initial commit of actions

github/codeql-action-v1/node_modules/ava/entrypoints/cli.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import run from '../lib/cli.js';
+
+run();

github/codeql-action-v1/node_modules/ava/entrypoints/eslint-plugin-helper.cjs

@@ -0,0 +1,109 @@
+'use strict';
+const path = require('path');
+const url = require('url');
+const v8 = require('v8');
+const {Worker} = require('worker_threads');
+
+const {
+	classify,
+	hasExtension,
+	isHelperish,
+	matches,
+	normalizeFileForMatching,
+	normalizePatterns,
+} = require('../lib/glob-helpers.cjs');
+
+const MAX_DATA_LENGTH_EXCLUSIVE = 100 * 1024; // Allocate 100 KiB to exchange globs.
+
+let data;
+let sync;
+let worker;
+
+const resolveGlobsSync = (projectDir, overrideExtensions, overrideFiles) => {
+	if (worker === undefined) {
+		const dataBuffer = new SharedArrayBuffer(MAX_DATA_LENGTH_EXCLUSIVE);
+		data = new Uint8Array(dataBuffer);
+
+		const syncBuffer = new SharedArrayBuffer(4);
+		sync = new Int32Array(syncBuffer);
+
+		const filename = path.join(__dirname, '../lib/eslint-plugin-helper-worker.js');
+		worker = new Worker(url.pathToFileURL(filename), {
+			workerData: {
+				dataBuffer,
+				syncBuffer,
+				firstMessage: {projectDir, overrideExtensions, overrideFiles},
+			},
+		});
+		worker.unref();
+	} else {
+		worker.postMessage({projectDir, overrideExtensions, overrideFiles});
+	}
+
+	const synchronize = Atomics.wait(sync, 0, 0, 10_000);
+	if (synchronize === 'timed-out') {
+		throw new Error('Timed out resolving AVA configuration');
+	}
+
+	const byteLength = Atomics.exchange(sync, 0, 0);
+	if (byteLength === MAX_DATA_LENGTH_EXCLUSIVE) {
+		throw new Error('Globs are over 100 KiB and cannot be resolved');
+	}
+
+	const globsOrError = v8.deserialize(data.slice(0, byteLength));
+	if (globsOrError instanceof Error) {
+		throw globsOrError;
+	}
+
+	return globsOrError;
+};
+
+const helperCache = new Map();
+
+function load(projectDir, overrides) {
+	const cacheKey = `${JSON.stringify(overrides)}\n${projectDir}`;
+	if (helperCache.has(cacheKey)) {
+		return helperCache.get(cacheKey);
+	}
+
+	let helperPatterns = [];
+	if (overrides && overrides.helpers !== undefined) {
+		if (!Array.isArray(overrides.helpers) || overrides.helpers.length === 0) {
+			throw new Error('The ’helpers’ override must be an array containing glob patterns.');
+		}
+
+		helperPatterns = normalizePatterns(overrides.helpers);
+	}
+
+	const globs = resolveGlobsSync(projectDir, overrides && overrides.extensions, overrides && overrides.files);
+
+	const classifyForESLint = file => {
+		const {isTest} = classify(file, globs);
+		let isHelper = false;
+		if (!isTest && hasExtension(globs.extensions, file)) {
+			file = normalizeFileForMatching(projectDir, file);
+			isHelper = isHelperish(file) || (helperPatterns.length > 0 && matches(file, helperPatterns));
+		}
+
+		return {isHelper, isTest};
+	};
+
+	const helper = Object.freeze({
+		classifyFile: classifyForESLint,
+		classifyImport(importPath) {
+			if (hasExtension(globs.extensions, importPath)) {
+				// The importPath has one of the test file extensions: we can classify
+				// it directly.
+				return classifyForESLint(importPath);
+			}
+
+			// Add the first extension. If multiple extensions are available, assume
+			// patterns are not biased to any particular extension.
+			return classifyForESLint(`${importPath}.${globs.extensions[0]}`);
+		},
+	});
+	helperCache.set(cacheKey, helper);
+	return helper;
+}
+
+exports.load = load;

github/codeql-action-v1/node_modules/ava/entrypoints/index.d.cts

@@ -0,0 +1,2 @@
+export {default} from '../index.js';
+export * from '../index.js';

github/codeql-action-v1/node_modules/ava/entrypoints/main.cjs

@@ -0,0 +1,2 @@
+'use strict';
+module.exports = require('../lib/worker/main.cjs');

github/codeql-action-v1/node_modules/ava/entrypoints/main.mjs

@@ -0,0 +1 @@
+export {default} from '../lib/worker/main.cjs';

github/codeql-action-v1/node_modules/ava/entrypoints/plugin.cjs

@@ -0,0 +1,2 @@
+'use strict';
+module.exports = require('../lib/worker/plugin.cjs');

github/codeql-action-v1/node_modules/ava/entrypoints/plugin.d.cts

@@ -0,0 +1 @@
+export * from '../plugin.js'

github/codeql-action-v1/node_modules/ava/entrypoints/plugin.mjs

@@ -0,0 +1,4 @@
+import * as plugin from '../lib/worker/plugin.cjs';
+
+const {registerSharedWorker} = plugin;
+export {registerSharedWorker};

github/codeql-action-v1/node_modules/ava/index.d.ts

@@ -0,0 +1,12 @@
+import type {TestFn} from './types/test-fn.js';
+
+export * from './types/assertions.js';
+export * from './types/try-fn.js';
+export * from './types/test-fn.js';
+export * from './types/subscribable.js';
+
+/** Call to declare a test, or chain to declare hooks or test modifiers */
+declare const test: TestFn;
+
+/** Call to declare a test, or chain to declare hooks or test modifiers */
+export default test;

github/codeql-action-v1/node_modules/ava/lib/api.js

@@ -0,0 +1,341 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import process from 'node:process';
+
+import arrify from 'arrify';
+import chunkd from 'chunkd';
+import commonPathPrefix from 'common-path-prefix';
+import Emittery from 'emittery';
+import ms from 'ms';
+import pMap from 'p-map';
+import resolveCwd from 'resolve-cwd';
+import tempDir from 'temp-dir';
+
+import fork from './fork.js';
+import * as globs from './globs.js';
+import isCi from './is-ci.js';
+import {getApplicableLineNumbers} from './line-numbers.js';
+import {observeWorkerProcess} from './plugin-support/shared-workers.js';
+import RunStatus from './run-status.js';
+import scheduler from './scheduler.js';
+import serializeError from './serialize-error.js';
+
+function resolveModules(modules) {
+	return arrify(modules).map(name => {
+		const modulePath = resolveCwd.silent(name);
+
+		if (modulePath === undefined) {
+			throw new Error(`Could not resolve required module ’${name}’`);
+		}
+
+		return modulePath;
+	});
+}
+
+function getFilePathPrefix(files) {
+	if (files.length === 1) {
+		// Get the correct prefix up to the basename.
+		return commonPathPrefix([files[0], path.dirname(files[0])]);
+	}
+
+	return commonPathPrefix(files);
+}
+
+class TimeoutTrigger {
+	constructor(fn, waitMs = 0) {
+		this.fn = fn.bind(null);
+		this.ignoreUntil = 0;
+		this.waitMs = waitMs;
+		this.timer = undefined;
+	}
+
+	debounce() {
+		if (this.timer === undefined) {
+			this.timer = setTimeout(() => this.trigger(), this.waitMs);
+		} else {
+			this.timer.refresh();
+		}
+	}
+
+	discard() {
+		// N.B. this.timer is not cleared so if debounce() is called after it will
+		// not run again.
+		clearTimeout(this.timer);
+	}
+
+	ignoreFor(periodMs) {
+		this.ignoreUntil = Math.max(this.ignoreUntil, Date.now() + periodMs);
+	}
+
+	trigger() {
+		if (Date.now() >= this.ignoreUntil) {
+			this.fn();
+		}
+	}
+}
+
+export default class Api extends Emittery {
+	constructor(options) {
+		super();
+
+		this.options = {match: [], moduleTypes: {}, ...options};
+		this.options.require = resolveModules(this.options.require);
+
+		this._cacheDir = null;
+		this._interruptHandler = () => {};
+
+		if (options.ranFromCli) {
+			process.on('SIGINT', () => this._interruptHandler());
+		}
+	}
+
+	async run({files: selectedFiles = [], filter = [], runtimeOptions = {}} = {}) { // eslint-disable-line complexity
+		let setupOrGlobError;
+
+		const apiOptions = this.options;
+
+		// Each run will have its own status. It can only be created when test files
+		// have been found.
+		let runStatus;
+		// Irrespectively, perform some setup now, before finding test files.
+
+		// Track active forks and manage timeouts.
+		const failFast = apiOptions.failFast === true;
+		let bailed = false;
+		const pendingWorkers = new Set();
+		const timedOutWorkerFiles = new Set();
+		let timeoutTrigger;
+		if (apiOptions.timeout && !apiOptions.debug) {
+			const timeout = ms(apiOptions.timeout);
+
+			timeoutTrigger = new TimeoutTrigger(() => {
+				// If failFast is active, prevent new test files from running after
+				// the current ones are exited.
+				if (failFast) {
+					bailed = true;
+				}
+
+				runStatus.emitStateChange({type: 'timeout', period: timeout});
+
+				for (const worker of pendingWorkers) {
+					timedOutWorkerFiles.add(worker.file);
+					worker.exit();
+				}
+			}, timeout);
+		} else {
+			timeoutTrigger = new TimeoutTrigger(() => {});
+		}
+
+		this._interruptHandler = () => {
+			if (bailed) {
+				// Exiting already
+				return;
+			}
+
+			// Prevent new test files from running
+			bailed = true;
+
+			// Make sure we don't run the timeout handler
+			timeoutTrigger.discard();
+
+			runStatus.emitStateChange({type: 'interrupt'});
+
+			for (const worker of pendingWorkers) {
+				worker.exit();
+			}
+		};
+
+		const {providers = []} = this.options;
+
+		let testFiles;
+		try {
+			testFiles = await globs.findTests({cwd: this.options.projectDir, ...apiOptions.globs});
+			if (selectedFiles.length === 0) {
+				selectedFiles = filter.length === 0 ? testFiles : globs.applyTestFileFilter({
+					cwd: this.options.projectDir,
+					filter: filter.map(({pattern}) => pattern),
+					providers,
+					testFiles,
+				});
+			}
+		} catch (error) {
+			selectedFiles = [];
+			setupOrGlobError = error;
+		}
+
+		const selectionInsights = {
+			filter,
+			ignoredFilterPatternFiles: selectedFiles.ignoredFilterPatternFiles || [],
+			testFileCount: testFiles.length,
+			selectionCount: selectedFiles.length,
+		};
+
+		try {
+			if (this.options.parallelRuns) {
+				const {currentIndex, totalRuns} = this.options.parallelRuns;
+				const fileCount = selectedFiles.length;
+
+				// The files must be in the same order across all runs, so sort them.
+				const defaultComparator = (a, b) => a.localeCompare(b, [], {numeric: true});
+				selectedFiles = selectedFiles.sort(this.options.sortTestFiles || defaultComparator);
+				selectedFiles = chunkd(selectedFiles, currentIndex, totalRuns);
+
+				const currentFileCount = selectedFiles.length;
+
+				runStatus = new RunStatus(fileCount, {currentFileCount, currentIndex, totalRuns}, selectionInsights);
+			} else {
+				// If a custom sorter was configured, use it.
+				if (this.options.sortTestFiles) {
+					selectedFiles = selectedFiles.sort(this.options.sortTestFiles);
+				}
+
+				runStatus = new RunStatus(selectedFiles.length, null, selectionInsights);
+			}
+
+			selectedFiles = scheduler.failingTestsFirst(selectedFiles, this._getLocalCacheDir(), this.options.cacheEnabled);
+
+			const debugWithoutSpecificFile = Boolean(this.options.debug) && !this.options.debug.active && selectedFiles.length !== 1;
+
+			await this.emit('run', {
+				bailWithoutReporting: debugWithoutSpecificFile,
+				clearLogOnNextRun: runtimeOptions.clearLogOnNextRun === true,
+				debug: Boolean(this.options.debug),
+				failFastEnabled: failFast,
+				filePathPrefix: getFilePathPrefix(selectedFiles),
+				files: selectedFiles,
+				matching: apiOptions.match.length > 0,
+				previousFailures: runtimeOptions.previousFailures || 0,
+				runOnlyExclusive: runtimeOptions.runOnlyExclusive === true,
+				runVector: runtimeOptions.runVector || 0,
+				status: runStatus,
+			});
+
+			if (setupOrGlobError) {
+				throw setupOrGlobError;
+			}
+
+			// Bail out early if no files were found, or when debugging and there is not a single specific test file to debug.
+			if (selectedFiles.length === 0 || debugWithoutSpecificFile) {
+				return runStatus;
+			}
+
+			runStatus.on('stateChange', record => {
+				if (record.testFile && !timedOutWorkerFiles.has(record.testFile)) {
+					// Debounce the timer whenever there is activity from workers that
+					// haven't already timed out.
+					timeoutTrigger.debounce();
+				}
+
+				if (failFast && (record.type === 'hook-failed' || record.type === 'test-failed' || record.type === 'worker-failed')) {
+					// Prevent new test files from running once a test has failed.
+					bailed = true;
+
+					// Try to stop currently scheduled tests.
+					for (const worker of pendingWorkers) {
+						worker.notifyOfPeerFailure();
+					}
+				}
+			});
+
+			const providerStates = [];
+			await Promise.all(providers.map(async ({type, main}) => {
+				const state = await main.compile({cacheDir: this._createCacheDir(), files: testFiles});
+				if (state !== null) {
+					providerStates.push({type, state});
+				}
+			}));
+
+			// Resolve the correct concurrency value.
+			let concurrency = Math.min(os.cpus().length, isCi ? 2 : Number.POSITIVE_INFINITY);
+			if (apiOptions.concurrency > 0) {
+				concurrency = apiOptions.concurrency;
+			}
+
+			if (apiOptions.serial) {
+				concurrency = 1;
+			}
+
+			const deregisteredSharedWorkers = [];
+
+			// Try and run each file, limited by `concurrency`.
+			await pMap(selectedFiles, async file => {
+				// No new files should be run once a test has timed out or failed,
+				// and failFast is enabled.
+				if (bailed) {
+					return;
+				}
+
+				const lineNumbers = getApplicableLineNumbers(globs.normalizeFileForMatching(apiOptions.projectDir, file), filter);
+				// Removing `providers` and `sortTestFiles` fields because they cannot be transferred to the worker threads.
+				const {providers, sortTestFiles, ...forkOptions} = apiOptions;
+				const options = {
+					...forkOptions,
+					providerStates,
+					lineNumbers,
+					recordNewSnapshots: !isCi,
+					// If we're looking for matches, run every single test process in exclusive-only mode
+					runOnlyExclusive: apiOptions.match.length > 0 || runtimeOptions.runOnlyExclusive === true,
+				};
+
+				if (runtimeOptions.updateSnapshots) {
+					// Don't use in Object.assign() since it'll override options.updateSnapshots even when false.
+					options.updateSnapshots = true;
+				}
+
+				const worker = fork(file, options, apiOptions.nodeArguments);
+				worker.onStateChange(data => {
+					if (data.type === 'test-timeout-configured' && !apiOptions.debug) {
+						timeoutTrigger.ignoreFor(data.period);
+					}
+				});
+				runStatus.observeWorker(worker, file, {selectingLines: lineNumbers.length > 0});
+				deregisteredSharedWorkers.push(observeWorkerProcess(worker, runStatus));
+
+				pendingWorkers.add(worker);
+				worker.promise.then(() => {
+					pendingWorkers.delete(worker);
+				});
+				timeoutTrigger.debounce();
+
+				await worker.promise;
+			}, {concurrency, stopOnError: false});
+
+			// Allow shared workers to clean up before the run ends.
+			await Promise.all(deregisteredSharedWorkers);
+			scheduler.storeFailedTestFiles(runStatus, this.options.cacheEnabled === false ? null : this._createCacheDir());
+		} catch (error) {
+			if (error && error.name === 'AggregateError') {
+				for (const error_ of error.errors) {
+					runStatus.emitStateChange({type: 'internal-error', err: serializeError('Internal error', false, error_)});
+				}
+			} else {
+				runStatus.emitStateChange({type: 'internal-error', err: serializeError('Internal error', false, error)});
+			}
+		}
+
+		timeoutTrigger.discard();
+		return runStatus;
+	}
+
+	_getLocalCacheDir() {
+		return path.join(this.options.projectDir, 'node_modules', '.cache', 'ava');
+	}
+
+	_createCacheDir() {
+		if (this._cacheDir) {
+			return this._cacheDir;
+		}
+
+		const cacheDir = this.options.cacheEnabled === false
+			? fs.mkdtempSync(`${tempDir}${path.sep}`)
+			: this._getLocalCacheDir();
+
+		// Ensure cacheDir exists
+		fs.mkdirSync(cacheDir, {recursive: true});
+
+		this._cacheDir = cacheDir;
+
+		return cacheDir;
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/assert.js

