github.com/rolldown-guard)\[bot]
- deps: update dependency vite-plus to v0.2.4 ([#&#8203;10256](https://github.com/rolldown/rolldown/issues/10256)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update napi ([#&#8203;10240](https://github.com/rolldown/rolldown/issues/10240)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update oxc resolver to v11.24.2 ([#&#8203;10245](https://github.com/rolldown/rolldown/issues/10245)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update rust crates ([#&#8203;10244](https://github.com/rolldown/rolldown/issues/10244)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- disable Renovate updates for idna\_adapter ([#&#8203;10248](https://github.com/rolldown/rolldown/issues/10248)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- deps: update oxc resolver to v11.24.1 ([#&#8203;10232](https://github.com/rolldown/rolldown/issues/10232)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update rust crate oxc\_sourcemap to v8.1.1 ([#&#8203;10233](https://github.com/rolldown/rolldown/issues/10233)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update dependency rolldown-plugin-dts to ^0.27.0 ([#&#8203;10206](https://github.com/rolldown/rolldown/issues/10206)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: upgrade sugar\_path to v3 ([#&#8203;10230](https://github.com/rolldown/rolldown/issues/10230)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- add `dist-*` to `.gitignore` in sourcemap-filenames/hash-final-content fixture ([#&#8203;10216](https://github.com/rolldown/rolldown/issues/10216)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- deps: update dependency rust to v1.97.0 ([#&#8203;10209](https://github.com/rolldown/rolldown/issues/10209)) by [@&#8203;renovate](https://github.com/renovate)\[bot]

##### ❤️ New Contributors

- [@&#8203;satyamg1620](https://github.com/satyamg1620) made their first contribution in [#&#8203;10211](https://github.com/rolldown/rolldown/pull/10211)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjMuOSIsInVwZGF0ZWRJblZlciI6IjQzLjI2My45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBzIiwibnBtIl19-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action/pulls/61
Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.editorconfig

@@ -0,0 +1,8 @@
+[*]
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+charset = utf-8
+trim_trailing_whitespace = true
+max_line_length = 80

.gitea/actions/release-git-tag/action.yaml

@@ -1,15 +0,0 @@
-name: Release Git tag
-description: Release the Git tag
-
-inputs:
-  tag:
-    description: The tag to release
-    required: true
-
-runs:
-  using: "composite"
-  steps:
-    - shell: bash
-      run: |
-        git tag ${{ inputs.tag }}
-        git push origin ${{ inputs.tag }}

.gitea/workflows/cd.yaml

@@ -4,20 +4,24 @@ on:
   push:
     branches:
       - main
+    paths:
+      - action.yml
+      - dist/**
+  workflow_dispatch:
 
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.23
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@3ab82e6aa1db388a34562f5ce6eedb598651d916 # 0.1.42
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-      - uses: ./.gitea/actions/release-git-tag
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3f772d0a80a510b0f06762be110276c9c8a7b7b8 # 0.2.12
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/ci.yaml

@@ -8,8 +8,61 @@ jobs:
     name: Dry-Run
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - name: Validate JSON
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Validate Renovate Config
         uses: ./
         with:
           json-file: renovate.json
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version-file: .nvmrc
+      - name: Cache dependencies
+        id: cache-deps
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            node_modules
+          key: ${{ runner.os }}-npm-${{ hashFiles('package-lock.json') }}
+      - name: Install dependencies
+        if: steps.cache-deps.outputs.cache-hit != 'true'
+        run: npm ci
+      - name: Typecheck
+        run: npm run typecheck
+      - name: Format code
+        run: npm run format:check
+      - name: Run test
+        run: npm run test
+
+  check-dist:
+    name: Check Dist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version-file: .nvmrc
+      - name: Cache dependencies
+        id: cache-deps
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            node_modules
+          key: ${{ runner.os }}-npm-${{ hashFiles('package-lock.json') }}
+      - name: Install dependencies
+        if: steps.cache-deps.outputs.cache-hit != 'true'
+        run: npm ci
+      - run: mv dist dist_orig
+      - run: npm run build
+      - run: |
+          original_hash=$(sha256sum dist_orig/index.js | cut -d' ' -f1)
+          new_hash=$(sha256sum dist/index.js | cut -d' ' -f1)
+          if [ "$original_hash" != "$new_hash" ]; then
+            echo "Build is not up to date. Original hash: $original_hash, new hash: $new_hash"
+            exit 1
+          fi

