release: v2.1.3 - bump @devicefarmer/adbkit from 3.3.8 to 3.3.9 in the…

.github/dependabot.yml

@@ -32,48 +32,48 @@
 
 version: 2
 updates:
-    # GitHub Actions: keep pinned action SHAs / version tags fresh.
-    - package-ecosystem: "github-actions"
-      directory: "/"
-      target-branch: "next"
-      schedule:
-          interval: "weekly"
-      open-pull-requests-limit: 5
-      commit-message:
-          prefix: "deps"
-      # Grouped PRs cut noise: one PR per (security | patch | minor) bundle
-      # per week instead of N separate PRs. Security PRs still get retargeted
-      # to `hotfixes` by hotfix-redirector.yml when GHSA refs appear in the
-      # body — bundling N GHSA fixes into one PR is fine, the redirector
-      # only needs one match to retarget.
-      groups:
-          security:
-              applies-to: security-updates
-              patterns: ["*"]
-          patch:
-              applies-to: version-updates
-              update-types: ["patch"]
-          minor:
-              applies-to: version-updates
-              update-types: ["minor"]
+  # GitHub Actions: keep pinned action SHAs / version tags fresh.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    target-branch: "next"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "deps"
+    # Grouped PRs cut noise: one PR per (security | patch | minor) bundle
+    # per week instead of N separate PRs. Security PRs still get retargeted
+    # to `hotfixes` by hotfix-redirector.yml when GHSA refs appear in the
+    # body — bundling N GHSA fixes into one PR is fine, the redirector
+    # only needs one match to retarget.
+    groups:
+      security:
+        applies-to: security-updates
+        patterns: ["*"]
+      patch:
+        applies-to: version-updates
+        update-types: ["patch"]
+      minor:
+        applies-to: version-updates
+        update-types: ["minor"]
 
-    # NPM: package.json + package-lock.json updates.
-    # Delete this block if your repo isn't a Node project.
-    - package-ecosystem: "npm"
-      directory: "/"
-      target-branch: "next"
-      schedule:
-          interval: "weekly"
-      open-pull-requests-limit: 5
-      commit-message:
-          prefix: "deps"
-      groups:
-          security:
-              applies-to: security-updates
-              patterns: ["*"]
-          patch:
-              applies-to: version-updates
-              update-types: ["patch"]
-          minor:
-              applies-to: version-updates
-              update-types: ["minor"]
+  # NPM: package.json + package-lock.json updates.
+  # Delete this block if your repo isn't a Node project.
+  - package-ecosystem: "npm"
+    directory: "/"
+    target-branch: "next"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "deps"
+    groups:
+      security:
+        applies-to: security-updates
+        patterns: ["*"]
+      patch:
+        applies-to: version-updates
+        update-types: ["patch"]
+      minor:
+        applies-to: version-updates
+        update-types: ["minor"]

.github/workflows/branch-retention.yml

@@ -21,18 +21,18 @@
 name: 🌿 Branch Retention
 
 on:
-    pull_request:
-        types: [closed]
-        branches: [master, main, next, hotfixes]
+  pull_request:
+    types: [closed]
+    branches: [master, main, next, hotfixes]
 
 permissions:
-    contents: write
-    pull-requests: read
+  contents: write
+  pull-requests: read
 
 jobs:
-    retain:
-        if: github.event.pull_request.merged == true
-        uses: CLDMV/.github/.github/workflows/reusable-branch-retention.yml@v4
-        secrets:
-            BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
-            BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
+  retain:
+    if: github.event.pull_request.merged == true
+    uses: CLDMV/.github/.github/workflows/reusable-branch-retention.yml@v4
+    secrets:
+      BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
+      BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}

.github/workflows/cla.yml

@@ -35,26 +35,26 @@
 name: 📜 CLA
 
 on:
-    pull_request_target:
-        types: [opened, synchronize, reopened, ready_for_review]
-    issue_comment:
-        types: [created]
+  pull_request_target:
+    types: [opened, synchronize, reopened, ready_for_review]
+  issue_comment:
+    types: [created]
 
 permissions:
-    contents: read
-    pull-requests: write
-    statuses: write
-    issues: write
+  contents: read
+  pull-requests: write
+  statuses: write
+  issues: write
 