@@ -0,0 +1,957 @@
+import concordance from 'concordance';
+import isError from 'is-error';
+import isPromise from 'is-promise';
+
+import concordanceOptions from './concordance-options.js';
+import {CIRCULAR_SELECTOR, isLikeSelector, selectComparable} from './like-selector.js';
+import {SnapshotError, VersionMismatchError} from './snapshot-manager.js';
+
+function formatDescriptorDiff(actualDescriptor, expectedDescriptor, options) {
+	options = {...options, ...concordanceOptions};
+	return {
+		label: 'Difference:',
+		formatted: concordance.diffDescriptors(actualDescriptor, expectedDescriptor, options),
+	};
+}
+
+function formatDescriptorWithLabel(label, descriptor) {
+	return {
+		label,
+		formatted: concordance.formatDescriptor(descriptor, concordanceOptions),
+	};
+}
+
+function formatWithLabel(label, value) {
+	return formatDescriptorWithLabel(label, concordance.describe(value, concordanceOptions));
+}
+
+const hasOwnProperty = (object, prop) => Object.prototype.hasOwnProperty.call(object, prop);
+const noop = () => {};
+const notImplemented = () => {
+	throw new Error('not implemented');
+};
+
+export class AssertionError extends Error {
+	constructor(options) {
+		super(options.message || '');
+		this.name = 'AssertionError';
+
+		this.assertion = options.assertion;
+		this.fixedSource = options.fixedSource;
+		this.improperUsage = options.improperUsage || false;
+		this.actualStack = options.actualStack;
+		this.operator = options.operator;
+		this.values = options.values || [];
+
+		// Raw expected and actual objects are stored for custom reporters
+		// (such as wallaby.js), that manage worker processes directly and
+		// use the values for custom diff views
+		this.raw = options.raw;
+
+		this.savedError = options.savedError ? options.savedError : getErrorWithLongStackTrace();
+	}
+}
+
+export function checkAssertionMessage(assertion, message) {
+	if (typeof message === 'undefined' || typeof message === 'string') {
+		return true;
+	}
+
+	return new AssertionError({
+		assertion,
+		improperUsage: true,
+		message: 'The assertion message must be a string',
+		values: [formatWithLabel('Called with:', message)],
+	});
+}
+
+function getErrorWithLongStackTrace() {
+	const limitBefore = Error.stackTraceLimit;
+	Error.stackTraceLimit = Number.POSITIVE_INFINITY;
+	const error = new Error(); // eslint-disable-line unicorn/error-message
+	Error.stackTraceLimit = limitBefore;
+	return error;
+}
+
+function validateExpectations(assertion, expectations, numberArgs) { // eslint-disable-line complexity
+	if (numberArgs === 1 || expectations === null || expectations === undefined) {
+		if (expectations === null) {
+			throw new AssertionError({
+				assertion,
+				message: `The second argument to \`t.${assertion}()\` must be an expectation object or \`undefined\``,
+				values: [formatWithLabel('Called with:', expectations)],
+			});
+		}
+
+		expectations = {};
+	} else if (
+		typeof expectations === 'function'
+		|| typeof expectations === 'string'
+		|| expectations instanceof RegExp
+		|| typeof expectations !== 'object'
+		|| Array.isArray(expectations)
+		|| Object.keys(expectations).length === 0
+	) {
+		throw new AssertionError({
+			assertion,
+			message: `The second argument to \`t.${assertion}()\` must be an expectation object, \`null\` or \`undefined\``,
+			values: [formatWithLabel('Called with:', expectations)],
+		});
+	} else {
+		if (hasOwnProperty(expectations, 'instanceOf') && typeof expectations.instanceOf !== 'function') {
+			throw new AssertionError({
+				assertion,
+				message: `The \`instanceOf\` property of the second argument to \`t.${assertion}()\` must be a function`,
+				values: [formatWithLabel('Called with:', expectations)],
+			});
+		}
+
+		if (
+			hasOwnProperty(expectations, 'message')
+			&& typeof expectations.message !== 'string'
+			&& !(expectations.message instanceof RegExp)
+			&& !(typeof expectations.message === 'function')
+		) {
+			throw new AssertionError({
+				assertion,
+				message: `The \`message\` property of the second argument to \`t.${assertion}()\` must be a string, regular expression or a function`,
+				values: [formatWithLabel('Called with:', expectations)],
+			});
+		}
+
+		if (hasOwnProperty(expectations, 'name') && typeof expectations.name !== 'string') {
+			throw new AssertionError({
+				assertion,
+				message: `The \`name\` property of the second argument to \`t.${assertion}()\` must be a string`,
+				values: [formatWithLabel('Called with:', expectations)],
+			});
+		}
+
+		if (hasOwnProperty(expectations, 'code') && typeof expectations.code !== 'string' && typeof expectations.code !== 'number') {
+			throw new AssertionError({
+				assertion,
+				message: `The \`code\` property of the second argument to \`t.${assertion}()\` must be a string or number`,
+				values: [formatWithLabel('Called with:', expectations)],
+			});
+		}
+
+		for (const key of Object.keys(expectations)) {
+			switch (key) {
+				case 'instanceOf':
+				case 'is':
+				case 'message':
+				case 'name':
+				case 'code':
+					continue;
+				default:
+					throw new AssertionError({
+						assertion,
+						message: `The second argument to \`t.${assertion}()\` contains unexpected properties`,
+						values: [formatWithLabel('Called with:', expectations)],
+					});
+			}
+		}
+	}
+
+	return expectations;
+}
+
+// Note: this function *must* throw exceptions, since it can be used
+// as part of a pending assertion for promises.
+function assertExpectations({assertion, actual, expectations, message, prefix, savedError}) {
+	if (!isError(actual)) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			values: [formatWithLabel(`${prefix} exception that is not an error:`, actual)],
+		});
+	}
+
+	const actualStack = actual.stack;
+
+	if (hasOwnProperty(expectations, 'is') && actual !== expectations.is) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected to be strictly equal to:', expectations.is),
+			],
+		});
+	}
+
+	if (expectations.instanceOf && !(actual instanceof expectations.instanceOf)) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected instance of:', expectations.instanceOf),
+			],
+		});
+	}
+
+	if (typeof expectations.name === 'string' && actual.name !== expectations.name) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected name to equal:', expectations.name),
+			],
+		});
+	}
+
+	if (typeof expectations.message === 'string' && actual.message !== expectations.message) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected message to equal:', expectations.message),
+			],
+		});
+	}
+
+	if (expectations.message instanceof RegExp && !expectations.message.test(actual.message)) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected message to match:', expectations.message),
+			],
+		});
+	}
+
+	if (typeof expectations.message === 'function' && expectations.message(actual.message) === false) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected message to return true:', expectations.message),
+			],
+		});
+	}
+
+	if (typeof expectations.code !== 'undefined' && actual.code !== expectations.code) {
+		throw new AssertionError({
+			assertion,
+			message,
+			savedError,
+			actualStack,
+			values: [
+				formatWithLabel(`${prefix} unexpected exception:`, actual),
+				formatWithLabel('Expected code to equal:', expectations.code),
+			],
+		});
+	}
+}
+
+export class Assertions {
+	constructor({
+		pass = notImplemented,
+		pending = notImplemented,
+		fail = notImplemented,
+		skip = notImplemented,
+		compareWithSnapshot = notImplemented,
+		experiments = {},
+		disableSnapshots = false,
+	} = {}) {
+		const withSkip = assertionFn => {
+			assertionFn.skip = skip;
+			return assertionFn;
+		};
+
+		const checkMessage = (assertion, message) => {
+			const result = checkAssertionMessage(assertion, message);
+			if (result === true) {
+				return true;
+			}
+
+			fail(result);
+			return false;
+		};
+
+		this.pass = withSkip(() => {
+			pass();
+			return true;
+		});
+
+		this.fail = withSkip(message => {
+			if (!checkMessage('fail', message)) {
+				return false;
+			}
+
+			fail(new AssertionError({
+				assertion: 'fail',
+				message: message || 'Test failed via `t.fail()`',
+			}));
+
+			return false;
+		});
+
+		this.is = withSkip((actual, expected, message) => {
+			if (!checkMessage('is', message)) {
+				return false;
+			}
+
+			if (Object.is(actual, expected)) {
+				pass();
+				return true;
+			}
+
+			const result = concordance.compare(actual, expected, concordanceOptions);
+			const actualDescriptor = result.actual || concordance.describe(actual, concordanceOptions);
+			const expectedDescriptor = result.expected || concordance.describe(expected, concordanceOptions);
+
+			if (result.pass) {
+				fail(new AssertionError({
+					assertion: 'is',
+					message,
+					raw: {actual, expected},
+					values: [formatDescriptorWithLabel('Values are deeply equal to each other, but they are not the same:', actualDescriptor)],
+				}));
+			} else {
+				fail(new AssertionError({
+					assertion: 'is',
+					message,
+					raw: {actual, expected},
+					values: [formatDescriptorDiff(actualDescriptor, expectedDescriptor)],
+				}));
+			}
+
+			return false;
+		});
+
+		this.not = withSkip((actual, expected, message) => {
+			if (!checkMessage('not', message)) {
+				return false;
+			}
+
+			if (Object.is(actual, expected)) {
+				fail(new AssertionError({
+					assertion: 'not',
+					message,
+					raw: {actual, expected},
+					values: [formatWithLabel('Value is the same as:', actual)],
+				}));
+				return false;
+			}
+
+			pass();
+			return true;
+		});
+
+		this.deepEqual = withSkip((actual, expected, message) => {
+			if (!checkMessage('deepEqual', message)) {
+				return false;
+			}
+
+			const result = concordance.compare(actual, expected, concordanceOptions);
+			if (result.pass) {
+				pass();
+				return true;
+			}
+
+			const actualDescriptor = result.actual || concordance.describe(actual, concordanceOptions);
+			const expectedDescriptor = result.expected || concordance.describe(expected, concordanceOptions);
+			fail(new AssertionError({
+				assertion: 'deepEqual',
+				message,
+				raw: {actual, expected},
+				values: [formatDescriptorDiff(actualDescriptor, expectedDescriptor)],
+			}));
+			return false;
+		});
+
+		this.notDeepEqual = withSkip((actual, expected, message) => {
+			if (!checkMessage('notDeepEqual', message)) {
+				return false;
+			}
+
+			const result = concordance.compare(actual, expected, concordanceOptions);
+			if (result.pass) {
+				const actualDescriptor = result.actual || concordance.describe(actual, concordanceOptions);
+				fail(new AssertionError({
+					assertion: 'notDeepEqual',
+					message,
+					raw: {actual, expected},
+					values: [formatDescriptorWithLabel('Value is deeply equal:', actualDescriptor)],
+				}));
+				return false;
+			}
+
+			pass();
+			return true;
+		});
+
+		this.like = withSkip((actual, selector, message) => {
+			if (!checkMessage('like', message)) {
+				return false;
+			}
+
+			if (!isLikeSelector(selector)) {
+				fail(new AssertionError({
+					assertion: 'like',
+					improperUsage: true,
+					message: '`t.like()` selector must be a non-empty object',
+					values: [formatWithLabel('Called with:', selector)],
+				}));
+				return false;
+			}
+
+			let comparable;
+			try {
+				comparable = selectComparable(actual, selector);
+			} catch (error) {
+				if (error === CIRCULAR_SELECTOR) {
+					fail(new AssertionError({
+						assertion: 'like',
+						improperUsage: true,
+						message: '`t.like()` selector must not contain circular references',
+						values: [formatWithLabel('Called with:', selector)],
+					}));
+					return false;
+				}
+
+				throw error;
+			}
+
+			const result = concordance.compare(comparable, selector, concordanceOptions);
+			if (result.pass) {
+				pass();
+				return true;
+			}
+
+			const actualDescriptor = result.actual || concordance.describe(comparable, concordanceOptions);
+			const expectedDescriptor = result.expected || concordance.describe(selector, concordanceOptions);
+			fail(new AssertionError({
+				assertion: 'like',
+				message,
+				values: [formatDescriptorDiff(actualDescriptor, expectedDescriptor)],
+			}));
+
+			return false;
+		});
+
+		this.throws = withSkip((...args) => {
+			// Since arrow functions do not support 'arguments', we are using rest
+			// operator, so we can determine the total number of arguments passed
+			// to the function.
+			let [fn, expectations, message] = args;
+
+			if (!checkMessage('throws', message)) {
+				return;
+			}
+
+			if (typeof fn !== 'function') {
+				fail(new AssertionError({
+					assertion: 'throws',
+					improperUsage: true,
+					message: '`t.throws()` must be called with a function',
+					values: [formatWithLabel('Called with:', fn)],
+				}));
+				return;
+			}
+
+			try {
+				expectations = validateExpectations('throws', expectations, args.length, experiments);
+			} catch (error) {
+				fail(error);
+				return;
+			}
+
+			let retval;
+			let actual = null;
+			try {
+				retval = fn();
+				if (isPromise(retval)) {
+					// Here isPromise() checks if something is "promise like". Cast to an actual promise.
+					Promise.resolve(retval).catch(noop);
+					fail(new AssertionError({
+						assertion: 'throws',
+						message,
+						values: [formatWithLabel('Function returned a promise. Use `t.throwsAsync()` instead:', retval)],
+					}));
+					return;
+				}
+			} catch (error) {
+				actual = error;
+			}
+
+			if (!actual) {
+				fail(new AssertionError({
+					assertion: 'throws',
+					message,
+					values: [formatWithLabel('Function returned:', retval)],
+				}));
+				return;
+			}
+
+			try {
+				assertExpectations({
+					assertion: 'throws',
+					actual,
+					expectations,
+					message,
+					prefix: 'Function threw',
+				});
+				pass();
+				return actual;
+			} catch (error) {
+				fail(error);
+			}
+		});
+
+		this.throwsAsync = withSkip(async (...args) => {
+			let [thrower, expectations, message] = args;
+
+			if (!checkMessage('throwsAsync', message)) {
+				return;
+			}
+
+			if (typeof thrower !== 'function' && !isPromise(thrower)) {
+				fail(new AssertionError({
+					assertion: 'throwsAsync',
+					improperUsage: true,
+					message: '`t.throwsAsync()` must be called with a function or promise',
+					values: [formatWithLabel('Called with:', thrower)],
+				}));
+				return;
+			}
+
+			try {
+				expectations = validateExpectations('throwsAsync', expectations, args.length, experiments);
+			} catch (error) {
+				fail(error);
+				return;
+			}
+
+			const handlePromise = async (promise, wasReturned) => {
+				// Create an error object to record the stack before it gets lost in the promise chain.
+				const savedError = getErrorWithLongStackTrace();
+				// Handle "promise like" objects by casting to a real Promise.
+				const intermediate = Promise.resolve(promise).then(value => {
+					throw new AssertionError({
+						assertion: 'throwsAsync',
+						message,
+						savedError,
+						values: [formatWithLabel(`${wasReturned ? 'Returned promise' : 'Promise'} resolved with:`, value)],
+					});
+				}, error => {
+					assertExpectations({
+						assertion: 'throwsAsync',
+						actual: error,
+						expectations,
+						message,
+						prefix: `${wasReturned ? 'Returned promise' : 'Promise'} rejected with`,
+						savedError,
+					});
+					return error;
+				});
+
+				pending(intermediate);
+				try {
+					return await intermediate;
+				} catch {
+					// Don't reject the returned promise, even if the assertion fails.
+				}
+			};
+
+			if (isPromise(thrower)) {
+				return handlePromise(thrower, false);
+			}
+
+			let retval;
+			let actual = null;
+			try {
+				retval = thrower();
+			} catch (error) {
+				actual = error;
+			}
+
+			if (actual) {
+				fail(new AssertionError({
+					assertion: 'throwsAsync',
+					message,
+					actualStack: actual.stack,
+					values: [formatWithLabel('Function threw synchronously. Use `t.throws()` instead:', actual)],
+				}));
+				return;
+			}
+
+			if (isPromise(retval)) {
+				return handlePromise(retval, true);
+			}
+
+			fail(new AssertionError({
+				assertion: 'throwsAsync',
+				message,
+				values: [formatWithLabel('Function returned:', retval)],
+			}));
+		});
+
+		this.notThrows = withSkip((fn, message) => {
+			if (!checkMessage('notThrows', message)) {
+				return;
+			}
+
+			if (typeof fn !== 'function') {
+				fail(new AssertionError({
+					assertion: 'notThrows',
+					improperUsage: true,
+					message: '`t.notThrows()` must be called with a function',
+					values: [formatWithLabel('Called with:', fn)],
+				}));
+				return;
+			}
+
+			try {
+				fn();
+			} catch (error) {
+				fail(new AssertionError({
+					assertion: 'notThrows',
+					message,
+					actualStack: error.stack,
+					values: [formatWithLabel('Function threw:', error)],
+				}));
+				return;
+			}
+
+			pass();
+		});
+
+		this.notThrowsAsync = withSkip((nonThrower, message) => {
+			if (!checkMessage('notThrowsAsync', message)) {
+				return Promise.resolve();
+			}
+
+			if (typeof nonThrower !== 'function' && !isPromise(nonThrower)) {
+				fail(new AssertionError({
+					assertion: 'notThrowsAsync',
+					improperUsage: true,
+					message: '`t.notThrowsAsync()` must be called with a function or promise',
+					values: [formatWithLabel('Called with:', nonThrower)],
+				}));
+				return Promise.resolve();
+			}
+
+			const handlePromise = async (promise, wasReturned) => {
+				// Create an error object to record the stack before it gets lost in the promise chain.
+				const savedError = getErrorWithLongStackTrace();
+				// Handle "promise like" objects by casting to a real Promise.
+				const intermediate = Promise.resolve(promise).then(noop, error => {
+					throw new AssertionError({
+						assertion: 'notThrowsAsync',
+						message,
+						savedError,
+						values: [formatWithLabel(`${wasReturned ? 'Returned promise' : 'Promise'} rejected with:`, error)],
+					});
+				});
+				pending(intermediate);
+
+				try {
+					return await intermediate;
+				} catch {
+					// Don't reject the returned promise, even if the assertion fails.
+				}
+			};
+
+			if (isPromise(nonThrower)) {
+				return handlePromise(nonThrower, false);
+			}
+
+			let retval;
+			try {
+				retval = nonThrower();
+			} catch (error) {
+				fail(new AssertionError({
+					assertion: 'notThrowsAsync',
+					message,
+					actualStack: error.stack,
+					values: [formatWithLabel('Function threw:', error)],
+				}));
+				return Promise.resolve();
+			}
+
+			if (!isPromise(retval)) {
+				fail(new AssertionError({
+					assertion: 'notThrowsAsync',
+					message,
+					values: [formatWithLabel('Function did not return a promise. Use `t.notThrows()` instead:', retval)],
+				}));
+				return Promise.resolve();
+			}
+
+			return handlePromise(retval, true);
+		});
+
+		this.snapshot = withSkip((expected, message) => {
+			if (disableSnapshots) {
+				fail(new AssertionError({
+					assertion: 'snapshot',
+					message: '`t.snapshot()` can only be used in tests',
+					improperUsage: true,
+				}));
+				return false;
+			}
+
+			if (message && message.id !== undefined) {
+				fail(new AssertionError({
+					assertion: 'snapshot',
+					message: 'AVA 4 no longer supports snapshot IDs',
+					improperUsage: true,
+					values: [formatWithLabel('Called with id:', message.id)],
+				}));
+				return false;
+			}
+
+			if (!checkMessage('snapshot', message)) {
+				return false;
+			}
+
+			if (message === '') {
+				fail(new AssertionError({
+					assertion: 'snapshot',
+					improperUsage: true,
+					message: 'The snapshot assertion message must be a non-empty string',
+					values: [formatWithLabel('Called with:', message)],
+				}));
+				return false;
+			}
+
+			let result;
+			try {
+				result = compareWithSnapshot({expected, message});
+			} catch (error) {
+				if (!(error instanceof SnapshotError)) {
+					throw error;
+				}
+
+				const improperUsage = {name: error.name, snapPath: error.snapPath};
+				if (error instanceof VersionMismatchError) {
+					improperUsage.snapVersion = error.snapVersion;
+					improperUsage.expectedVersion = error.expectedVersion;
+				}
+
+				fail(new AssertionError({
+					assertion: 'snapshot',
+					message: message || 'Could not compare snapshot',
+					improperUsage,
+				}));
+				return false;
+			}
+
+			if (result.pass) {
+				pass();
+				return true;
+			}
+
+			if (result.actual) {
+				fail(new AssertionError({
+					assertion: 'snapshot',
+					message: message || 'Did not match snapshot',
+					values: [formatDescriptorDiff(result.actual, result.expected, {invert: true})],
+				}));
+			} else {
+				// This can only occur in CI environments.
+				fail(new AssertionError({
+					assertion: 'snapshot',
+					message: message || 'No snapshot available — new snapshots are not created in CI environments',
+				}));
+			}
+
+			return false;
+		});
+
+		this.truthy = withSkip((actual, message) => {
+			if (!checkMessage('truthy', message)) {
+				return false;
+			}
+
+			if (actual) {
+				pass();
+				return true;
+			}
+
+			fail(new AssertionError({
+				assertion: 'truthy',
+				message,
+				operator: '!!',
+				values: [formatWithLabel('Value is not truthy:', actual)],
+			}));
+			return false;
+		});
+
+		this.falsy = withSkip((actual, message) => {
+			if (!checkMessage('falsy', message)) {
+				return false;
+			}
+
+			if (actual) {
+				fail(new AssertionError({
+					assertion: 'falsy',
+					message,
+					operator: '!',
+					values: [formatWithLabel('Value is not falsy:', actual)],
+				}));
+				return false;
+			}
+
+			pass();
+			return true;
+		});
+
+		this.true = withSkip((actual, message) => {
+			if (!checkMessage('true', message)) {
+				return false;
+			}
+
+			if (actual === true) {
+				pass();
+				return true;
+			}
+
+			fail(new AssertionError({
+				assertion: 'true',
+				message,
+				values: [formatWithLabel('Value is not `true`:', actual)],
+			}));
+			return false;
+		});
+
+		this.false = withSkip((actual, message) => {
+			if (!checkMessage('false', message)) {
+				return false;
+			}
+
+			if (actual === false) {
+				pass();
+				return true;
+			}
+
+			fail(new AssertionError({
+				assertion: 'false',
+				message,
+				values: [formatWithLabel('Value is not `false`:', actual)],
+			}));
+			return false;
+		});
+
+		this.regex = withSkip((string, regex, message) => {
+			if (!checkMessage('regex', message)) {
+				return false;
+			}
+
+			if (typeof string !== 'string') {
+				fail(new AssertionError({
+					assertion: 'regex',
+					improperUsage: true,
+					message: '`t.regex()` must be called with a string',
+					values: [formatWithLabel('Called with:', string)],
+				}));
+				return false;
+			}
+
+			if (!(regex instanceof RegExp)) {
+				fail(new AssertionError({
+					assertion: 'regex',
+					improperUsage: true,
+					message: '`t.regex()` must be called with a regular expression',
+					values: [formatWithLabel('Called with:', regex)],
+				}));
+				return false;
+			}
+
+			if (!regex.test(string)) {
+				fail(new AssertionError({
+					assertion: 'regex',
+					message,
+					values: [
+						formatWithLabel('Value must match expression:', string),
+						formatWithLabel('Regular expression:', regex),
+					],
+				}));
+				return false;
+			}
+
+			pass();
+			return true;
+		});
+
+		this.notRegex = withSkip((string, regex, message) => {
+			if (!checkMessage('notRegex', message)) {
+				return false;
+			}
+
+			if (typeof string !== 'string') {
+				fail(new AssertionError({
+					assertion: 'notRegex',
+					improperUsage: true,
+					message: '`t.notRegex()` must be called with a string',
+					values: [formatWithLabel('Called with:', string)],
+				}));
+				return false;
+			}
+
+			if (!(regex instanceof RegExp)) {
+				fail(new AssertionError({
+					assertion: 'notRegex',
+					improperUsage: true,
+					message: '`t.notRegex()` must be called with a regular expression',
+					values: [formatWithLabel('Called with:', regex)],
+				}));
+				return false;
+			}
+
+			if (regex.test(string)) {
+				fail(new AssertionError({
+					assertion: 'notRegex',
+					message,
+					values: [
+						formatWithLabel('Value must not match expression:', string),
+						formatWithLabel('Regular expression:', regex),
+					],
+				}));
+				return false;
+			}
+
+			pass();
+			return true;
+		});
+
+		this.assert = withSkip((actual, message) => {
+			if (!checkMessage('assert', message)) {
+				return false;
+			}
+
+			if (!actual) {
+				fail(new AssertionError({
+					assertion: 'assert',
+					message,
+					operator: '!!',
+					values: [formatWithLabel('Value is not truthy:', actual)],
+				}));
+				return false;
+			}
+
+			pass();
+			return true;
+		});
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/chalk.js