.gitea/workflows/prerelease.yaml

@@ -8,15 +8,15 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.23
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@3ab82e6aa1db388a34562f5ce6eedb598651d916 # 0.1.42
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: true
-      - uses: ./.gitea/actions/release-git-tag
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3f772d0a80a510b0f06762be110276c9c8a7b7b8 # 0.2.12
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitignore

@@ -1,138 +1,2 @@
-# ---> Node
-# Logs
-logs
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-lerna-debug.log*
-.pnpm-debug.log*
-
-# Diagnostic reports (https://nodejs.org/api/report.html)
-report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
-
-# Runtime data
-pids
-*.pid
-*.seed
-*.pid.lock
-
-# Directory for instrumented libs generated by jscoverage/JSCover
-lib-cov
-
-# Coverage directory used by tools like istanbul
+node_modules
 coverage
-*.lcov
-
-# nyc test coverage
-.nyc_output
-
-# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
-.grunt
-
-# Bower dependency directory (https://bower.io/)
-bower_components
-
-# node-waf configuration
-.lock-wscript
-
-# Compiled binary addons (https://nodejs.org/api/addons.html)
-build/Release
-
-# Dependency directories
-node_modules/
-jspm_packages/
-
-# Snowpack dependency directory (https://snowpack.dev/)
-web_modules/
-
-# TypeScript cache
-*.tsbuildinfo
-
-# Optional npm cache directory
-.npm
-
-# Optional eslint cache
-.eslintcache
-
-# Optional stylelint cache
-.stylelintcache
-
-# Microbundle cache
-.rpt2_cache/
-.rts2_cache_cjs/
-.rts2_cache_es/
-.rts2_cache_umd/
-
-# Optional REPL history
-.node_repl_history
-
-# Output of 'npm pack'
-*.tgz
-
-# Yarn Integrity file
-.yarn-integrity
-
-# dotenv environment variable files
-.env
-.env.development.local
-.env.test.local
-.env.production.local
-.env.local
-
-# parcel-bundler cache (https://parceljs.org/)
-.cache
-.parcel-cache
-
-# Next.js build output
-.next
-out
-
-# Nuxt.js build / generate output
-.nuxt
-dist
-
-# Gatsby files
-.cache/
-# Comment in the public line in if your project uses Gatsby and not Next.js
-# https://nextjs.org/blog/next-9-1#public-directory-support
-# public
-
-# vuepress build output
-.vuepress/dist
-
-# vuepress v2.x temp and cache directory
-.temp
-.cache
-
-# vitepress build output
-**/.vitepress/dist
-
-# vitepress cache directory
-**/.vitepress/cache
-
-# Docusaurus cache and generated files
-.docusaurus
-
-# Serverless directories
-.serverless/
-
-# FuseBox cache
-.fusebox/
-
-# DynamoDB Local files
-.dynamodb/
-
-# TernJS port file
-.tern-port
-
-# Stores VSCode versions used for testing VSCode extensions
-.vscode-test
-
-# yarn v2
-.yarn/cache
-.yarn/unplugged
-.yarn/build-state.yml
-.yarn/install-state.gz
-.pnp.*
-

