Merge remote-tracking branch 'origin/main' into upgrade-web-tree-sitter-0.25.x

Author: tmr232

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "bun" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"

.github/workflows/build.yaml

@@ -8,13 +8,26 @@ on:
   release:
     types:
       - created
+
+permissions: {}
+
 jobs:
   test:
     name: "Test"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+        with:
+          persist-credentials: false
+
+      - if: ${{ github.event_name == 'release' }}
+        uses: oven-sh/setup-bun@v2
+        with:
+          no-cache: true
+
+      - if: ${{ github.event_name != 'release' }}
+        uses: oven-sh/setup-bun@v2
+
 
       - run: bun install
 
@@ -31,7 +44,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+        with:
+          persist-credentials: false
+
+      - if: ${{ github.event_name == 'release' }}
+        uses: oven-sh/setup-bun@v2
+        with:
+          no-cache: true
+
+      - if: ${{ github.event_name != 'release' }}
+        uses: oven-sh/setup-bun@v2
 
       - run: bun install
 
@@ -58,7 +80,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+        with:
+          persist-credentials: false
+
+      - if: ${{ github.event_name == 'release' }}
+        uses: oven-sh/setup-bun@v2
+        with:
+          no-cache: true
+
+      - if: ${{ github.event_name != 'release' }}
+        uses: oven-sh/setup-bun@v2
 
       - run: bun install
       - run: bun build-webview

.github/workflows/pages.yaml

@@ -4,13 +4,19 @@ on:
   push:
     branches: "main"
 
+permissions: {}
+
 jobs:
   build:
     name: "Build Demo site"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+            persist-credentials: false
       - uses: oven-sh/setup-bun@v2
+        with:
+          no-cache: true
 
       - run: bun install
 

.github/workflows/zizmor.yml

@@ -0,0 +1,36 @@
+name: GitHub Actions Security Analysis with zizmor 🌈
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["**"]
+
+jobs:
+  zizmor:
+    name: zizmor latest via PyPI
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      # required for workflows in private repositories
+      contents: read
+      actions: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Install the latest version of uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Run zizmor 🌈
+        run: uvx zizmor --format sarif . > results.sarif
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: results.sarif
+          category: zizmor

CHANGELOG.md

@@ -6,6 +6,25 @@ Check [Keep a Changelog](http://keepachangelog.com/) for recommendations on how
 
 ## [Unreleased]
 
+### Added
+
+- Python catch-all cases in match statements are now detected.
+  When a catch-all is found the "no-match-found" edge is removed,
+  and cases after the catch-all are removed as dead code. 
+- C++ learned `co_yield` and `co_return`
+- Python learned `assert`
+
+### Fixed
+
+- Comment-tests now fail if an unsupported test type is present instead of passing silently.
+- Python `match` statements no longer break when a comment is present at their top-level
+- `throw` and `raise` statements now cause `finally` block duplication like `return` statements.
+
+### Changed
+
+- In flat-switch mode, fallthrough now goes to the case-node, not the consequence-node.
+  This produces cleaner, more readable graphs even if it is less correct.
+
 ## [0.0.14] - 2025-02-17
 
 ### Added

biome.jsonc

@@ -7,13 +7,25 @@
   },
   "files": {
     "ignoreUnknown": false,
-    "ignore": [
-      "./dist",
-      "*.svelte",
-      "src/test/commentTestSamples",
-      "src/demo/src/assets"
-    ]
+    "ignore": ["./dist", "src/test/commentTestSamples", "src/demo/src/assets"]
   },
+  "overrides": [
+    {
+      "include": ["*.svelte"],
+      "linter": {
+        "rules": {
+          "style": {
+            // I want to keep variables typed explicitly in some cases, like Svelte exports.
+            "noInferrableTypes": "off",
+            // Disable some checks so biome doesn't crash.
+            // https://biomejs.dev/internals/language-support/#html-super-languages-support
+            "useConst": "off",
+            "useImportType": "off"
+          }
+        }
+      }
+    }
+  ],
   "formatter": {
     "enabled": true,
     "indentStyle": "space"