@@ -0,0 +1,15 @@
+import {Chalk} from 'chalk'; // eslint-disable-line unicorn/import-style
+
+let chalk = new Chalk(); // eslint-disable-line import/no-mutable-exports
+
+export {chalk};
+
+let configured = false;
+export function set(options) {
+	if (configured) {
+		throw new Error('Chalk has already been configured');
+	}
+
+	configured = true;
+	chalk = new Chalk(options);
+}

github/codeql-action-v1/node_modules/ava/lib/cli.js

@@ -0,0 +1,499 @@
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+
+import arrify from 'arrify';
+import ciParallelVars from 'ci-parallel-vars';
+import del from 'del';
+import figures from 'figures';
+import yargs from 'yargs';
+import {hideBin} from 'yargs/helpers'; // eslint-disable-line node/file-extension-in-import
+
+import Api from './api.js';
+import {chalk} from './chalk.js';
+import validateEnvironmentVariables from './environment-variables.js';
+import normalizeExtensions from './extensions.js';
+import {normalizeGlobs, normalizePattern} from './globs.js';
+import {controlFlow} from './ipc-flow-control.cjs';
+import isCi from './is-ci.js';
+import {splitPatternAndLineNumbers} from './line-numbers.js';
+import {loadConfig} from './load-config.js';
+import normalizeModuleTypes from './module-types.js';
+import normalizeNodeArguments from './node-arguments.js';
+import pkg from './pkg.cjs';
+import providerManager from './provider-manager.js';
+import DefaultReporter from './reporters/default.js';
+import TapReporter from './reporters/tap.js';
+import Watcher from './watcher.js';
+
+function exit(message) {
+	console.error(`\n  ${chalk.red(figures.cross)} ${message}`);
+	process.exit(1); // eslint-disable-line unicorn/no-process-exit
+}
+
+const coerceLastValue = value => Array.isArray(value) ? value.pop() : value;
+
+const FLAGS = {
+	concurrency: {
+		alias: 'c',
+		coerce: coerceLastValue,
+		description: 'Max number of test files running at the same time (default: CPU cores)',
+		type: 'number',
+	},
+	'fail-fast': {
+		coerce: coerceLastValue,
+		description: 'Stop after first test failure',
+		type: 'boolean',
+	},
+	match: {
+		alias: 'm',
+		description: 'Only run tests with matching title (can be repeated)',
+		type: 'string',
+	},
+	'no-worker-threads': {
+		coerce: coerceLastValue,
+		description: 'Don\'t use worker threads',
+		type: 'boolean',
+	},
+	'node-arguments': {
+		coerce: coerceLastValue,
+		description: 'Additional Node.js arguments for launching worker processes (specify as a single string)',
+		type: 'string',
+	},
+	serial: {
+		alias: 's',
+		coerce: coerceLastValue,
+		description: 'Run tests serially',
+		type: 'boolean',
+	},
+	tap: {
+		alias: 't',
+		coerce: coerceLastValue,
+		description: 'Generate TAP output',
+		type: 'boolean',
+	},
+	timeout: {
+		alias: 'T',
+		coerce: coerceLastValue,
+		description: 'Set global timeout (milliseconds or human-readable, e.g. 10s, 2m)',
+		type: 'string',
+	},
+	'update-snapshots': {
+		alias: 'u',
+		coerce: coerceLastValue,
+		description: 'Update snapshots',
+		type: 'boolean',
+	},
+	verbose: {
+		alias: 'v',
+		coerce: coerceLastValue,
+		description: 'Enable verbose output (default)',
+		type: 'boolean',
+	},
+	watch: {
+		alias: 'w',
+		coerce: coerceLastValue,
+		description: 'Re-run tests when files change',
+		type: 'boolean',
+	},
+};
+
+export default async function loadCli() { // eslint-disable-line complexity
+	let conf;
+	let confError;
+	try {
+		const {argv: {config: configFile}} = yargs(hideBin(process.argv)).help(false).version(false);
+		const loaded = await loadConfig({configFile});
+		if (loaded.unsupportedFiles.length > 0) {
+			console.log(chalk.magenta(
+				`  ${figures.warning} AVA does not support JSON config, ignoring:\n\n    ${loaded.unsupportedFiles.join('\n    ')}`,
+			));
+		}
+
+		conf = loaded.config;
+		if (conf.configFile && path.basename(conf.configFile) !== path.relative(conf.projectDir, conf.configFile)) {
+			console.log(chalk.magenta(`  ${figures.warning} Using configuration from ${conf.configFile}`));
+		}
+	} catch (error) {
+		confError = error;
+	}
+
+	// Enter debug mode if the main process is being inspected. This assumes the
+	// worker processes are automatically inspected, too. It is not necessary to
+	// run AVA with the debug command, though it's allowed.
+	let activeInspector = false;
+	try {
+		const {default: inspector} = await import('node:inspector'); // eslint-disable-line node/no-unsupported-features/es-syntax
+
+		activeInspector = inspector.url() !== undefined;
+	} catch {}
+
+	let debug = activeInspector
+		? {
+			active: true,
+			break: false,
+			files: [],
+			host: undefined,
+			port: undefined,
+		} : null;
+
+	let resetCache = false;
+	const {argv} = yargs(hideBin(process.argv))
+		.version(pkg.version)
+		.parserConfiguration({
+			'boolean-negation': true,
+			'camel-case-expansion': false,
+			'combine-arrays': false,
+			'dot-notation': false,
+			'duplicate-arguments-array': true,
+			'flatten-duplicate-arrays': true,
+			'negation-prefix': 'no-',
+			'parse-numbers': true,
+			'populate--': true,
+			'set-placeholder-key': false,
+			'short-option-groups': true,
+			'strip-aliased': true,
+			'unknown-options-as-args': false,
+		})
+		.usage('$0 [<pattern>...]')
+		.usage('$0 debug [<pattern>...]')
+		.usage('$0 reset-cache')
+		.options({
+			color: {
+				description: 'Force color output',
+				type: 'boolean',
+			},
+			config: {
+				description: 'Specific JavaScript file for AVA to read its config from, instead of using package.json or ava.config.* files',
+			},
+		})
+		.command('* [<pattern>...]', 'Run tests', yargs => yargs.options(FLAGS).positional('pattern', {
+			array: true,
+			describe: 'Select which test files to run. Leave empty if you want AVA to run all test files as per your configuration. Accepts glob patterns, directories that (recursively) contain test files, and file paths optionally suffixed with a colon and comma-separated numbers and/or ranges identifying the 1-based line(s) of specific tests to run',
+			type: 'string',
+		}), argv => {
+			if (activeInspector) {
+				debug.files = argv.pattern || [];
+			}
+		})
+		.command(
+			'debug [<pattern>...]',
+			'Activate Node.js inspector and run a single test file',
+			yargs => yargs.options(FLAGS).options({
+				break: {
+					description: 'Break before the test file is loaded',
+					type: 'boolean',
+				},
+				host: {
+					default: '127.0.0.1',
+					description: 'Address or hostname through which you can connect to the inspector',
+					type: 'string',
+				},
+				port: {
+					default: 9229,
+					description: 'Port on which you can connect to the inspector',
+					type: 'number',
+				},
+			}).positional('pattern', {
+				demand: true,
+				describe: 'Glob pattern to select a single test file to debug, optionally suffixed with a colon and comma-separated numbers and/or ranges identifying the 1-based line(s) of specific tests to run',
+				type: 'string',
+			}),
+			argv => {
+				debug = {
+					active: activeInspector,
+					break: argv.break === true,
+					files: argv.pattern,
+					host: argv.host,
+					port: argv.port,
+				};
+			})
+		.command(
+			'reset-cache',
+			'Delete any temporary files and state kept by AVA, then exit',
+			yargs => yargs,
+			() => {
+				resetCache = true;
+			})
+		.example('$0')
+		.example('$0 test.js')
+		.example('$0 test.js:4,7-9')
+		.help();
+
+	const combined = {...conf};
+
+	for (const flag of Object.keys(FLAGS)) {
+		if (flag === 'no-worker-threads' && Reflect.has(argv, 'worker-threads')) {
+			combined.workerThreads = argv['worker-threads'];
+			continue;
+		}
+
+		if (argv[flag] !== undefined) {
+			if (flag === 'fail-fast') {
+				combined.failFast = argv[flag];
+			} else if (flag === 'update-snapshots') {
+				combined.updateSnapshots = argv[flag];
+			} else if (flag !== 'node-arguments') {
+				combined[flag] = argv[flag];
+			}
+		}
+	}
+
+	const chalkOptions = {level: 0};
+	if (combined.color !== false) {
+		const {supportsColor: {level}} = await import('chalk'); // eslint-disable-line node/no-unsupported-features/es-syntax, unicorn/import-style
+		chalkOptions.level = level;
+	}
+
+	const {set: setChalk} = await import('./chalk.js'); // eslint-disable-line node/no-unsupported-features/es-syntax
+	setChalk(chalkOptions);
+
+	if (confError) {
+		if (confError.parent) {
+			exit(`${confError.message}\n\n${chalk.gray((confError.parent && confError.parent.stack) || confError.parent)}`);
+		} else {
+			exit(confError.message);
+		}
+	}
+
+	const {nonSemVerExperiments: experiments, projectDir} = conf;
+	if (resetCache) {
+		const cacheDir = path.join(projectDir, 'node_modules', '.cache', 'ava');
+
+		try {
+			const deletedFilePaths = await del('*', {cwd: cacheDir});
+
+			if (deletedFilePaths.length === 0) {
+				console.log(`\n${chalk.green(figures.tick)} No cache files to remove`);
+			} else {
+				console.log(`\n${chalk.green(figures.tick)} Removed AVA cache files in ${cacheDir}`);
+			}
+
+			process.exit(0); // eslint-disable-line unicorn/no-process-exit
+		} catch (error) {
+			exit(`Error removing AVA cache files in ${cacheDir}\n\n${chalk.gray((error && error.stack) || error)}`);
+		}
+	}
+
+	if (argv.watch) {
+		if (argv.tap && !conf.tap) {
+			exit('The TAP reporter is not available when using watch mode.');
+		}
+
+		if (isCi) {
+			exit('Watch mode is not available in CI, as it prevents AVA from terminating.');
+		}
+
+		if (debug !== null) {
+			exit('Watch mode is not available when debugging.');
+		}
+	}
+
+	if (debug !== null) {
+		if (argv.tap && !conf.tap) {
+			exit('The TAP reporter is not available when debugging.');
+		}
+
+		if (isCi) {
+			exit('Debugging is not available in CI.');
+		}
+
+		if (combined.timeout) {
+			console.log(chalk.magenta(`  ${figures.warning} The timeout option has been disabled to help with debugging.`));
+		}
+	}
+
+	if (Reflect.has(combined, 'concurrency') && (!Number.isInteger(combined.concurrency) || combined.concurrency < 0)) {
+		exit('The --concurrency or -c flag must be provided with a nonnegative integer.');
+	}
+
+	if (!combined.tap && Object.keys(experiments).length > 0) {
+		console.log(chalk.magenta(`  ${figures.warning} Experiments are enabled. These are unsupported and may change or be removed at any time.`));
+	}
+
+	if (Reflect.has(conf, 'babel')) {
+		exit('Built-in Babel support has been removed.');
+	}
+
+	if (Reflect.has(conf, 'compileEnhancements')) {
+		exit('Enhancement compilation must be configured in AVA’s Babel options.');
+	}
+
+	if (Reflect.has(conf, 'helpers')) {
+		exit('AVA no longer compiles helpers. Add exclusion patterns to the ’files’ configuration and specify ’compileAsTests’ in the Babel options instead.');
+	}
+
+	if (Reflect.has(conf, 'sources')) {
+		exit('’sources’ has been removed. Use ’ignoredByWatcher’ to provide glob patterns of files that the watcher should ignore.');
+	}
+
+	if (Reflect.has(conf, 'sortTestFiles') && typeof conf.sortTestFiles !== 'function') {
+		exit('’sortTestFiles’ must be a comparator function.');
+	}
+
+	let projectPackageObject;
+	try {
+		projectPackageObject = JSON.parse(fs.readFileSync(path.resolve(projectDir, 'package.json')));
+	} catch (error) {
+		if (error.code !== 'ENOENT') {
+			throw error;
+		}
+	}
+
+	const {type: defaultModuleType = 'commonjs'} = projectPackageObject || {};
+
+	const providers = [];
+	if (Reflect.has(conf, 'typescript')) {
+		try {
+			const {level, main} = await providerManager.typescript(projectDir);
+			providers.push({
+				level,
+				main: main({config: conf.typescript}),
+				type: 'typescript',
+			});
+		} catch (error) {
+			exit(error.message);
+		}
+	}
+
+	let environmentVariables;
+	try {
+		environmentVariables = validateEnvironmentVariables(conf.environmentVariables);
+	} catch (error) {
+		exit(error.message);
+	}
+
+	let extensions;
+	try {
+		extensions = normalizeExtensions(conf.extensions, providers);
+	} catch (error) {
+		exit(error.message);
+	}
+
+	let moduleTypes;
+	try {
+		moduleTypes = normalizeModuleTypes(conf.extensions, defaultModuleType, experiments);
+	} catch (error) {
+		exit(error.message);
+	}
+
+	let globs;
+	try {
+		globs = normalizeGlobs({files: conf.files, ignoredByWatcher: conf.ignoredByWatcher, extensions, providers});
+	} catch (error) {
+		exit(error.message);
+	}
+
+	let nodeArguments;
+	try {
+		nodeArguments = normalizeNodeArguments(conf.nodeArguments, argv['node-arguments']);
+	} catch (error) {
+		exit(error.message);
+	}
+
+	let parallelRuns = null;
+	if (isCi && ciParallelVars && combined.utilizeParallelBuilds !== false) {
+		const {index: currentIndex, total: totalRuns} = ciParallelVars;
+		parallelRuns = {currentIndex, totalRuns};
+	}
+
+	const match = combined.match === '' ? [] : arrify(combined.match);
+
+	const input = debug ? debug.files : (argv.pattern || []);
+	const filter = input
+		.map(pattern => splitPatternAndLineNumbers(pattern))
+		.map(({pattern, ...rest}) => ({
+			pattern: normalizePattern(path.relative(projectDir, path.resolve(process.cwd(), pattern))),
+			...rest,
+		}));
+
+	const api = new Api({
+		cacheEnabled: combined.cache !== false,
+		chalkOptions,
+		concurrency: combined.concurrency || 0,
+		workerThreads: combined.workerThreads !== false,
+		debug,
+		environmentVariables,
+		experiments,
+		extensions,
+		failFast: combined.failFast,
+		failWithoutAssertions: combined.failWithoutAssertions !== false,
+		globs,
+		match,
+		moduleTypes,
+		nodeArguments,
+		parallelRuns,
+		sortTestFiles: conf.sortTestFiles,
+		projectDir,
+		providers,
+		ranFromCli: true,
+		require: arrify(combined.require),
+		serial: combined.serial,
+		snapshotDir: combined.snapshotDir ? path.resolve(projectDir, combined.snapshotDir) : null,
+		timeout: combined.timeout || '10s',
+		updateSnapshots: combined.updateSnapshots,
+		workerArgv: argv['--'],
+	});
+
+	const reporter = combined.tap && !combined.watch && debug === null ? new TapReporter({
+		extensions: globs.extensions,
+		projectDir,
+		reportStream: process.stdout,
+		stdStream: process.stderr,
+	}) : new DefaultReporter({
+		extensions: globs.extensions,
+		projectDir,
+		reportStream: process.stdout,
+		stdStream: process.stderr,
+		watching: combined.watch,
+	});
+
+	api.on('run', plan => {
+		reporter.startRun(plan);
+
+		if (process.env.AVA_EMIT_RUN_STATUS_OVER_IPC === 'I\'ll find a payphone baby / Take some time to talk to you') {
+			const bufferedSend = controlFlow(process);
+
+			plan.status.on('stateChange', evt => {
+				bufferedSend(evt);
+			});
+		}
+
+		plan.status.on('stateChange', evt => {
+			if (evt.type === 'interrupt') {
+				reporter.endRun();
+				process.exit(1); // eslint-disable-line unicorn/no-process-exit
+			}
+		});
+	});
+
+	if (combined.watch) {
+		const watcher = new Watcher({
+			api,
+			filter,
+			globs,
+			projectDir,
+			providers,
+			reporter,
+		});
+		watcher.observeStdin(process.stdin);
+	} else {
+		let debugWithoutSpecificFile = false;
+		api.on('run', plan => {
+			if (debug !== null && plan.files.length !== 1) {
+				debugWithoutSpecificFile = true;
+			}
+		});
+
+		const runStatus = await api.run({filter});
+
+		if (debugWithoutSpecificFile && !debug.active) {
+			exit('Provide the path to the test file you wish to debug');
+			return;
+		}
+
+		process.exitCode = runStatus.suggestExitCode({matching: match.length > 0});
+		reporter.endRun();
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/code-excerpt.js