.npmrc

@@ -0,0 +1 @@
+min-release-age=7

.nvmrc

@@ -1 +1,2 @@
 24
+

.oxfmtrc.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "ignorePatterns": ["dist/**", "node_modules/**", "coverage/**"]
+}

action.yml

@@ -8,26 +8,5 @@ inputs:
     required: true
 
 runs:
-  using: "composite"
-  steps:
-    - uses: actions/setup-node@v5
-      with:
-        node-version: "latest"
-    - name: Extract schema
-      shell: bash
-      run: |
-        schema=$(jq -r '.["$schema"]' < ${{ inputs.json-file }})
-        if [ -n "$schema" ]; then
-          curl -s $schema > schema.json
-        else
-          echo "No schema found"
-          exit 0
-        fi
-    - name: Update the schema to the latest version
-      shell: bash
-      run: |
-        npx ajv-cli migrate -s schema.json -o schema.json
-    - name: Validate JSON
-      shell: bash
-      run: |
-        npx ajv-cli validate -s schema.json -d ${{ inputs.json-file }} --strict=false
+  using: "node24"
+  main: "dist/index.js"

package.json

@@ -0,0 +1,25 @@
+{
+  "name": "validate-json-by-json-schema-action",
+  "version": "1.0.0",
+  "type": "commonjs",
+  "main": "src/index.ts",
+  "scripts": {
+    "test": "vitest --config vitext.config.ts",
+    "format": "oxfmt",
+    "format:check": "oxfmt --check",
+    "build": "rolldown -c",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@actions/core": "3.0.1",
+    "ajv": "8.20.0"
+  },
+  "devDependencies": {
+    "@types/node": "24.13.3",
+    "@vitest/coverage-v8": "4.1.10",
+    "oxfmt": "0.61.0",
+    "rolldown": "1.2.0",
+    "typescript": "7.0.2",
+    "vitest": "4.1.10"
+  }
+}

renovate.json

@@ -1,7 +1,12 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "local>t.behrendt/renovate-configs:common",
-    "local>t.behrendt/renovate-configs:action"
-  ]
+    "local>t.behrendt/renovate-configs:action",
+    "local>t.behrendt/renovate-configs:bun-npm"
+  ],
+  "postUpgradeTasks": {
+    "commands": ["npm ci", "npm run build"],
+    "fileFilters": ["dist/**"],
+    "executionMode": "update"
+  }
 }

rolldown.config.ts

@@ -0,0 +1,11 @@
+import { defineConfig } from "rolldown";
+
+export default defineConfig({
+  input: "src/index.ts",
+  platform: "node",
+  tsconfig: "./tsconfig.json",
+  output: {
+    file: "dist/index.js",
+    format: "cjs",
+  },
+});

src/index.ts

@@ -0,0 +1,3 @@
+import { run } from "./main";
+
+run();

src/main.ts

@@ -0,0 +1,18 @@
+import * as core from "@actions/core";
+import { readFileSync } from "node:fs";
+import { validateJson } from "./validation";
+
+export async function run(): Promise<void> {
+  try {
+    const jsonFilePath = core.getInput("json-file");
+    core.info(`Validating JSON file: ${jsonFilePath}`);
+
+    const json = readFileSync(jsonFilePath, "utf8");
+
+    await validateJson(json);
+
+    core.info("JSON file is valid");
+  } catch (error) {
+    core.setFailed(`Error validating JSON file: ${error}`);
+  }
+}

