.github/dependabot.yml

@@ -0,0 +1,18 @@
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 5
+    # Disable rebasing for pull requests, as having several open pull requests all get simultaneously rebased gets
+    # noisy from a notification standpoint
+    rebase-strategy: "disabled"
+    ignore:
+      - dependency-name: "@types/node"
+        versions: ["17", "18"]
+      - dependency-name: "typescript"
+        versions: ["4.8"]

.github/workflows/build.yml

@@ -12,6 +12,11 @@ jobs:
     steps:
       - name: Checkout Code
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
+        with:
+          # the pull_request_target event will consider the HEAD of `main` to be the SHA to use.
+          # attempt to use the SHA associated with a pull request and fallback to HEAD of `main`
+          ref: ${{ github.event_name == 'pull_request_target' && format('refs/pull/{0}/merge', github.event.number) || '' }}
+          persist-credentials: false
 
       - name: Get Core Dependencies
         uses: ./.github/workflows/actions/get-core-dependencies
@@ -33,4 +38,4 @@ jobs:
         with:
           name: stencil-core
           output: stencil-core-build.zip
-          paths: build cli compiler dependencies.json dev-server internal mock-doc scripts screenshot sys testing
+          paths: build cli compiler dependencies.json dev-server internal mock-doc scripts/build screenshot sys testing

.github/workflows/tech-debt-burndown.yml

@@ -7,7 +7,7 @@ name: Tech Debt Burndown
 # progress on them to each PR.
 
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - '**'
 
@@ -27,6 +27,11 @@ jobs:
 
       - name: Checkout PR branch
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
+        with:
+          # the pull_request_target event will consider the HEAD of `main` to be the SHA to use.
+          # attempt to use the SHA associated with a pull request and fallback to HEAD of `main`
+          ref: ${{ github.event_name == 'pull_request_target' && format('refs/pull/{0}/merge', github.event.number) || '' }}
+          persist-credentials: false
         if: ${{ matrix.branch == 'pr' }}
 
       - name: Get Core Dependencies
@@ -60,6 +65,11 @@ jobs:
 
       - name: Checkout PR branch
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
+        with:
+          # the pull_request_target event will consider the HEAD of `main` to be the SHA to use.
+          # attempt to use the SHA associated with a pull request and fallback to HEAD of `main`
+          ref: ${{ github.event_name == 'pull_request_target' && format('refs/pull/{0}/merge', github.event.number) || '' }}
+          persist-credentials: false
         if: ${{ matrix.branch == 'pr' }}
 
       - name: Install ts-prune
@@ -81,6 +91,11 @@ jobs:
     steps:
       - name: Checkout current branch
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
+        with:
+          # the pull_request_target event will consider the HEAD of `main` to be the SHA to use.
+          # attempt to use the SHA associated with a pull request and fallback to HEAD of `main`
+          ref: ${{ github.event_name == 'pull_request_target' && format('refs/pull/{0}/merge', github.event.number) || '' }}
+          persist-credentials: false
 
       - name: Get Core Dependencies
         uses: ./.github/workflows/actions/get-core-dependencies

.github/workflows/test-browserstack.yml

@@ -101,5 +101,5 @@ jobs:
         # here we check that there are no changed / new files from our test
         # run. we use `git status`, grep out the build zip (downloaded above),
         # and check if there are more than 0 lines in the output.
-        run: if [[ $(git status --short | grep -c -v stencil-core-build.zip) -ne 0 ]]; then echo git status --short; exit 1; fi
+        run: if [[ $(git status --short | grep -c -v stencil-core-build.zip) -ne 0 ]]; then STATUS=$(git status --verbose); printf "%s" "$STATUS"; git diff | cat; exit 1; fi
         shell: bash

CHANGELOG.md

@@ -1,3 +1,18 @@
+# 🔥 [2.18.0](https://github.com/ionic-team/stencil/compare/v2.17.4...v2.18.0) (2022-09-12)
+
+
+### Bug Fixes
+
+* **collection:** properly transform imports ([#3523](https://github.com/ionic-team/stencil/issues/3523)) ([ac2c09e](https://github.com/ionic-team/stencil/commit/ac2c09e41ab1dee497a695e93b01ff434334883c))
+
+
+### Features
+
+* **loader:** add private field to loader's package.json ([#3566](https://github.com/ionic-team/stencil/issues/3566)) ([fc8efb3](https://github.com/ionic-team/stencil/commit/fc8efb3ae6f3aac50c2a7f6dc0d4283d37b27a2c))
+* **typescript:** add support for typescript v4.7 ([#3530](https://github.com/ionic-team/stencil/issues/3530)) ([1226e56](https://github.com/ionic-team/stencil/commit/1226e56169af916862e9f50e7fe35d6fac96d881))
+
+
+
 ## 🐞 [2.17.4](https://github.com/ionic-team/stencil/compare/v2.17.3...v2.17.4) (2022-08-22)