@@ -0,0 +1,49 @@
+import fs from 'node:fs';
+
+import truncate from 'cli-truncate';
+import codeExcerpt from 'code-excerpt';
+
+import {chalk} from './chalk.js';
+
+const formatLineNumber = (lineNumber, maxLineNumber) =>
+	' '.repeat(Math.max(0, String(maxLineNumber).length - String(lineNumber).length)) + lineNumber;
+
+export default function exceptCode(source, options = {}) {
+	if (!source.isWithinProject || source.isDependency) {
+		return null;
+	}
+
+	const {file, line} = source;
+	const maxWidth = options.maxWidth || 80;
+
+	let contents;
+	try {
+		contents = fs.readFileSync(new URL(file), 'utf8');
+	} catch {
+		return null;
+	}
+
+	const excerpt = codeExcerpt(contents, line, {around: 1});
+	if (!excerpt) {
+		return null;
+	}
+
+	const lines = excerpt.map(item => ({
+		line: item.line,
+		value: truncate(item.value, maxWidth - String(line).length - 5),
+	}));
+
+	const extendedWidth = Math.max(...lines.map(item => item.value.length));
+
+	return lines
+		.map(item => {
+			const isErrorSource = item.line === line;
+
+			const lineNumber = formatLineNumber(item.line, line) + ':';
+			const coloredLineNumber = isErrorSource ? lineNumber : chalk.grey(lineNumber);
+			const result = ` ${coloredLineNumber} ${item.value.padEnd(extendedWidth)}`;
+
+			return isErrorSource ? chalk.bgRed(result) : result;
+		})
+		.join('\n');
+}

github/codeql-action-v1/node_modules/ava/lib/concordance-options.js

@@ -0,0 +1,102 @@
+import {inspect} from 'node:util';
+
+import ansiStyles from 'ansi-styles';
+import {Chalk} from 'chalk'; // eslint-disable-line unicorn/import-style
+import stripAnsi from 'strip-ansi';
+
+import {chalk} from './chalk.js';
+
+const forceColor = new Chalk({level: Math.max(chalk.level, 1)});
+
+const colorTheme = {
+	boolean: ansiStyles.yellow,
+	circular: forceColor.grey('[Circular]'),
+	date: {
+		invalid: forceColor.red('invalid'),
+		value: ansiStyles.blue,
+	},
+	diffGutters: {
+		actual: forceColor.red('-') + ' ',
+		expected: forceColor.green('+') + ' ',
+		padding: '  ',
+	},
+	error: {
+		ctor: {open: ansiStyles.grey.open + '(', close: ')' + ansiStyles.grey.close},
+		name: ansiStyles.magenta,
+	},
+	function: {
+		name: ansiStyles.blue,
+		stringTag: ansiStyles.magenta,
+	},
+	global: ansiStyles.magenta,
+	item: {after: forceColor.grey(',')},
+	list: {openBracket: forceColor.grey('['), closeBracket: forceColor.grey(']')},
+	mapEntry: {after: forceColor.grey(',')},
+	maxDepth: forceColor.grey('…'),
+	null: ansiStyles.yellow,
+	number: ansiStyles.yellow,
+	object: {
+		openBracket: forceColor.grey('{'),
+		closeBracket: forceColor.grey('}'),
+		ctor: ansiStyles.magenta,
+		stringTag: {open: ansiStyles.magenta.open + '@', close: ansiStyles.magenta.close},
+		secondaryStringTag: {open: ansiStyles.grey.open + '@', close: ansiStyles.grey.close},
+	},
+	property: {
+		after: forceColor.grey(','),
+		keyBracket: {open: forceColor.grey('['), close: forceColor.grey(']')},
+		valueFallback: forceColor.grey('…'),
+	},
+	regexp: {
+		source: {open: ansiStyles.blue.open + '/', close: '/' + ansiStyles.blue.close},
+		flags: ansiStyles.yellow,
+	},
+	stats: {separator: forceColor.grey('---')},
+	string: {
+		open: ansiStyles.blue.open,
+		close: ansiStyles.blue.close,
+		line: {open: forceColor.blue('\''), close: forceColor.blue('\'')},
+		multiline: {start: forceColor.blue('`'), end: forceColor.blue('`')},
+		controlPicture: ansiStyles.grey,
+		diff: {
+			insert: {
+				open: ansiStyles.bgGreen.open + ansiStyles.black.open,
+				close: ansiStyles.black.close + ansiStyles.bgGreen.close,
+			},
+			delete: {
+				open: ansiStyles.bgRed.open + ansiStyles.black.open,
+				close: ansiStyles.black.close + ansiStyles.bgRed.close,
+			},
+			equal: ansiStyles.blue,
+			insertLine: {
+				open: ansiStyles.green.open,
+				close: ansiStyles.green.close,
+			},
+			deleteLine: {
+				open: ansiStyles.red.open,
+				close: ansiStyles.red.close,
+			},
+		},
+	},
+	symbol: ansiStyles.yellow,
+	typedArray: {
+		bytes: ansiStyles.yellow,
+	},
+	undefined: ansiStyles.yellow,
+};
+
+const plainTheme = JSON.parse(JSON.stringify(colorTheme), value => typeof value === 'string' ? stripAnsi(value) : value);
+
+const theme = chalk.level > 0 ? colorTheme : plainTheme;
+
+const concordanceOptions = {
+	// Use Node's object inspection depth, clamped to a minimum of 3
+	get maxDepth() {
+		return Math.max(3, inspect.defaultOptions.depth);
+	},
+	theme,
+};
+
+export default concordanceOptions;
+
+export const snapshotManager = {theme: plainTheme};

github/codeql-action-v1/node_modules/ava/lib/context-ref.js

@@ -0,0 +1,39 @@
+export default class ContextRef {
+	constructor() {
+		this.value = {};
+	}
+
+	get() {
+		return this.value;
+	}
+
+	set(newValue) {
+		this.value = newValue;
+	}
+
+	copy() {
+		return new LateBinding(this);
+	}
+}
+
+class LateBinding extends ContextRef {
+	constructor(ref) {
+		super();
+		this.ref = ref;
+		this.bound = false;
+	}
+
+	get() {
+		if (!this.bound) {
+			const value = this.ref.get();
+			this.set(value !== null && typeof value === 'object' ? {...value} : value);
+		}
+
+		return super.get();
+	}
+
+	set(newValue) {
+		this.bound = true;
+		super.set(newValue);
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/create-chain.js

@@ -0,0 +1,130 @@
+const chainRegistry = new WeakMap();
+
+function startChain(name, call, defaults) {
+	const fn = (...args) => {
+		call({...defaults}, args);
+	};
+
+	Object.defineProperty(fn, 'name', {value: name});
+	chainRegistry.set(fn, {call, defaults, fullName: name});
+	return fn;
+}
+
+function extendChain(previous, name, flag) {
+	if (!flag) {
+		flag = name;
+	}
+
+	const fn = (...args) => {
+		callWithFlag(previous, flag, args);
+	};
+
+	const fullName = `${chainRegistry.get(previous).fullName}.${name}`;
+	Object.defineProperty(fn, 'name', {value: fullName});
+	previous[name] = fn;
+
+	chainRegistry.set(fn, {flag, fullName, prev: previous});
+	return fn;
+}
+
+function callWithFlag(previous, flag, args) {
+	const combinedFlags = {[flag]: true};
+	do {
+		const step = chainRegistry.get(previous);
+		if (step.call) {
+			step.call({...step.defaults, ...combinedFlags}, args);
+			previous = null;
+		} else {
+			combinedFlags[step.flag] = true;
+			previous = step.prev;
+		}
+	} while (previous);
+}
+
+function createHookChain(hook, isAfterHook) {
+	// Hook chaining rules:
+	// * `always` comes immediately after "after hooks"
+	// * `skip` must come at the end
+	// * no `only`
+	// * no repeating
+	extendChain(hook, 'skip', 'skipped');
+	if (isAfterHook) {
+		extendChain(hook, 'always');
+		extendChain(hook.always, 'skip', 'skipped');
+	}
+
+	return hook;
+}
+
+export default function createChain(fn, defaults, meta) {
+	// Test chaining rules:
+	// * `serial` must come at the start
+	// * `only` and `skip` must come at the end
+	// * `failing` must come at the end, but can be followed by `only` and `skip`
+	// * `only` and `skip` cannot be chained together
+	// * no repeating
+	const root = startChain('test', fn, {...defaults, type: 'test'});
+	extendChain(root, 'failing');
+	extendChain(root, 'only', 'exclusive');
+	extendChain(root, 'serial');
+	extendChain(root, 'skip', 'skipped');
+	extendChain(root.failing, 'only', 'exclusive');
+	extendChain(root.failing, 'skip', 'skipped');
+	extendChain(root.serial, 'failing');
+	extendChain(root.serial, 'only', 'exclusive');
+	extendChain(root.serial, 'skip', 'skipped');
+	extendChain(root.serial.failing, 'only', 'exclusive');
+	extendChain(root.serial.failing, 'skip', 'skipped');
+
+	root.after = createHookChain(startChain('test.after', fn, {...defaults, type: 'after'}), true);
+	root.afterEach = createHookChain(startChain('test.afterEach', fn, {...defaults, type: 'afterEach'}), true);
+	root.before = createHookChain(startChain('test.before', fn, {...defaults, type: 'before'}), false);
+	root.beforeEach = createHookChain(startChain('test.beforeEach', fn, {...defaults, type: 'beforeEach'}), false);
+
+	root.serial.after = createHookChain(startChain('test.after', fn, {...defaults, serial: true, type: 'after'}), true);
+	root.serial.afterEach = createHookChain(startChain('test.afterEach', fn, {...defaults, serial: true, type: 'afterEach'}), true);
+	root.serial.before = createHookChain(startChain('test.before', fn, {...defaults, serial: true, type: 'before'}), false);
+	root.serial.beforeEach = createHookChain(startChain('test.beforeEach', fn, {...defaults, serial: true, type: 'beforeEach'}), false);
+
+	// "todo" tests cannot be chained. Allow todo tests to be flagged as needing
+	// to be serial.
+	root.todo = startChain('test.todo', fn, {...defaults, type: 'test', todo: true});
+	root.serial.todo = startChain('test.serial.todo', fn, {...defaults, serial: true, type: 'test', todo: true});
+
+	root.macro = options => {
+		if (typeof options === 'function') {
+			return Object.freeze({exec: options});
+		}
+
+		return Object.freeze({exec: options.exec, title: options.title});
+	};
+
+	root.meta = meta;
+
+	// The ESM and CJS type definitions export the chain (`test()` function) as
+	// the default. TypeScript's CJS output (when `esModuleInterop` is disabled)
+	// assume `require('ava').default` is available. The same goes for `import ava
+	// = require('ava')` syntax.
+	//
+	// Add `test.default` to make this work. Use a proxy to avoid
+	// `test.default.default` chains.
+	Object.defineProperty(root, 'default', {
+		configurable: false,
+		enumerable: false,
+		writable: false,
+		value: new Proxy(root, {
+			apply(target, thisArg, argumentsList) {
+				target.apply(thisArg, argumentsList);
+			},
+			get(target, prop) {
+				if (prop === 'default') {
+					throw new TypeError('Cannot access default.default');
+				}
+
+				return target[prop];
+			},
+		}),
+	});
+
+	return root;
+}