 jobs:
-    cla:
-        uses: CLDMV/.github/.github/workflows/reusable-cla.yml@v4
-        with:
-            cla_version: "1.0"
-        secrets:
-            BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
-            BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
-            CLA_BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_CLA_BOT_APP_CLIENT_ID }}
-            CLA_BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_CLA_BOT_APP_PRIVATE_KEY }}
-            TAGGER_NAME: ${{ secrets.CLDMV_BOT_NAME }}
-            TAGGER_EMAIL: ${{ secrets.CLDMV_BOT_EMAIL }}
+  cla:
+    uses: CLDMV/.github/.github/workflows/reusable-cla.yml@v4
+    with:
+      cla_version: "1.0"
+    secrets:
+      BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
+      BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
+      CLA_BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_CLA_BOT_APP_CLIENT_ID }}
+      CLA_BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_CLA_BOT_APP_PRIVATE_KEY }}
+      TAGGER_NAME: ${{ secrets.CLDMV_BOT_NAME }}
+      TAGGER_EMAIL: ${{ secrets.CLDMV_BOT_EMAIL }}

.github/workflows/codeql.yml

@@ -30,41 +30,41 @@
 name: 🔍 CodeQL
 
 on:
-    push:
-        branches: [master, main]
-    # Same fork-PR consideration as ci.yml: pull_request fires for forks; SARIF
-    # upload to base-repo Security tab fails with read-only token. Acceptable —
-    # push-to-master analysis after merge catches anything missed. DO NOT use
-    # pull_request_target (runs base-repo workflow with secrets against fork
-    # code; dangerous).
-    pull_request:
-        types: [opened, synchronize, reopened, ready_for_review]
-        # Include the v4 integration branches (`next`, `hotfixes`) so feature
-        # and hotfix PRs trigger CodeQL. Without these, branch protection
-        # rulesets that require the CodeQL check on `next`/`hotfixes` will
-        # sit on "waiting for results" indefinitely. Branches that don't
-        # exist in a given repo simply never trigger the workflow — harmless
-        # for repos that haven't adopted the v4 staging-branch flow.
-        branches: [master, main, next, hotfixes]
-    schedule:
-        - cron: "37 14 * * 1" # weekly Monday 14:37 UTC; GitHub updates queries over time
+  push:
+    branches: [master, main]
+  # Same fork-PR consideration as ci.yml: pull_request fires for forks; SARIF
+  # upload to base-repo Security tab fails with read-only token. Acceptable —
+  # push-to-master analysis after merge catches anything missed. DO NOT use
+  # pull_request_target (runs base-repo workflow with secrets against fork
+  # code; dangerous).
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    # Include the v4 integration branches (`next`, `hotfixes`) so feature
+    # and hotfix PRs trigger CodeQL. Without these, branch protection
+    # rulesets that require the CodeQL check on `next`/`hotfixes` will
+    # sit on "waiting for results" indefinitely. Branches that don't
+    # exist in a given repo simply never trigger the workflow — harmless
+    # for repos that haven't adopted the v4 staging-branch flow.
+    branches: [master, main, next, hotfixes]
+  schedule:
+    - cron: "37 14 * * 1" # weekly Monday 14:37 UTC; GitHub updates queries over time
 
 permissions:
-    security-events: write
-    contents: read
-    actions: read
+  security-events: write
+  contents: read
+  actions: read
 
 concurrency:
-    group: codeql-${{ github.workflow }}-${{ github.ref }}
-    cancel-in-progress: ${{ github.ref != 'refs/heads/master' && github.ref != 'refs/heads/main' }}
+  group: codeql-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/master' && github.ref != 'refs/heads/main' }}
 
 jobs:
-    analyze:
-        uses: CLDMV/.github/.github/workflows/reusable-codeql.yml@v4
-        with:
-            languages: "javascript-typescript"
-            # Override defaults if needed:
-            # queries: "security-extended,security-and-quality"
-            # paths_ignore: "node_modules/,dist/,coverage/,**/test/**"
-            # config_file: ".github/codeql-config.yml"
-            # build_mode: "autobuild"
+  analyze:
+    uses: CLDMV/.github/.github/workflows/reusable-codeql.yml@v4
+    with:
+      languages: "javascript-typescript"
+      # Override defaults if needed:
+      # queries: "security-extended,security-and-quality"
+      # paths_ignore: "node_modules/,dist/,coverage/,**/test/**"
+      # config_file: ".github/codeql-config.yml"
+      # build_mode: "autobuild"