src/validation.test.ts

@@ -0,0 +1,109 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { validateJson } from "./validation";
+
+global.fetch = vi.fn();
+
+const validSchema = JSON.stringify({
+  $id: "https://t00n.de/schema.json",
+  title:
+    "JSON schema for Renovate 43.244.4 config files (https://renovatebot.com/)",
+  $schema: "http://json-schema.org/draft-07/schema#",
+  type: "object",
+  properties: {
+    $schema: {
+      type: "string",
+    },
+    name: {
+      type: "string",
+    },
+  },
+  required: ["name"],
+  additionalProperties: false,
+});
+
+describe("validateJson()", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("throws an error if the JSON file is not valid JSON", async () => {
+    const jsonFile = {
+      despiteThisBeingValidJson: "toString() breaks it, making it invalid",
+    }.toString();
+    await expect(validateJson(jsonFile)).rejects.toThrow(
+      '"[object Object]" is not valid JSON',
+    );
+  });
+
+  it("throws an error if the JSON file does not contain a $schema property", async () => {
+    const jsonFile = JSON.stringify({
+      validJson: true,
+    });
+    await expect(validateJson(jsonFile)).rejects.toThrow(
+      "No schema found in JSON file.",
+    );
+  });
+
+  it("throws an error if the schema cannot be fetched", async () => {
+    vi.mocked(fetch).mockRejectedValue(new Error("Failed to fetch schema"));
+    const jsonFile = JSON.stringify({ $schema: "http://t00n.de/404.json" });
+    await expect(validateJson(jsonFile)).rejects.toThrow(
+      "Failed to fetch schema",
+    );
+  });
+
+  it("throws an error if the schema file is not valid", async () => {
+    vi.mocked(fetch).mockResolvedValue(
+      // @ts-expect-error - mock response
+      {
+        ok: true,
+        text: async () =>
+          ({
+            despiteThisBeingValidJson:
+              "toString() breaks it, making it invalid",
+          }).toString(),
+      },
+    );
+
+    const jsonFile = JSON.stringify({
+      $schema: "https://json-schema.org/draft-07/schema",
+    });
+    await expect(validateJson(jsonFile)).rejects.toThrow(
+      '"[object Object]" is not valid JSON',
+    );
+  });
+
+  it("throws an error if the JSON file does not match the schema", async () => {
+    vi.mocked(fetch).mockResolvedValue(
+      // @ts-expect-error - mock response
+      {
+        ok: true,
+        text: async () => validSchema,
+      },
+    );
+
+    const jsonFile = JSON.stringify({
+      $schema: "https://json-schema.org/draft-07/schema",
+      notTheExpectedField: 42,
+    });
+    await expect(validateJson(jsonFile)).rejects.toThrow(
+      "JSON file is not valid: No errors",
+    );
+  });
+
+  it("does not throw an error if the JSON file is valid", async () => {
+    vi.mocked(fetch).mockResolvedValue(
+      // @ts-expect-error - mock response
+      {
+        ok: true,
+        text: async () => validSchema,
+      },
+    );
+
+    const jsonFile = JSON.stringify({
+      $schema: "https://t00n.de/schema.json",
+      name: "John Doe",
+    });
+    await expect(validateJson(jsonFile)).resolves.toBeUndefined();
+  });
+});

src/validation.ts

@@ -0,0 +1,25 @@
+import Ajv from "ajv";
+
+export const validateJson = async (jsonFileContent: string): Promise<void> => {
+  const jsonObject = JSON.parse(jsonFileContent);
+
+  const schema = jsonObject["$schema"];
+  if (!schema) {
+    throw new Error("No schema found in JSON file.");
+  }
+
+  const schemaUrl = new URL(schema);
+
+  const schemaContent = await fetch(schemaUrl.toString());
+  const schemaText = await schemaContent.text();
+  const schemaObject = JSON.parse(schemaText);
+
+  const validator = new Ajv({
+    strict: false,
+  });
+  const validate = validator.compile(schemaObject);
+  const isValid = validate(jsonObject);
+  if (!isValid) {
+    throw new Error(`JSON file is not valid: ${validator.errorsText()}`);
+  }
+};

tsconfig.json

@@ -0,0 +1,22 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "commonjs",
+    "lib": ["ES2022"],
+    "types": ["node"],
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "removeComments": false,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "exactOptionalPropertyTypes": true,
+    "noImplicitOverride": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist", "**/*.test.ts", "**/*.spec.ts"]
+}

vitext.config.ts

@@ -0,0 +1,11 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    coverage: {
+      enabled: true,
+      provider: "v8",
+      reporter: ["lcov"],
+    },
+  },
+});