github/codeql-action-v1/node_modules/ava/lib/environment-variables.js

@@ -0,0 +1,13 @@
+export default function validateEnvironmentVariables(environmentVariables) {
+	if (!environmentVariables) {
+		return {};
+	}
+
+	for (const value of Object.values(environmentVariables)) {
+		if (typeof value !== 'string') {
+			throw new TypeError('The ’environmentVariables’ configuration must be an object containing string values.');
+		}
+	}
+
+	return environmentVariables;
+}

github/codeql-action-v1/node_modules/ava/lib/eslint-plugin-helper-worker.js

@@ -0,0 +1,73 @@
+import v8 from 'node:v8';
+import {parentPort, workerData} from 'node:worker_threads';
+
+import normalizeExtensions from './extensions.js';
+import {normalizeGlobs} from './globs.js';
+import {loadConfig} from './load-config.js';
+import providerManager from './provider-manager.js';
+
+const MAX_DATA_LENGTH_EXCLUSIVE = 100 * 1024; // Allocate 100 KiB to exchange globs.
+
+const configCache = new Map();
+
+const collectProviders = async ({conf, projectDir}) => {
+	const providers = [];
+	if (Reflect.has(conf, 'typescript')) {
+		const {level, main} = await providerManager.typescript(projectDir);
+		providers.push({
+			level,
+			main: main({config: conf.typescript}),
+			type: 'typescript',
+		});
+	}
+
+	return providers;
+};
+
+const buildGlobs = ({conf, providers, projectDir, overrideExtensions, overrideFiles}) => {
+	const extensions = overrideExtensions
+		? normalizeExtensions(overrideExtensions)
+		: normalizeExtensions(conf.extensions, providers);
+
+	return {
+		cwd: projectDir,
+		...normalizeGlobs({
+			extensions,
+			files: overrideFiles ? overrideFiles : conf.files,
+			providers,
+		}),
+	};
+};
+
+const resolveGlobs = async (projectDir, overrideExtensions, overrideFiles) => {
+	if (!configCache.has(projectDir)) {
+		configCache.set(projectDir, loadConfig({resolveFrom: projectDir}).then(async ({config: conf}) => {
+			const providers = await collectProviders({conf, projectDir});
+			return {conf, providers};
+		}));
+	}
+
+	const {conf, providers} = await configCache.get(projectDir);
+	return buildGlobs({conf, providers, projectDir, overrideExtensions, overrideFiles});
+};
+
+const data = new Uint8Array(workerData.dataBuffer);
+const sync = new Int32Array(workerData.syncBuffer);
+
+const handleMessage = async ({projectDir, overrideExtensions, overrideFiles}) => {
+	let encoded;
+	try {
+		const globs = await resolveGlobs(projectDir, overrideExtensions, overrideFiles);
+		encoded = v8.serialize(globs);
+	} catch (error) {
+		encoded = v8.serialize(error);
+	}
+
+	const byteLength = encoded.length < MAX_DATA_LENGTH_EXCLUSIVE ? encoded.copy(data) : MAX_DATA_LENGTH_EXCLUSIVE;
+	Atomics.store(sync, 0, byteLength);
+	Atomics.notify(sync, 0);
+};
+
+parentPort.on('message', handleMessage);
+handleMessage(workerData.firstMessage);
+delete workerData.firstMessage;

github/codeql-action-v1/node_modules/ava/lib/extensions.js

@@ -0,0 +1,46 @@
+export default function resolveExtensions(configuredExtensions, providers = []) {
+	// Combine all extensions possible for testing. Remove duplicate extensions.
+	const duplicates = new Set();
+	const seen = new Set();
+
+	const normalize = extensions => Array.isArray(extensions) ? extensions : Object.keys(extensions);
+
+	const combine = extensions => {
+		for (const ext of normalize(extensions)) {
+			if (seen.has(ext)) {
+				duplicates.add(ext);
+			} else {
+				seen.add(ext);
+			}
+		}
+	};
+
+	if (configuredExtensions !== undefined) {
+		combine(configuredExtensions);
+	}
+
+	for (const {main} of providers) {
+		combine(main.extensions);
+	}
+
+	if (duplicates.size > 0) {
+		throw new Error(`Unexpected duplicate extensions in options: ’${[...duplicates].join('’, ’')}’.`);
+	}
+
+	// Unless the default was used by providers, as long as the extensions aren't explicitly set, set the default.
+	if (configuredExtensions === undefined) {
+		if (!seen.has('cjs')) {
+			seen.add('cjs');
+		}
+
+		if (!seen.has('mjs')) {
+			seen.add('mjs');
+		}
+
+		if (!seen.has('js')) {
+			seen.add('js');
+		}
+	}
+
+	return [...seen];
+}

github/codeql-action-v1/node_modules/ava/lib/fork.js

@@ -0,0 +1,178 @@
+import childProcess from 'node:child_process';
+import process from 'node:process';
+import {fileURLToPath} from 'node:url';
+import {Worker} from 'node:worker_threads';
+
+import Emittery from 'emittery';
+import {pEvent} from 'p-event';
+
+import {controlFlow} from './ipc-flow-control.cjs';
+import serializeError from './serialize-error.js';
+
+let workerPath = new URL('worker/base.js', import.meta.url);
+export function _testOnlyReplaceWorkerPath(replacement) {
+	workerPath = replacement;
+}
+
+const additionalExecArgv = ['--enable-source-maps'];
+
+const createWorker = (options, execArgv) => {
+	let worker;
+	let postMessage;
+	let close;
+	if (options.workerThreads) {
+		worker = new Worker(workerPath, {
+			argv: options.workerArgv,
+			env: {NODE_ENV: 'test', ...process.env, ...options.environmentVariables},
+			execArgv: [...execArgv, ...additionalExecArgv],
+			workerData: {
+				options,
+			},
+			trackUnmanagedFds: true,
+			stdin: true,
+			stdout: true,
+			stderr: true,
+		});
+		postMessage = worker.postMessage.bind(worker);
+
+		// Ensure we've seen this event before we terminate the worker thread, as a
+		// workaround for https://github.com/nodejs/node/issues/38418.
+		const starting = pEvent(worker, 'message', ({ava}) => ava && ava.type === 'starting');
+
+		close = async () => {
+			try {
+				await starting;
+				await worker.terminate();
+			} finally {
+				// No-op
+			}
+		};
+	} else {
+		worker = childProcess.fork(fileURLToPath(workerPath), options.workerArgv, {
+			cwd: options.projectDir,
+			silent: true,
+			env: {NODE_ENV: 'test', ...process.env, ...options.environmentVariables},
+			execArgv: [...execArgv, ...additionalExecArgv],
+		});
+		postMessage = controlFlow(worker);
+		close = async () => worker.kill();
+	}
+
+	return {
+		worker,
+		postMessage,
+		close,
+	};
+};
+
+export default function loadFork(file, options, execArgv = process.execArgv) {
+	let finished = false;
+
+	const emitter = new Emittery();
+	const emitStateChange = evt => {
+		if (!finished) {
+			emitter.emit('stateChange', Object.assign(evt, {testFile: file}));
+		}
+	};
+
+	options = {
+		baseDir: process.cwd(),
+		file,
+		...options,
+	};
+
+	const {worker, postMessage, close} = createWorker(options, execArgv);
+	worker.stdout.on('data', chunk => {
+		emitStateChange({type: 'worker-stdout', chunk});
+	});
+
+	worker.stderr.on('data', chunk => {
+		emitStateChange({type: 'worker-stderr', chunk});
+	});
+
+	let forcedExit = false;
+	const send = evt => {
+		if (!finished && !forcedExit) {
+			postMessage({ava: evt});
+		}
+	};
+
+	const promise = new Promise(resolve => {
+		const finish = () => {
+			finished = true;
+			resolve();
+		};
+
+		worker.on('message', message => {
+			if (!message.ava) {
+				return;
+			}
+
+			switch (message.ava.type) {
+				case 'ready-for-options':
+					send({type: 'options', options});
+					break;
+				case 'shared-worker-connect': {
+					const {channelId, filename, initialData, port} = message.ava;
+					emitter.emit('connectSharedWorker', {
+						filename,
+						initialData,
+						port,
+						signalError() {
+							send({type: 'shared-worker-error', channelId});
+						},
+					});
+					break;
+				}
+
+				case 'ping':
+					send({type: 'pong'});
+					break;
+				default:
+					emitStateChange(message.ava);
+			}
+		});
+
+		worker.on('error', error => {
+			emitStateChange({type: 'worker-failed', err: serializeError('Worker error', false, error, file)});
+			finish();
+		});
+
+		worker.on('exit', (code, signal) => {
+			if (forcedExit) {
+				emitStateChange({type: 'worker-finished', forcedExit});
+			} else if (code > 0) {
+				emitStateChange({type: 'worker-failed', nonZeroExitCode: code});
+			} else if (code === null && signal) {
+				emitStateChange({type: 'worker-failed', signal});
+			} else {
+				emitStateChange({type: 'worker-finished', forcedExit});
+			}
+
+			finish();
+		});
+	});
+
+	return {
+		file,
+		threadId: worker.threadId,
+		promise,
+
+		exit() {
+			forcedExit = true;
+			close();
+		},
+
+		notifyOfPeerFailure() {
+			send({type: 'peer-failed'});
+		},
+
+		onConnectSharedWorker(listener) {
+			return emitter.on('connectSharedWorker', listener);
+		},
+
+		onStateChange(listener) {
+			return emitter.on('stateChange', listener);
+		},
+	};
+}

github/codeql-action-v1/node_modules/ava/lib/glob-helpers.cjs

@@ -0,0 +1,140 @@
+'use strict';
+const path = require('path');
+const process = require('process');
+
+const ignoreByDefault = require('ignore-by-default');
+const picomatch = require('picomatch');
+const slash = require('slash');
+
+const defaultIgnorePatterns = [...ignoreByDefault.directories(), '**/node_modules'];
+exports.defaultIgnorePatterns = defaultIgnorePatterns;
+
+const defaultPicomatchIgnorePatterns = [
+	...defaultIgnorePatterns,
+	// Unlike globby(), picomatch needs a complete pattern when ignoring directories.
+	...defaultIgnorePatterns.map(pattern => `${pattern}/**/*`),
+];
+
+const defaultMatchNoIgnore = picomatch(defaultPicomatchIgnorePatterns);
+
+const matchingCache = new WeakMap();
+const processMatchingPatterns = input => {
+	let result = matchingCache.get(input);
+	if (!result) {
+		const ignore = [...defaultPicomatchIgnorePatterns];
+		const patterns = input.filter(pattern => {
+			if (pattern.startsWith('!')) {
+				// Unlike globby(), picomatch needs a complete pattern when ignoring directories.
+				ignore.push(pattern.slice(1), `${pattern.slice(1)}/**/*`);
+				return false;
+			}
+
+			return true;
+		});
+
+		result = {
+			match: picomatch(patterns, {ignore}),
+			matchNoIgnore: picomatch(patterns),
+			individualMatchers: patterns.map(pattern => ({pattern, match: picomatch(pattern, {ignore})})),
+		};
+		matchingCache.set(input, result);
+	}
+
+	return result;
+};
+
+exports.processMatchingPatterns = processMatchingPatterns;
+
+const matchesIgnorePatterns = (file, patterns) => {
+	const {matchNoIgnore} = processMatchingPatterns(patterns);
+	return matchNoIgnore(file) || defaultMatchNoIgnore(file);
+};
+
+function classify(file, {cwd, extensions, filePatterns, ignoredByWatcherPatterns}) {
+	file = normalizeFileForMatching(cwd, file);
+	return {
+		isIgnoredByWatcher: matchesIgnorePatterns(file, ignoredByWatcherPatterns),
+		isTest: hasExtension(extensions, file) && !isHelperish(file) && filePatterns.length > 0 && matches(file, filePatterns),
+	};
+}
+
+exports.classify = classify;
+
+const hasExtension = (extensions, file) => extensions.includes(path.extname(file).slice(1));
+
+exports.hasExtension = hasExtension;
+
+function isHelperish(file) { // Assume file has been normalized already.
+	// File names starting with an underscore are deemed "helpers".
+	if (path.basename(file).startsWith('_')) {
+		return true;
+	}
+
+	// This function assumes the file has been normalized. If it couldn't be,
+	// don't check if it's got a parent directory that starts with an underscore.
+	// Deem it not a "helper".
+	if (path.isAbsolute(file)) {
+		return false;
+	}
+
+	// If the file has a parent directory that starts with only a single
+	// underscore, it's deemed a "helper".
+	return path.dirname(file).split('/').some(dir => /^_(?:$|[^_])/.test(dir));
+}
+
+exports.isHelperish = isHelperish;
+
+function matches(file, patterns) {
+	const {match} = processMatchingPatterns(patterns);
+	return match(file);
+}
+
+exports.matches = matches;
+
+function normalizeFileForMatching(cwd, file) {
+	if (process.platform === 'win32') {
+		cwd = slash(cwd);
+		file = slash(file);
+	}
+
+	// Note that if `file` is outside `cwd` we can't normalize it. If this turns
+	// out to be a real-world scenario we may have to make changes in calling code
+	// to make sure the file isn't even selected for matching.
+	if (!file.startsWith(cwd)) {
+		return file;
+	}
+
+	// Assume `cwd` does *not* end in a slash.
+	return file.slice(cwd.length + 1);
+}
+
+exports.normalizeFileForMatching = normalizeFileForMatching;
+
+function normalizePattern(pattern) {
+	// Always use `/` in patterns, harmonizing matching across platforms
+	if (process.platform === 'win32') {
+		pattern = slash(pattern);
+	}
+
+	if (pattern.endsWith('/')) {
+		pattern = pattern.slice(0, -1);
+	}
+
+	if (pattern.startsWith('./')) {
+		return pattern.slice(2);
+	}
+
+	if (pattern.startsWith('!./')) {
+		return `!${pattern.slice(3)}`;
+	}
+
+	return pattern;
+}
+
+exports.normalizePattern = normalizePattern;
+
+function normalizePatterns(patterns) {
+	return patterns.map(pattern => normalizePattern(pattern));
+}
+
+exports.normalizePatterns = normalizePatterns;