.github/workflows/dependabot-auto-merge.yml

@@ -33,22 +33,22 @@
 name: 🤖 Dependabot Auto-Merge
 
 on:
-    pull_request:
-        types: [opened, reopened, synchronize, ready_for_review]
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
 
 permissions:
-    contents: write
-    pull-requests: write
+  contents: write
+  pull-requests: write
 
 jobs:
-    automerge:
-        # Pre-filter at workflow level so this doesn't spin up for every PR.
-        if: github.event.pull_request.user.login == 'dependabot[bot]'
-        uses: CLDMV/.github/.github/workflows/reusable-dependabot-auto-merge.yml@v4
-        with:
-            bump_types: "patch,minor"
-            merge_method: "squash"
-            # also_for_actors: "renovate[bot]"   # extend if you adopt Renovate
-        secrets:
-            BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
-            BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
+  automerge:
+    # Pre-filter at workflow level so this doesn't spin up for every PR.
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    uses: CLDMV/.github/.github/workflows/reusable-dependabot-auto-merge.yml@v4
+    with:
+      bump_types: "patch,minor"
+      merge_method: "squash"
+      # also_for_actors: "renovate[bot]"   # extend if you adopt Renovate
+    secrets:
+      BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
+      BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}

.github/workflows/dependency-review.yml

@@ -11,24 +11,24 @@
 name: 🔒 Dependency Review
 
 on:
-    pull_request:
-        types: [opened, synchronize, reopened, ready_for_review]
-        branches: [master, main]
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    branches: [master, main]
 
 permissions:
-    contents: read
-    pull-requests: write
+  contents: read
+  pull-requests: write
 
 jobs:
-    review:
-        uses: CLDMV/.github/.github/workflows/reusable-dependency-review.yml@v4
-        with:
-            fail_on_severity: "moderate"
-            # Per-repo license policy override:
-            # deny_licenses: "AGPL-3.0,LGPL-3.0"   # block copyleft for an Apache-2.0 repo
-        # Bot App credentials. When set, the dependency-review PR comment is
-        # posted by the consumer's bot App instead of github-actions[bot].
-        # Both lines are optional; remove them to fall back to GITHUB_TOKEN.
-        secrets:
-            BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
-            BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
+  review:
+    uses: CLDMV/.github/.github/workflows/reusable-dependency-review.yml@v4
+    with:
+      fail_on_severity: "moderate"
+      # Per-repo license policy override:
+      # deny_licenses: "AGPL-3.0,LGPL-3.0"   # block copyleft for an Apache-2.0 repo
+    # Bot App credentials. When set, the dependency-review PR comment is
+    # posted by the consumer's bot App instead of github-actions[bot].
+    # Both lines are optional; remove them to fall back to GITHUB_TOKEN.
+    secrets:
+      BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
+      BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}

.github/workflows/feature-pr.yml

@@ -26,34 +26,34 @@
 name: 🔀 Feature PR (v4)
 
 on:
-    push:
-        branches:
-            # CUSTOMIZE: prune this list to whichever branch prefixes your
-            # repo uses. Must align with the `case` statement in the reusable.
-            - 'feat/**'
-            - 'feature/**'
-            - 'fix/**'
-            - 'release/**'
-            - 'chore/**'
-            - 'refactor/**'
-            - 'docs/**'
-            - 'ci/**'
-            - 'perf/**'
-            - 'test/**'
-            - 'style/**'
-            - 'hotfix/**'
+  push:
+    branches:
+      # CUSTOMIZE: prune this list to whichever branch prefixes your
+      # repo uses. Must align with the `case` statement in the reusable.
+      - "feat/**"
+      - "feature/**"
+      - "fix/**"
+      - "release/**"
+      - "chore/**"
+      - "refactor/**"
+      - "docs/**"
+      - "ci/**"
+      - "perf/**"
+      - "test/**"
+      - "style/**"
+      - "hotfix/**"
 
 concurrency:
-    group: feature-pr-${{ github.repository }}-${{ github.ref }}
-    cancel-in-progress: false
+  group: feature-pr-${{ github.repository }}-${{ github.ref }}
+  cancel-in-progress: false
 
 jobs:
-    open-pr:
-        permissions:
-            contents: read
-            pull-requests: write
-        uses: CLDMV/.github/.github/workflows/workflow-feature-pr.yml@v4
-        secrets:
-            # Map your repo/org secrets to the expected names.
-            BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
-            BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
+  open-pr:
+    permissions:
+      contents: read
+      pull-requests: write
+    uses: CLDMV/.github/.github/workflows/workflow-feature-pr.yml@v4
+    secrets:
+      # Map your repo/org secrets to the expected names.
+      BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
+      BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}