package.json

@@ -8,9 +8,9 @@
     "@types/object-hash": "^3.0.6",
     "@types/vscode": "^1.94.0",
     "@vscode/vsce": "^3.1.1",
-    "esbuild": "^0.20.2",
+    "esbuild": "^0.25.0",
     "esbuild-plugin-copy": "^2.1.1",
-    "graphology": "^0.25.4",
+    "graphology": "^0.26.0",
     "graphology-operators": "^1.6.0",
     "graphology-traversal": "^0.3.1",
     "lru-cache": "^11.0.2",
@@ -35,9 +35,7 @@
     "eslint": "^9.12.0",
     "graphology-utils": "^2.5.2",
     "lz-string": "^1.5.0",
-    "oxlint": "0.13.2",
-    "prettier": "3.3.3",
-    "prettier-plugin-svelte": "^3.2.7",
+    "oxlint": "0.15.13",
     "svelte": "^4.2.19",
     "svelte-awesome-color-picker": "^3.1.4",
     "svelte-codemirror-editor": "^1.4.1",
@@ -73,10 +71,8 @@
     "build-webview": "bun run --cwd src/webview/ vite build",
     "oxlint-fix": "bunx oxlint --ignore-path=oxlint-ignore.txt --fix -D correctness -D perf -D suspicious -A no-await-in-loop",
     "oxlint-ci": "bunx oxlint --ignore-path=oxlint-ignore.txt  -D correctness -D perf -D suspicious -A no-await-in-loop",
-    "prettier-format": "bunx prettier **/*.svelte --write",
-    "prettier-check": "bunx prettier **/*.svelte --check",
-    "lint": "bunx biome check --fix && bun oxlint-fix  && bun prettier-format && bunx eslint --fix && bunx tsc --noEmit && bun typedoc",
-    "ci": "bunx biome ci && bun oxlint-ci && bun prettier-check && bunx eslint && bunx tsc --noEmit && bun typedoc",
+    "lint": "bunx biome check --fix && bun oxlint-fix && bunx eslint --fix && bunx tsc --noEmit && bun typedoc",
+    "ci": "bunx biome ci && bun oxlint-ci && bunx eslint && bunx tsc --noEmit && bun typedoc",
     "generate-parsers": "bun run ./scripts/generate-parsers.ts",
     "typedoc": "bunx typedoc --treatWarningsAsErrors"
   },

prettier.config.js

@@ -72,6 +72,9 @@ async function main() {
       colors: {
         type: "string",
       },
+      dot: {
+        type: "string",
+      },
     },
     strict: true,
     allowPositionals: true,
@@ -136,7 +139,13 @@ async function main() {
 
   const colorScheme = await getColorScheme(values.colors);
 
-  const svg = graphviz.dot(graphToDot(cfg, false, colorScheme));
+  const dot = graphToDot(cfg, false, colorScheme);
+
+  if (values.dot) {
+    await Bun.write(values.dot, dot);
+  }
+
+  const svg = graphviz.dot(dot);
 
   if (values.out) {
     await Bun.write(values.out, svg);

scripts/render-function.ts

@@ -22,6 +22,9 @@ async function main() {
       colors: {
         type: "string",
       },
+      dot: {
+        type: "string",
+      },
     },
   });
 
@@ -50,7 +53,13 @@ async function main() {
   const colorScheme = await getColorScheme(values.colors);
 
   const graphviz = await Graphviz.load();
-  const svg = graphviz.dot(graphToDot(cfg, false, colorScheme));
+  const dot = graphToDot(cfg, false, colorScheme);
+
+  if (values.dot) {
+    await Bun.write(values.dot, dot);
+  }
+
+  const svg = graphviz.dot(dot);
   console.log(svg);
 }