github/codeql-action-v1/node_modules/ava/lib/globs.js

@@ -0,0 +1,216 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+import {globby, globbySync} from 'globby';
+
+import {
+	defaultIgnorePatterns,
+	hasExtension,
+	normalizeFileForMatching,
+	normalizePatterns,
+	processMatchingPatterns,
+} from './glob-helpers.cjs';
+
+export {
+	classify,
+	isHelperish,
+	matches,
+	normalizePattern,
+	defaultIgnorePatterns,
+	hasExtension,
+	normalizeFileForMatching,
+	normalizePatterns,
+} from './glob-helpers.cjs';
+
+const defaultIgnoredByWatcherPatterns = [
+	'**/*.snap.md', // No need to rerun tests when the Markdown files change.
+	'ava.config.js', // Config is not reloaded so avoid rerunning tests when it changes.
+	'ava.config.cjs', // Config is not reloaded so avoid rerunning tests when it changes.
+];
+
+const buildExtensionPattern = extensions => extensions.length === 1 ? extensions[0] : `{${extensions.join(',')}}`;
+
+export function normalizeGlobs({extensions, files: filePatterns, ignoredByWatcher: ignoredByWatcherPatterns, providers}) {
+	if (filePatterns !== undefined && (!Array.isArray(filePatterns) || filePatterns.length === 0)) {
+		throw new Error('The ’files’ configuration must be an array containing glob patterns.');
+	}
+
+	if (ignoredByWatcherPatterns !== undefined && (!Array.isArray(ignoredByWatcherPatterns) || ignoredByWatcherPatterns.length === 0)) {
+		throw new Error('The ’ignoredByWatcher’ configuration must be an array containing glob patterns.');
+	}
+
+	const extensionPattern = buildExtensionPattern(extensions);
+	const defaultTestPatterns = [
+		`test.${extensionPattern}`,
+		`{src,source}/test.${extensionPattern}`,
+		`**/__tests__/**/*.${extensionPattern}`,
+		`**/*.spec.${extensionPattern}`,
+		`**/*.test.${extensionPattern}`,
+		`**/test-*.${extensionPattern}`,
+		`**/test/**/*.${extensionPattern}`,
+		`**/tests/**/*.${extensionPattern}`,
+		'!**/__tests__/**/__{helper,fixture}?(s)__/**/*',
+		'!**/test?(s)/**/{helper,fixture}?(s)/**/*',
+	];
+
+	if (filePatterns) {
+		filePatterns = normalizePatterns(filePatterns);
+
+		if (filePatterns.every(pattern => pattern.startsWith('!'))) {
+			// Use defaults if patterns only contains exclusions.
+			filePatterns = [...defaultTestPatterns, ...filePatterns];
+		}
+	} else {
+		filePatterns = defaultTestPatterns;
+	}
+
+	ignoredByWatcherPatterns = ignoredByWatcherPatterns ? [...defaultIgnoredByWatcherPatterns, ...normalizePatterns(ignoredByWatcherPatterns)] : [...defaultIgnoredByWatcherPatterns];
+
+	for (const {main} of providers) {
+		({filePatterns, ignoredByWatcherPatterns} = main.updateGlobs({filePatterns, ignoredByWatcherPatterns}));
+	}
+
+	return {extensions, filePatterns, ignoredByWatcherPatterns};
+}
+
+const globOptions = {
+	// Globs should work relative to the cwd value only (this should be the
+	// project directory that AVA is run in).
+	absolute: false,
+	braceExpansion: true,
+	caseSensitiveMatch: false,
+	dot: false,
+	expandDirectories: false,
+	extglob: true,
+	followSymbolicLinks: true,
+	gitignore: false,
+	globstar: true,
+	ignore: defaultIgnorePatterns,
+	baseNameMatch: false,
+	stats: false,
+	unique: true,
+};
+
+const globFiles = async (cwd, patterns) => {
+	const files = await globby(patterns, {
+		...globOptions,
+		cwd,
+		onlyFiles: true,
+	});
+
+	// Return absolute file paths. This has the side-effect of normalizing paths
+	// on Windows.
+	return files.map(file => path.join(cwd, file));
+};
+
+const globDirectoriesSync = (cwd, patterns) => {
+	const files = globbySync(patterns, {
+		...globOptions,
+		cwd,
+		onlyDirectories: true,
+	});
+
+	// Return absolute file paths. This has the side-effect of normalizing paths
+	// on Windows.
+	return files.map(file => path.join(cwd, file));
+};
+
+export async function findFiles({cwd, extensions, filePatterns}) {
+	const files = await globFiles(cwd, filePatterns);
+	return files.filter(file => hasExtension(extensions, file));
+}
+
+export async function findTests({cwd, extensions, filePatterns}) {
+	const files = await findFiles({cwd, extensions, filePatterns});
+	return files.filter(file => !path.basename(file).startsWith('_'));
+}
+
+export function getChokidarIgnorePatterns({ignoredByWatcherPatterns}) {
+	return [
+		...defaultIgnorePatterns.map(pattern => `${pattern}/**/*`),
+		...ignoredByWatcherPatterns.filter(pattern => !pattern.startsWith('!')),
+	];
+}
+
+export function applyTestFileFilter({ // eslint-disable-line complexity
+	cwd,
+	expandDirectories = true,
+	filter,
+	providers = [],
+	testFiles,
+	treatFilterPatternsAsFiles = true,
+}) {
+	const {individualMatchers} = processMatchingPatterns(filter);
+	const normalizedFiles = testFiles.map(file => ({file, matcheable: normalizeFileForMatching(cwd, file)}));
+
+	const selected = new Set();
+	const unmatchedPatterns = new Set(individualMatchers.map(({pattern}) => pattern));
+
+	for (const {pattern, match} of individualMatchers) {
+		for (const {file, matcheable} of normalizedFiles) {
+			if (match(matcheable)) {
+				unmatchedPatterns.delete(pattern);
+				selected.add(file);
+			}
+		}
+	}
+
+	if (expandDirectories && unmatchedPatterns.size > 0) {
+		const expansion = [];
+		for (const pattern of unmatchedPatterns) {
+			const directories = globDirectoriesSync(cwd, pattern);
+			if (directories.length > 0) {
+				unmatchedPatterns.delete(pattern);
+				expansion.push(directories);
+			}
+		}
+
+		const directories = expansion.flat();
+		if (directories.length > 0) {
+			for (const file of testFiles) {
+				if (selected.has(file)) {
+					continue;
+				}
+
+				for (const dir of directories) {
+					if (file.startsWith(dir + path.sep)) { // eslint-disable-line max-depth
+						selected.add(file);
+					}
+				}
+			}
+		}
+	}
+
+	const ignoredFilterPatternFiles = [];
+	if (treatFilterPatternsAsFiles && unmatchedPatterns.size > 0) {
+		const providerExtensions = new Set(providers.flatMap(({main}) => main.extensions));
+		for (const pattern of unmatchedPatterns) {
+			const file = path.join(cwd, pattern);
+			try {
+				const stats = fs.statSync(file);
+				if (!stats.isFile()) {
+					continue;
+				}
+			} catch (error) {
+				if (error.code === 'ENOENT') {
+					continue;
+				}
+
+				throw error;
+			}
+
+			if (
+				path.basename(file).startsWith('_')
+				|| providerExtensions.has(path.extname(file).slice(1))
+				|| file.split(path.sep).includes('node_modules')
+			) {
+				ignoredFilterPatternFiles.push(pattern);
+				continue;
+			}
+
+			selected.add(file);
+		}
+	}
+
+	return Object.assign([...selected], {ignoredFilterPatternFiles});
+}

github/codeql-action-v1/node_modules/ava/lib/ipc-flow-control.cjs

@@ -0,0 +1,40 @@
+'use strict';
+function controlFlow(channel) {
+	let errored = false;
+	let deliverImmediately = true;
+
+	const backlog = [];
+	const deliverNext = error => {
+		if (error !== null) {
+			errored = true;
+		}
+
+		if (errored || !channel.connected) {
+			backlog.length = 0; // Free memory.
+			return; // We can't send.
+		}
+
+		let ok = true;
+		while (ok && backlog.length > 0) { // Stop sending after backpressure.
+			ok = channel.send(backlog.shift(), deliverNext);
+		}
+
+		// Re-enable immediate delivery if there is no backpressure and the backlog
+		// has been cleared.
+		deliverImmediately = ok && backlog.length === 0;
+	};
+
+	return message => {
+		if (errored || !channel.connected) {
+			return;
+		}
+
+		if (deliverImmediately) {
+			deliverImmediately = channel.send(message, deliverNext);
+		} else {
+			backlog.push(message);
+		}
+	};
+}
+
+exports.controlFlow = controlFlow;

github/codeql-action-v1/node_modules/ava/lib/is-ci.js

@@ -0,0 +1,7 @@
+import process from 'node:process';
+
+import info from 'ci-info';
+
+const {AVA_FORCE_CI} = process.env;
+
+export default AVA_FORCE_CI === 'not-ci' ? false : AVA_FORCE_CI === 'ci' || info.isCI;

github/codeql-action-v1/node_modules/ava/lib/like-selector.js

@@ -0,0 +1,31 @@
+export function isLikeSelector(selector) {
+	return selector !== null
+		&& typeof selector === 'object'
+		&& Reflect.getPrototypeOf(selector) === Object.prototype
+		&& Reflect.ownKeys(selector).length > 0;
+}
+
+export const CIRCULAR_SELECTOR = new Error('Encountered a circular selector');
+
+export function selectComparable(lhs, selector, circular = new Set()) {
+	if (circular.has(selector)) {
+		throw CIRCULAR_SELECTOR;
+	}
+
+	circular.add(selector);
+
+	if (lhs === null || typeof lhs !== 'object') {
+		return lhs;
+	}
+
+	const comparable = {};
+	for (const [key, rhs] of Object.entries(selector)) {
+		if (isLikeSelector(rhs)) {
+			comparable[key] = selectComparable(Reflect.get(lhs, key), rhs, circular);
+		} else {
+			comparable[key] = Reflect.get(lhs, key);
+		}
+	}
+
+	return comparable;
+}

github/codeql-action-v1/node_modules/ava/lib/line-numbers.js

@@ -0,0 +1,57 @@
+import picomatch from 'picomatch';
+
+const NUMBER_REGEX = /^\d+$/;
+const RANGE_REGEX = /^(?<startGroup>\d+)-(?<endGroup>\d+)$/;
+const LINE_NUMBERS_REGEX = /^(?:\d+(?:-\d+)?,?)+$/;
+const DELIMITER = ':';
+
+const distinctArray = array => [...new Set(array)];
+const sortNumbersAscending = array => {
+	const sorted = [...array];
+	sorted.sort((a, b) => a - b);
+	return sorted;
+};
+
+const parseNumber = string => Number.parseInt(string, 10);
+const removeAllWhitespace = string => string.replace(/\s/g, '');
+const range = (start, end) => Array.from({length: end - start + 1}).fill(start).map((element, index) => element + index);
+
+const parseLineNumbers = suffix => sortNumbersAscending(distinctArray(
+	suffix.split(',').flatMap(part => {
+		if (NUMBER_REGEX.test(part)) {
+			return parseNumber(part);
+		}
+
+		const {groups: {startGroup, endGroup}} = RANGE_REGEX.exec(part);
+		const start = parseNumber(startGroup);
+		const end = parseNumber(endGroup);
+
+		if (start > end) {
+			return range(end, start);
+		}
+
+		return range(start, end);
+	}),
+));
+
+export function splitPatternAndLineNumbers(pattern) {
+	const parts = pattern.split(DELIMITER);
+	if (parts.length === 1) {
+		return {pattern, lineNumbers: null};
+	}
+
+	const suffix = removeAllWhitespace(parts.pop());
+	if (!LINE_NUMBERS_REGEX.test(suffix)) {
+		return {pattern, lineNumbers: null};
+	}
+
+	return {pattern: parts.join(DELIMITER), lineNumbers: parseLineNumbers(suffix)};
+}
+
+export function getApplicableLineNumbers(normalizedFilePath, filter) {
+	return sortNumbersAscending(distinctArray(
+		filter
+			.filter(({pattern, lineNumbers}) => lineNumbers && picomatch.isMatch(normalizedFilePath, pattern))
+			.flatMap(({lineNumbers}) => lineNumbers),
+	));
+}

github/codeql-action-v1/node_modules/ava/lib/load-config.js

@@ -0,0 +1,164 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import url from 'node:url';
+
+import {isPlainObject} from 'is-plain-object';
+import {packageConfig, packageJsonPath} from 'pkg-conf';
+
+const NO_SUCH_FILE = Symbol('no ava.config.js file');
+const MISSING_DEFAULT_EXPORT = Symbol('missing default export');
+const EXPERIMENTS = new Set();
+
+const importConfig = async ({configFile, fileForErrorMessage}) => {
+	const {default: config = MISSING_DEFAULT_EXPORT} = await import(url.pathToFileURL(configFile)); // eslint-disable-line node/no-unsupported-features/es-syntax
+	if (config === MISSING_DEFAULT_EXPORT) {
+		throw new Error(`${fileForErrorMessage} must have a default export`);
+	}
+
+	return config;
+};
+
+const loadConfigFile = async ({projectDir, configFile}) => {
+	const fileForErrorMessage = path.relative(projectDir, configFile);
+	try {
+		await fs.promises.access(configFile);
+		return {config: await importConfig({configFile, fileForErrorMessage}), configFile, fileForErrorMessage};
+	} catch (error) {
+		if (error.code === 'ENOENT') {
+			return null;
+		}
+
+		throw Object.assign(new Error(`Error loading ${fileForErrorMessage}: ${error.message}`), {parent: error});
+	}
+};
+
+function resolveConfigFile(configFile) {
+	if (configFile) {
+		configFile = path.resolve(configFile); // Relative to CWD
+
+		if (!configFile.endsWith('.js') && !configFile.endsWith('.cjs') && !configFile.endsWith('.mjs')) {
+			throw new Error('Config files must have .js, .cjs or .mjs extensions');
+		}
+	}
+
+	return configFile;
+}
+
+const gitScmFile = process.env.AVA_FAKE_SCM_ROOT || '.git';
+
+async function findRepoRoot(fromDir) {
+	const {root} = path.parse(fromDir);
+	let dir = fromDir;
+	while (root !== dir) {
+		try {
+			const stat = await fs.promises.stat(path.join(dir, gitScmFile)); // eslint-disable-line no-await-in-loop
+			if (stat.isFile() || stat.isDirectory()) {
+				return dir;
+			}
+		} catch {}
+
+		dir = path.dirname(dir);
+	}
+
+	return root;
+}
+
+async function checkJsonFile(searchDir) {
+	const file = path.join(searchDir, 'ava.config.json');
+	try {
+		await fs.promises.access(file);
+		return file;
+	} catch (error) {
+		if (error.code === 'ENOENT') {
+			return null;
+		}
+
+		throw error;
+	}
+}
+
+export async function loadConfig({configFile, resolveFrom = process.cwd(), defaults = {}} = {}) {
+	let packageConf = await packageConfig('ava', {cwd: resolveFrom});
+	const filepath = packageJsonPath(packageConf);
+	const projectDir = filepath === undefined ? resolveFrom : path.dirname(filepath);
+
+	const repoRoot = await findRepoRoot(projectDir);
+
+	// Conflicts are only allowed when an explicit config file is provided.
+	const allowConflictWithPackageJson = Boolean(configFile);
+	configFile = resolveConfigFile(configFile);
+
+	const unsupportedFiles = [];
+	let fileConf = NO_SUCH_FILE;
+	let fileForErrorMessage;
+	let conflicting = [];
+	if (configFile) {
+		const loaded = await loadConfigFile({projectDir, configFile});
+		if (loaded !== null) {
+			({config: fileConf, fileForErrorMessage} = loaded);
+		}
+	} else {
+		let searchDir = projectDir;
+		const stopAt = path.dirname(repoRoot);
+		do {
+			const [jsonFile, ...results] = await Promise.all([ // eslint-disable-line no-await-in-loop
+				checkJsonFile(searchDir),
+				loadConfigFile({projectDir, configFile: path.join(searchDir, 'ava.config.js')}),
+				loadConfigFile({projectDir, configFile: path.join(searchDir, 'ava.config.cjs')}),
+				loadConfigFile({projectDir, configFile: path.join(searchDir, 'ava.config.mjs')}),
+			]);
+
+			if (jsonFile !== null) {
+				unsupportedFiles.push(jsonFile);
+			}
+
+			[{config: fileConf, fileForErrorMessage, configFile} = {config: NO_SUCH_FILE, fileForErrorMessage: undefined}, ...conflicting] = results.filter(result => result !== null);
+
+			searchDir = path.dirname(searchDir);
+		} while (fileConf === NO_SUCH_FILE && searchDir !== stopAt);
+	}
+
+	if (conflicting.length > 0) {
+		throw new Error(`Conflicting configuration in ${fileForErrorMessage} and ${conflicting.map(({fileForErrorMessage}) => fileForErrorMessage).join(' & ')}`);
+	}
+
+	if (fileConf !== NO_SUCH_FILE) {
+		if (allowConflictWithPackageJson) {
+			packageConf = {};
+		} else if (Object.keys(packageConf).length > 0) {
+			throw new Error(`Conflicting configuration in ${fileForErrorMessage} and package.json`);
+		}
+
+		if (!isPlainObject(fileConf) && typeof fileConf !== 'function') {
+			throw new TypeError(`${fileForErrorMessage} must export a plain object or factory function`);
+		}
+
+		if (typeof fileConf === 'function') {
+			fileConf = await fileConf({projectDir});
+
+			if (!isPlainObject(fileConf)) {
+				throw new TypeError(`Factory method exported by ${fileForErrorMessage} must return a plain object`);
+			}
+		}
+
+		if ('ava' in fileConf) {
+			throw new Error(`Encountered ’ava’ property in ${fileForErrorMessage}; avoid wrapping the configuration`);
+		}
+	}
+
+	const config = {...defaults, nonSemVerExperiments: {}, ...fileConf, ...packageConf, projectDir, configFile};
+
+	const {nonSemVerExperiments: experiments} = config;
+	if (!isPlainObject(experiments)) {
+		throw new Error(`nonSemVerExperiments from ${fileForErrorMessage} must be an object`);
+	}
+
+	for (const key of Object.keys(experiments)) {
+		if (!EXPERIMENTS.has(key)) {
+			throw new Error(`nonSemVerExperiments.${key} from ${fileForErrorMessage} is not a supported experiment`);
+		}
+	}
+
+	return {config, unsupportedFiles};
+}

