Skip to content

feat: support tracking Astro files - #1009

Draft
sushichan044 wants to merge 7 commits into
sverweij:mainfrom
sushichan044:feat-support-processing-astro-files
Draft

feat: support tracking Astro files#1009
sushichan044 wants to merge 7 commits into
sverweij:mainfrom
sushichan044:feat-support-processing-astro-files

Conversation

@sushichan044

@sushichan044 sushichan044 commented Aug 5, 2025

Copy link
Copy Markdown
Contributor

Plan to do something drastic?
Leave an issue with a
summary of the changes you propose + some context on why you'd want to
do that, so we can have a conversation before you start. This will save you time!

Caution

Still WIP. not tested yet

Description

closes #1007

  • detect static import in front matter block
  • detect dynamic import in front matter block
  • detect static import in script tag
  • detect dynamic import in script tag

Motivation and Context

How Has This Been Tested?

  • green ci

Screenshots

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • Documentation only change
  • Refactor (non-breaking change which fixes an issue without changing functionality)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist

  • 📖

    • My change doesn't require a documentation update, or ...
    • it does and I have updated it
  • ⚖️

    • The contribution will be subject to The MIT license, and I'm OK with that.
    • The contribution is my own original work.
    • I am ok with the stuff in CONTRIBUTING.md.

@sonarqubecloud

sonarqubecloud Bot commented Aug 5, 2025

Copy link
Copy Markdown

@sushichan044

Copy link
Copy Markdown
Contributor Author

TODO: refine test case and push

@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
2 Security Hotspots

See analysis details on SonarQube Cloud

@sushichan044

Copy link
Copy Markdown
Contributor Author

TODO: handle ReDoS

@sverweij
sverweij force-pushed the main branch 5 times, most recently from 556ba8c to 9df765d Compare March 2, 2026 19:04
@sverweij
sverweij force-pushed the main branch 2 times, most recently from 0496c7d to e401673 Compare March 26, 2026 19:29
@sverweij
sverweij force-pushed the main branch 3 times, most recently from aa4ffac to d4dad0e Compare May 15, 2026 19:43
@sushichan044

Copy link
Copy Markdown
Contributor Author

Sorry, the behavior of the Astro Go Compiler was difficult, and I had stopped working on the PR.

Depending on the API of the new Rust compiler, it might be possible to support it simply without the hacks that were necessary for the Go compiler, so I will give it a try.

https://github.com/withastro/compiler-rs

Up'em just updated these outdated dependencies in package.json:

@swc/core                         1.15.40   -> 1.15.41  devDependencies   (policy: latest)
@types/node                       25.9.1    -> 25.9.3   devDependencies   (policy: latest)
@typescript-eslint/eslint-plugin  8.60.0    -> 8.61.0   devDependencies   (policy: latest)
@typescript-eslint/parser         8.60.0    -> 8.61.0   devDependencies   (policy: latest)
@vue/compiler-sfc                 3.5.35    -> 3.5.38   devDependencies   (policy: latest)
acorn                             8.16.0    -> 8.17.0   dependencies      (policy: latest)
clean-pkg-json                    1.4.2     -> 2.0.0    devDependencies   (policy: latest)
enhanced-resolve                  5.22.1    -> 5.24.0   dependencies      (policy: latest)
esbuild                           0.28.0    -> 0.28.1   devDependencies   (policy: latest)
eslint-plugin-security            4.0.0     -> 4.0.1    devDependencies   (policy: latest)
lint-staged                       17.0.5    -> 17.0.7   devDependencies   (policy: latest)
npm-run-all2                      9.0.1     -> 9.0.2    devDependencies   (policy: latest)
prettier                          3.8.3     -> 3.8.4    devDependencies   (policy: latest)
semver                            7.8.1     -> 7.8.4    dependencies      (policy: latest)
svelte                            5.55.10   -> 5.56.3   devDependencies   (policy: latest)

Up'em found these packages were outdated, but did not update them because of policies:

@eslint/js                        9.39.4   devDependencies   (policy: wanted)
eslint                            9.39.4   devDependencies   (policy: wanted)
eslint-plugin-budapestian         6.0.0    devDependencies   (policy: wanted)
eslint-plugin-mocha               10.5.0   devDependencies   (policy: wanted)
eslint-plugin-n                   17.24.0  devDependencies   (policy: wanted)
eslint-plugin-unicorn             56.0.1   devDependencies   (policy: wanted)
symlink-dir                       7.1.0    devDependencies   (policy: wanted)

Also closes a security alert because of the package lock refresh
@sushichan044
sushichan044 force-pushed the feat-support-processing-astro-files branch from 7296a1d to 54917b1 Compare June 22, 2026 07:09
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
2 Security Hotspots

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature request: Support processing Astro files

2 participants