github/codeql-action-v1/node_modules/ava/lib/module-types.js

@@ -0,0 +1,71 @@
+const requireTrueValue = value => {
+	if (value !== true) {
+		throw new TypeError('When specifying module types, use `true` for ’cjs’, ’mjs’ and ’js’ extensions');
+	}
+};
+
+const normalize = (extension, type, defaultModuleType) => {
+	switch (extension) {
+		case 'cjs':
+			requireTrueValue(type);
+			return 'commonjs';
+		case 'mjs':
+			requireTrueValue(type);
+			return 'module';
+		case 'js':
+			requireTrueValue(type);
+			return defaultModuleType;
+		default:
+			if (type !== 'commonjs' && type !== 'module') {
+				throw new TypeError(`Module type for ’${extension}’ must be ’commonjs’ or ’module’`);
+			}
+
+			return type;
+	}
+};
+
+const deriveFromObject = (extensionsObject, defaultModuleType) => {
+	const moduleTypes = {};
+	for (const [extension, type] of Object.entries(extensionsObject)) {
+		moduleTypes[extension] = normalize(extension, type, defaultModuleType);
+	}
+
+	return moduleTypes;
+};
+
+const deriveFromArray = (extensions, defaultModuleType) => {
+	const moduleTypes = {};
+	for (const extension of extensions) {
+		switch (extension) {
+			case 'cjs':
+				moduleTypes.cjs = 'commonjs';
+				break;
+			case 'mjs':
+				moduleTypes.mjs = 'module';
+				break;
+			case 'js':
+				moduleTypes.js = defaultModuleType;
+				break;
+			default:
+				moduleTypes[extension] = 'commonjs';
+		}
+	}
+
+	return moduleTypes;
+};
+
+export default function moduleTypes(configuredExtensions, defaultModuleType) {
+	if (configuredExtensions === undefined) {
+		return {
+			cjs: 'commonjs',
+			mjs: 'module',
+			js: defaultModuleType,
+		};
+	}
+
+	if (Array.isArray(configuredExtensions)) {
+		return deriveFromArray(configuredExtensions, defaultModuleType);
+	}
+
+	return deriveFromObject(configuredExtensions, defaultModuleType);
+}

github/codeql-action-v1/node_modules/ava/lib/node-arguments.js

@@ -0,0 +1,16 @@
+import process from 'node:process';
+
+import arrgv from 'arrgv';
+
+export default function normalizeNodeArguments(fromConf = [], fromArgv = '') {
+	let parsedArgv = [];
+	if (fromArgv !== '') {
+		try {
+			parsedArgv = arrgv(fromArgv);
+		} catch {
+			throw new Error('Could not parse `--node-arguments` value. Make sure all strings are closed and backslashes are used correctly.');
+		}
+	}
+
+	return [...process.execArgv, ...fromConf, ...parsedArgv];
+}

github/codeql-action-v1/node_modules/ava/lib/now-and-timers.cjs

@@ -0,0 +1,5 @@
+'use strict';
+const timers = require('timers');
+
+Object.assign(exports, timers);
+exports.now = Date.now;

github/codeql-action-v1/node_modules/ava/lib/parse-test-args.js

@@ -0,0 +1,26 @@
+const buildTitle = (raw, implementation, args) => {
+	let value = implementation && implementation.title ? implementation.title(raw, ...args) : raw;
+	const isValid = typeof value === 'string';
+	if (isValid) {
+		value = value.trim().replace(/\s+/g, ' ');
+	}
+
+	return {
+		raw,
+		value,
+		isSet: value !== undefined,
+		isValid,
+		isEmpty: !isValid || value === '',
+	};
+};
+
+export default function parseTestArgs(args) {
+	const rawTitle = typeof args[0] === 'string' ? args.shift() : undefined;
+	const implementation = args.shift();
+
+	return {
+		args,
+		implementation: implementation && implementation.exec ? implementation.exec : implementation,
+		title: buildTitle(rawTitle, implementation, args),
+	};
+}

github/codeql-action-v1/node_modules/ava/lib/pkg.cjs

@@ -0,0 +1,2 @@
+'use strict';
+module.exports = require('../package.json');

github/codeql-action-v1/node_modules/ava/lib/plugin-support/shared-worker-loader.js

@@ -0,0 +1,249 @@
+import {EventEmitter, on} from 'node:events';
+import process from 'node:process';
+import {workerData, parentPort, threadId} from 'node:worker_threads';
+
+import pkg from '../pkg.cjs';
+
+// Used to forward messages received over the `parentPort` and any direct ports
+// to test workers. Every subscription adds a listener, so do not enforce any
+// maximums.
+const events = new EventEmitter().setMaxListeners(0);
+const emitMessage = message => {
+	// Wait for a turn of the event loop, to allow new subscriptions to be
+	// set up in response to the previous message.
+	setImmediate(() => events.emit('message', message));
+};
+
+// Map of active test workers, used in receiveMessages() to get a reference to
+// the TestWorker instance, and relevant release functions.
+const activeTestWorkers = new Map();
+
+const internalMessagePort = Symbol('Internal MessagePort');
+
+class TestWorker {
+	constructor(id, file, port) {
+		this.id = id;
+		this.file = file;
+		this[internalMessagePort] = port;
+	}
+
+	teardown(fn) {
+		let done = false;
+		const teardownFn = async () => {
+			if (done) {
+				return;
+			}
+
+			done = true;
+			if (activeTestWorkers.has(this.id)) {
+				activeTestWorkers.get(this.id).teardownFns.delete(teardownFn);
+			}
+
+			await fn();
+		};
+
+		activeTestWorkers.get(this.id).teardownFns.add(teardownFn);
+
+		return teardownFn;
+	}
+
+	publish(data) {
+		return publishMessage(this, data);
+	}
+
+	async * subscribe() {
+		yield * receiveMessages(this);
+	}
+}
+
+class ReceivedMessage {
+	constructor(testWorker, id, data) {
+		this.testWorker = testWorker;
+		this.id = id;
+		this.data = data;
+	}
+
+	reply(data) {
+		return publishMessage(this.testWorker, data, this.id);
+	}
+}
+
+// Ensure that, no matter how often it's received, we have a stable message
+// object.
+const messageCache = new WeakMap();
+
+async function * receiveMessages(fromTestWorker, replyTo) {
+	for await (const [message] of on(events, 'message')) {
+		if (fromTestWorker !== undefined) {
+			if (message.type === 'deregister-test-worker' && message.id === fromTestWorker.id) {
+				return;
+			}
+
+			if (message.type === 'message' && message.testWorkerId !== fromTestWorker.id) {
+				continue;
+			}
+		}
+
+		if (message.type !== 'message') {
+			continue;
+		}
+
+		if (replyTo === undefined && message.replyTo !== undefined) {
+			continue;
+		}
+
+		if (replyTo !== undefined && message.replyTo !== replyTo) {
+			continue;
+		}
+
+		const active = activeTestWorkers.get(message.testWorkerId);
+		// It is possible for a message to have been buffering for so long — perhaps
+		// due to the caller waiting before iterating to the next message — that the
+		// test worker has been deregistered. Ignore such messages.
+		//
+		// (This is really hard to write a test for, however!)
+		if (active === undefined) {
+			continue;
+		}
+
+		let received = messageCache.get(message);
+		if (received === undefined) {
+			received = new ReceivedMessage(active.instance, message.messageId, message.data);
+			messageCache.set(message, received);
+		}
+
+		yield received;
+	}
+}
+
+let messageCounter = 0;
+const messageIdPrefix = `${threadId}/message`;
+const nextMessageId = () => `${messageIdPrefix}/${++messageCounter}`;
+
+function publishMessage(testWorker, data, replyTo) {
+	const id = nextMessageId();
+	testWorker[internalMessagePort].postMessage({
+		type: 'message',
+		messageId: id,
+		data,
+		replyTo,
+	});
+
+	return {
+		id,
+		async * replies() {
+			yield * receiveMessages(testWorker, id);
+		},
+	};
+}
+
+function broadcastMessage(data) {
+	const id = nextMessageId();
+	for (const trackedWorker of activeTestWorkers.values()) {
+		trackedWorker.instance[internalMessagePort].postMessage({
+			type: 'message',
+			messageId: id,
+			data,
+		});
+	}
+
+	return {
+		id,
+		async * replies() {
+			yield * receiveMessages(undefined, id);
+		},
+	};
+}
+
+async function loadFactory() {
+	const {default: factory} = await import(workerData.filename); // eslint-disable-line node/no-unsupported-features/es-syntax
+	return factory;
+}
+
+let signalAvailable = () => {
+	parentPort.postMessage({type: 'available'});
+	signalAvailable = () => {};
+};
+
+let fatal;
+loadFactory(workerData.filename).then(factory => {
+	if (typeof factory !== 'function') {
+		throw new TypeError(`Missing default factory function export for shared worker plugin at ${workerData.filename}`);
+	}
+
+	factory({
+		negotiateProtocol(supported) {
+			if (!supported.includes('ava-4')) {
+				fatal = new Error(`This version of AVA (${pkg.version}) is not compatible with shared worker plugin at ${workerData.filename}`);
+				throw fatal;
+			}
+
+			const produceTestWorker = instance => events.emit('testWorker', instance);
+
+			parentPort.on('message', async message => {
+				if (message.type === 'register-test-worker') {
+					const {id, file, port} = message;
+					const instance = new TestWorker(id, file, port);
+
+					activeTestWorkers.set(id, {instance, teardownFns: new Set()});
+
+					produceTestWorker(instance);
+					port.on('message', message => emitMessage({testWorkerId: id, ...message}));
+				}
+
+				if (message.type === 'deregister-test-worker') {
+					const {id} = message;
+					const {teardownFns} = activeTestWorkers.get(id);
+					activeTestWorkers.delete(id);
+
+					// Run possibly asynchronous release functions serially, in reverse
+					// order. Any error will crash the worker.
+					for await (const fn of [...teardownFns].reverse()) {
+						await fn();
+					}
+
+					parentPort.postMessage({
+						type: 'deregistered-test-worker',
+						id,
+					});
+
+					emitMessage(message);
+				}
+			});
+
+			return {
+				initialData: workerData.initialData,
+				protocol: 'ava-4',
+
+				ready() {
+					signalAvailable();
+					return this;
+				},
+
+				broadcast(data) {
+					return broadcastMessage(data);
+				},
+
+				async * subscribe() {
+					yield * receiveMessages();
+				},
+
+				async * testWorkers() {
+					for await (const [worker] of on(events, 'testWorker')) {
+						yield worker;
+					}
+				},
+			};
+		},
+	});
+}).catch(error => {
+	if (fatal === undefined) {
+		fatal = error;
+	}
+}).finally(() => {
+	if (fatal !== undefined) {
+		process.nextTick(() => {
+			throw fatal;
+		});
+	}
+});

github/codeql-action-v1/node_modules/ava/lib/plugin-support/shared-workers.js

@@ -0,0 +1,118 @@
+import events from 'node:events';
+import {pathToFileURL} from 'node:url';
+import {Worker} from 'node:worker_threads';
+
+import serializeError from '../serialize-error.js';
+
+const LOADER = new URL('shared-worker-loader.js', import.meta.url);
+
+const launchedWorkers = new Map();
+
+const waitForAvailable = async worker => {
+	for await (const [message] of events.on(worker, 'message')) {
+		if (message.type === 'available') {
+			return;
+		}
+	}
+};
+
+function launchWorker(filename, initialData) {
+	if (launchedWorkers.has(filename)) {
+		return launchedWorkers.get(filename);
+	}
+
+	const worker = new Worker(LOADER, {
+		// Ensure the worker crashes for unhandled rejections, rather than allowing undefined behavior.
+		execArgv: ['--unhandled-rejections=strict'],
+		workerData: {
+			filename,
+			initialData,
+		},
+	});
+	worker.setMaxListeners(0);
+
+	const launched = {
+		statePromises: {
+			available: waitForAvailable(worker),
+			error: events.once(worker, 'error').then(([error]) => error),
+		},
+		exited: false,
+		worker,
+	};
+
+	launchedWorkers.set(filename, launched);
+	worker.once('exit', () => {
+		launched.exited = true;
+	});
+
+	return launched;
+}
+
+export async function observeWorkerProcess(fork, runStatus) {
+	let registrationCount = 0;
+	let signalDeregistered;
+	const deregistered = new Promise(resolve => {
+		signalDeregistered = resolve;
+	});
+
+	fork.promise.finally(() => {
+		if (registrationCount === 0) {
+			signalDeregistered();
+		}
+	});
+
+	fork.onConnectSharedWorker(async ({filename, initialData, port, signalError}) => {
+		const launched = launchWorker(filename, initialData);
+
+		const handleWorkerMessage = async message => {
+			if (message.type === 'deregistered-test-worker' && message.id === fork.threadId) {
+				launched.worker.off('message', handleWorkerMessage);
+
+				registrationCount--;
+				if (registrationCount === 0) {
+					signalDeregistered();
+				}
+			}
+		};
+
+		launched.statePromises.error.then(error => {
+			signalDeregistered();
+			launched.worker.off('message', handleWorkerMessage);
+			runStatus.emitStateChange({type: 'shared-worker-error', err: serializeError('Shared worker error', true, error)});
+			signalError();
+		});
+
+		try {
+			await launched.statePromises.available;
+
+			registrationCount++;
+
+			port.postMessage({type: 'ready'});
+
+			launched.worker.postMessage({
+				type: 'register-test-worker',
+				id: fork.threadId,
+				file: pathToFileURL(fork.file).toString(),
+				port,
+			}, [port]);
+
+			fork.promise.finally(() => {
+				launched.worker.postMessage({
+					type: 'deregister-test-worker',
+					id: fork.threadId,
+				});
+			});
+
+			launched.worker.on('message', handleWorkerMessage);
+		} catch {
+			return;
+		} finally {
+			// Attaching listeners has the side-effect of referencing the worker.
+			// Explicitly unreference it now so it does not prevent the main process
+			// from exiting.
+			launched.worker.unref();
+		}
+	});
+
+	return deregistered;
+}

github/codeql-action-v1/node_modules/ava/lib/provider-manager.js

@@ -0,0 +1,59 @@
+import * as globs from './globs.js';
+import pkg from './pkg.cjs';
+
+const levels = {
+	// As the protocol changes, comparing levels by integer allows AVA to be
+	// compatible with different versions. Currently there is only one supported
+	// version, so this is effectively unused. The infrastructure is retained for
+	// future use.
+	levelIntegersAreCurrentlyUnused: 0,
+};
+
+const levelsByProtocol = {
+	'ava-3.2': levels.levelIntegersAreCurrentlyUnused,
+};
+
+async function load(providerModule, projectDir) {
+	const ava = {version: pkg.version};
+	const {default: makeProvider} = await import(providerModule); // eslint-disable-line node/no-unsupported-features/es-syntax
+
+	let fatal;
+	let level;
+	const provider = makeProvider({
+		negotiateProtocol(identifiers, {version}) {
+			const identifier = identifiers.find(identifier => Reflect.has(levelsByProtocol, identifier));
+
+			if (identifier === undefined) {
+				fatal = new Error(`This version of AVA (${ava.version}) is not compatible with ${providerModule}@${version}`);
+				return null;
+			}
+
+			level = levelsByProtocol[identifier];
+
+			return {
+				ava,
+				async findFiles({extensions, patterns}) {
+					return globs.findFiles({cwd: projectDir, extensions, filePatterns: patterns});
+				},
+				identifier,
+				normalizeGlobPatterns: globs.normalizePatterns,
+				projectDir,
+			};
+		},
+	});
+
+	if (fatal) {
+		throw fatal;
+	}
+
+	return {...provider, level};
+}
+
+const providerManager = {
+	levels,
+	async typescript(projectDir) {
+		return load('@ava/typescript', projectDir);
+	},
+};
+
+export default providerManager;

github/codeql-action-v1/node_modules/ava/lib/reporters/beautify-stack.js

@@ -0,0 +1,67 @@
+import StackUtils from 'stack-utils';
+
+const stackUtils = new StackUtils({
+	ignoredPackages: [
+		'@ava/typescript',
+		'ava',
+		'nyc',
+	],
+	internals: [
+		// AVA internals, which ignoredPackages don't ignore when we run our own unit tests.
+		/\/ava\/(?:lib\/|lib\/worker\/)?[\w-]+\.js:\d+:\d+\)?$/,
+		// Only ignore Node.js internals that really are not useful for debugging.
+		...StackUtils.nodeInternals().filter(regexp => !/\(internal/.test(regexp.source)),
+		/\(internal\/process\/task_queues\.js:\d+:\d+\)$/,
+		/\(internal\/modules\/cjs\/.+?\.js:\d+:\d+\)$/,
+		/async Promise\.all \(index/,
+		/new Promise \(<anonymous>\)/,
+	],
+});
+
+/*
+ * Given a string value of the format generated for the `stack` property of a
+ * V8 error object, return a string that contains only stack frame information
+ * for frames that have relevance to the consumer.
+ *
+ * For example, given the following string value:
+ *
+ * ```
+ * Error
+ *     at inner (/home/ava/ex.js:7:12)
+ *     at /home/ava/ex.js:12:5
+ *     at outer (/home/ava/ex.js:13:4)
+ *     at Object.<anonymous> (/home/ava/ex.js:14:3)
+ *     at Module._compile (module.js:570:32)
+ *     at Object.Module._extensions..js (module.js:579:10)
+ *     at Module.load (module.js:487:32)
+ *     at tryModuleLoad (module.js:446:12)
+ *     at Function.Module._load (module.js:438:3)
+ *     at Module.runMain (module.js:604:10)
+ * ```
+ *
+ * ...this function returns the following string value:
+ *
+ * ```
+ * inner (/home/ava/ex.js:7:12)
+ * /home/ava/ex.js:12:5
+ * outer (/home/ava/ex.js:13:4)
+ * Object.<anonymous> (/home/ava/ex.js:14:3)
+ * Module._compile (module.js:570:32)
+ * Object.Module._extensions..js (module.js:579:10)
+ * Module.load (module.js:487:32)
+ * tryModuleLoad (module.js:446:12)
+ * Function.Module._load (module.js:438:3)
+ * Module.runMain (module.js:604:10)
+ * ```
+ */
+export default function beautifyStack(stack) {
+	if (!stack) {
+		return [];
+	}
+
+	return stackUtils.clean(stack)
+		.trim()
+		.split('\n')
+		.map(line => line.trim())
+		.filter(line => line !== '');
+}

github/codeql-action-v1/node_modules/ava/lib/reporters/colors.js

@@ -0,0 +1,42 @@
+import {chalk} from '../chalk.js';
+
+const colors = {
+	get log() {
+		return chalk.gray;
+	},
+	get title() {
+		return chalk.bold;
+	},
+	get error() {
+		return chalk.red;
+	},
+	get skip() {
+		return chalk.yellow;
+	},
+	get todo() {
+		return chalk.blue;
+	},
+	get pass() {
+		return chalk.green;
+	},
+	get duration() {
+		return chalk.gray.dim;
+	},
+	get errorSource() {
+		return chalk.gray;
+	},
+	get errorStack() {
+		return chalk.gray;
+	},
+	get errorStackInternal() {
+		return chalk.gray.dim;
+	},
+	get stack() {
+		return chalk.red;
+	},
+	get information() {
+		return chalk.magenta;
+	},
+};
+
+export default colors;

github/codeql-action-v1/node_modules/ava/lib/reporters/default.js

@@ -0,0 +1,673 @@
+import os from 'node:os';
+import path from 'node:path';
+import stream from 'node:stream';
+import {fileURLToPath} from 'node:url';
+
+import figures from 'figures';
+import indentString from 'indent-string';
+import plur from 'plur';
+import prettyMs from 'pretty-ms';
+import StackUtils from 'stack-utils';
+
+import {chalk} from '../chalk.js';
+import codeExcerpt from '../code-excerpt.js';
+
+import beautifyStack from './beautify-stack.js';
+import colors from './colors.js';
+import formatSerializedError from './format-serialized-error.js';
+import improperUsageMessage from './improper-usage-messages.js';
+import prefixTitle from './prefix-title.js';
+
+const nodeInternals = StackUtils.nodeInternals();
+
+class LineWriter extends stream.Writable {
+	constructor(dest) {
+		super();
+
+		this.dest = dest;
+		this.columns = dest.columns || 80;
+		this.lastLineIsEmpty = false;
+	}
+
+	_write(chunk, _, callback) {
+		this.dest.write(chunk);
+		callback();
+	}
+
+	writeLine(string) {
+		if (string) {
+			this.write(indentString(string, 2) + os.EOL);
+			this.lastLineIsEmpty = false;
+		} else {
+			this.write(os.EOL);
+			this.lastLineIsEmpty = true;
+		}
+	}
+
+	ensureEmptyLine() {
+		if (!this.lastLineIsEmpty) {
+			this.writeLine();
+		}
+	}
+}
+
+function manageCorking(stream) {
+	return {
+		decorateWriter(fn) {
+			return function (...args) {
+				stream.cork();
+				try {
+					return fn.apply(this, args);
+				} finally {
+					stream.uncork();
+				}
+			};
+		},
+	};
+}
+
+export default class Reporter {
+	constructor({
+		extensions,
+		reportStream,
+		stdStream,
+		projectDir,
+		watching,
+		durationThreshold,
+	}) {
+		this.extensions = extensions;
+		this.reportStream = reportStream;
+		this.stdStream = stdStream;
+		this.watching = watching;
+		this.relativeFile = file => {
+			if (file.startsWith('file://')) {
+				file = fileURLToPath(file);
+			}
+
+			return path.relative(projectDir, file);
+		};
+
+		const {decorateWriter} = manageCorking(this.reportStream);
+		this.consumeStateChange = decorateWriter(this.consumeStateChange);
+		this.endRun = decorateWriter(this.endRun);
+
+		this.durationThreshold = durationThreshold || 100;
+		this.lineWriter = new LineWriter(this.reportStream);
+
+		this.reset();
+	}
+
+	reset() {
+		if (this.removePreviousListener) {
+			this.removePreviousListener();
+		}
+
+		this.prefixTitle = (testFile, title) => title;
+
+		this.runningTestFiles = new Map();
+		this.filesWithMissingAvaImports = new Set();
+		this.filesWithoutDeclaredTests = new Set();
+		this.filesWithoutMatchedLineNumbers = new Set();
+
+		this.failures = [];
+		this.internalErrors = [];
+		this.knownFailures = [];
+		this.lineNumberErrors = [];
+		this.sharedWorkerErrors = [];
+		this.uncaughtExceptions = [];
+		this.unhandledRejections = [];
+
+		this.previousFailures = 0;
+
+		this.failFastEnabled = false;
+		this.lastLineIsEmpty = false;
+		this.matching = false;
+
+		this.removePreviousListener = null;
+		this.stats = null;
+	}
+
+	startRun(plan) {
+		if (plan.bailWithoutReporting) {
+			return;
+		}
+
+		this.reset();
+
+		this.failFastEnabled = plan.failFastEnabled;
+		this.matching = plan.matching;
+		this.previousFailures = plan.previousFailures;
+		this.emptyParallelRun = plan.status.emptyParallelRun;
+		this.selectionInsights = plan.status.selectionInsights;
+
+		if (this.watching || plan.files.length > 1) {
+			this.prefixTitle = (testFile, title) => prefixTitle(this.extensions, plan.filePathPrefix, testFile, title);
+		}
+
+		this.removePreviousListener = plan.status.on('stateChange', evt => {
+			this.consumeStateChange(evt);
+		});
+
+		if (this.watching && plan.runVector > 1) {
+			this.lineWriter.write(chalk.gray.dim('\u2500'.repeat(this.lineWriter.columns)) + os.EOL);
+		}
+
+		this.lineWriter.writeLine();
+	}
+
+	consumeStateChange(event) { // eslint-disable-line complexity
+		const fileStats = this.stats && event.testFile ? this.stats.byFile.get(event.testFile) : null;
+
+		switch (event.type) { // eslint-disable-line default-case
+			case 'hook-failed': {
+				this.failures.push(event);
+				this.writeTestSummary(event);
+				break;
+			}
+
+			case 'stats': {
+				this.stats = event.stats;
+				break;
+			}
+
+			case 'test-failed': {
+				this.failures.push(event);
+				this.writeTestSummary(event);
+				break;
+			}
+
+			case 'test-passed': {
+				if (event.knownFailing) {
+					this.knownFailures.push(event);
+				}
+
+				this.writeTestSummary(event);
+				break;
+			}
+
+			case 'timeout': {
+				this.lineWriter.writeLine(colors.error(`\n${figures.cross} Timed out while running tests`));
+				this.lineWriter.writeLine('');
+				this.writePendingTests(event);
+				break;
+			}
+
+			case 'interrupt': {
+				this.lineWriter.writeLine(colors.error(`\n${figures.cross} Exiting due to SIGINT`));
+				this.lineWriter.writeLine('');
+				this.writePendingTests(event);
+				break;
+			}
+
+			case 'internal-error': {
+				this.internalErrors.push(event);
+
+				if (event.testFile) {
+					this.write(colors.error(`${figures.cross} Internal error when running ${this.relativeFile(event.testFile)}`));
+				} else {
+					this.write(colors.error(`${figures.cross} Internal error`));
+				}
+
+				this.lineWriter.writeLine(colors.stack(event.err.summary));
+				this.lineWriter.writeLine(colors.errorStack(event.err.stack));
+				this.lineWriter.writeLine();
+				this.lineWriter.writeLine();
+
+				break;
+			}
+
+			case 'line-number-selection-error': {
+				this.lineNumberErrors.push(event);
+
+				this.write(colors.information(`${figures.warning} Could not parse ${this.relativeFile(event.testFile)} for line number selection`));
+				this.lineWriter.writeLine();
+				this.lineWriter.writeLine(colors.errorStack(event.err.stack));
+				this.lineWriter.writeLine();
+				break;
+			}
+
+			case 'missing-ava-import': {
+				this.filesWithMissingAvaImports.add(event.testFile);
+
+				this.write(colors.error(`${figures.cross} No tests found in ${this.relativeFile(event.testFile)}, make sure to import "ava" at the top of your test file`));
+				break;
+			}
+
+			case 'hook-finished': {
+				if (event.logs.length > 0) {
+					this.lineWriter.writeLine(`  ${this.prefixTitle(event.testFile, event.title)}`);
+					this.writeLogs(event);
+				}
+
+				break;
+			}
+
+			case 'selected-test': {
+				if (event.skip) {
+					this.lineWriter.writeLine(colors.skip(`- ${this.prefixTitle(event.testFile, event.title)}`));
+				} else if (event.todo) {
+					this.lineWriter.writeLine(colors.todo(`- ${this.prefixTitle(event.testFile, event.title)}`));
+				}
+
+				break;
+			}
+
+			case 'shared-worker-error': {
+				this.sharedWorkerErrors.push(event);
+
+				this.lineWriter.ensureEmptyLine();
+				this.lineWriter.writeLine(colors.error(`${figures.cross} Error in shared worker`));
+				this.lineWriter.writeLine();
+				this.writeErr(event);
+
+				break;
+			}
+
+			case 'uncaught-exception': {
+				this.uncaughtExceptions.push(event);
+
+				this.lineWriter.ensureEmptyLine();
+				this.lineWriter.writeLine(colors.title(`Uncaught exception in ${this.relativeFile(event.testFile)}`));
+				this.lineWriter.writeLine();
+				this.writeErr(event);
+
+				break;
+			}
+
+			case 'unhandled-rejection': {
+				this.unhandledRejections.push(event);
+
+				this.lineWriter.ensureEmptyLine();
+				this.lineWriter.writeLine(colors.title(`Unhandled rejection in ${this.relativeFile(event.testFile)}`));
+				this.lineWriter.writeLine();
+				this.writeErr(event);
+
+				break;
+			}
+
+			case 'worker-failed': {
+				if (fileStats.declaredTests === 0) {
+					this.filesWithoutDeclaredTests.add(event.testFile);
+				}
+
+				if (!this.filesWithMissingAvaImports.has(event.testFile)) {
+					if (event.err) {
+						this.lineWriter.writeLine(colors.error(`${figures.cross} ${this.relativeFile(event.testFile)} exited due to an error:`));
+						this.lineWriter.writeLine();
+						this.writeErr(event);
+					} else if (event.nonZeroExitCode) {
+						this.lineWriter.writeLine(colors.error(`${figures.cross} ${this.relativeFile(event.testFile)} exited with a non-zero exit code: ${event.nonZeroExitCode}`));
+					} else {
+						this.lineWriter.writeLine(colors.error(`${figures.cross} ${this.relativeFile(event.testFile)} exited due to ${event.signal}`));
+					}
+				}
+
+				break;
+			}
+
+			case 'worker-finished': {
+				if (!event.forcedExit && !this.filesWithMissingAvaImports.has(event.testFile)) {
+					if (fileStats.declaredTests === 0) {
+						this.filesWithoutDeclaredTests.add(event.testFile);
+
+						this.write(colors.error(`${figures.cross} No tests found in ${this.relativeFile(event.testFile)}`));
+					} else if (fileStats.selectingLines && fileStats.selectedTests === 0) {
+						this.filesWithoutMatchedLineNumbers.add(event.testFile);
+
+						this.lineWriter.writeLine(colors.error(`${figures.cross} Line numbers for ${this.relativeFile(event.testFile)} did not match any tests`));
+					} else if (!this.failFastEnabled && fileStats.remainingTests > 0) {
+						this.lineWriter.writeLine(colors.error(`${figures.cross} ${fileStats.remainingTests} ${plur('test', fileStats.remainingTests)} remaining in ${this.relativeFile(event.testFile)}`));
+					}
+				}
+
+				break;
+			}
+
+			case 'worker-stderr': {
+				this.stdStream.write(event.chunk);
+				// If the chunk does not end with a linebreak, *forcibly* write one to
+				// ensure it remains visible in the TTY.
+				// Tests cannot assume their standard output is not interrupted. Indeed
+				// we multiplex stdout and stderr into a single stream. However as
+				// long as stdStream is different from reportStream users can read
+				// their original output by redirecting the streams.
+				if (event.chunk[event.chunk.length - 1] !== 0x0A) {
+					this.reportStream.write(os.EOL);
+				}
+
+				break;
+			}
+
+			case 'worker-stdout': {
+				this.stdStream.write(event.chunk);
+				// If the chunk does not end with a linebreak, *forcibly* write one to
+				// ensure it remains visible in the TTY.
+				// Tests cannot assume their standard output is not interrupted. Indeed
+				// we multiplex stdout and stderr into a single stream. However as
+				// long as stdStream is different from reportStream users can read
+				// their original output by redirecting the streams.
+				if (event.chunk[event.chunk.length - 1] !== 0x0A) {
+					this.reportStream.write(os.EOL);
+				}
+			}
+		}
+	}
+
+	writePendingTests(evt) {
+		for (const [file, testsInFile] of evt.pendingTests) {
+			if (testsInFile.size === 0) {
+				continue;
+			}
+
+			this.lineWriter.writeLine(`${testsInFile.size} tests were pending in ${this.relativeFile(file)}\n`);
+			for (const title of testsInFile) {
+				this.lineWriter.writeLine(`${figures.circleDotted} ${this.prefixTitle(file, title)}`);
+			}
+
+			this.lineWriter.writeLine('');
+		}
+	}
+
+	write(string) {
+		this.lineWriter.writeLine(string);
+	}
+
+	writeWithCounts(string) {
+		if (!this.stats) {
+			return this.lineWriter.writeLine(string);
+		}
+
+		string = string || '';
+		if (string !== '') {
+			string += os.EOL;
+		}
+
+		let firstLinePostfix = this.watching ? ' ' + chalk.gray.dim('[' + new Date().toLocaleTimeString('en-US', {hour12: false}) + ']') : '';
+
+		if (this.stats.passedTests > 0) {
+			string += os.EOL + colors.pass(`${this.stats.passedTests} passed`) + firstLinePostfix;
+			firstLinePostfix = '';
+		}
+
+		if (this.stats.passedKnownFailingTests > 0) {
+			string += os.EOL + colors.error(`${this.stats.passedKnownFailingTests} ${plur('known failure', this.stats.passedKnownFailingTests)}`);
+		}
+
+		if (this.stats.failedHooks > 0) {
+			string += os.EOL + colors.error(`${this.stats.failedHooks} ${plur('hook', this.stats.failedHooks)} failed`) + firstLinePostfix;
+			firstLinePostfix = '';
+		}
+
+		if (this.stats.failedTests > 0) {
+			string += os.EOL + colors.error(`${this.stats.failedTests} ${plur('test', this.stats.failedTests)} failed`) + firstLinePostfix;
+			firstLinePostfix = '';
+		}
+
+		if (this.stats.skippedTests > 0) {
+			string += os.EOL + colors.skip(`${this.stats.skippedTests} skipped`);
+		}
+
+		if (this.stats.todoTests > 0) {
+			string += os.EOL + colors.todo(`${this.stats.todoTests} todo`);
+		}
+
+		this.lineWriter.writeLine(string);
+	}
+
+	writeErr(event) {
+		if (event.err.name === 'TSError' && event.err.object && event.err.object.diagnosticText) {
+			this.lineWriter.writeLine(colors.errorStack(event.err.object.diagnosticText));
+			this.lineWriter.writeLine();
+			return;
+		}
+
+		if (event.err.source) {
+			this.lineWriter.writeLine(colors.errorSource(`${this.relativeFile(event.err.source.file)}:${event.err.source.line}`));
+			const excerpt = codeExcerpt(event.err.source, {maxWidth: this.reportStream.columns - 2});
+			if (excerpt) {
+				this.lineWriter.writeLine();
+				this.lineWriter.writeLine(excerpt);
+				this.lineWriter.writeLine();
+			}
+		}
+
+		if (event.err.avaAssertionError) {
+			const result = formatSerializedError(event.err);
+			if (result.printMessage) {
+				this.lineWriter.writeLine(event.err.message);
+				this.lineWriter.writeLine();
+			}
+
+			if (result.formatted) {
+				this.lineWriter.writeLine(result.formatted);
+				this.lineWriter.writeLine();
+			}
+
+			const message = improperUsageMessage(event.err);
+			if (message) {
+				this.lineWriter.writeLine(message);
+				this.lineWriter.writeLine();
+			}
+		} else if (event.err.nonErrorObject) {
+			this.lineWriter.writeLine(event.err.formatted);
+			this.lineWriter.writeLine();
+		} else {
+			this.lineWriter.writeLine(event.err.summary);
+			this.lineWriter.writeLine();
+		}
+
+		const formatted = this.formatErrorStack(event.err);
+		if (formatted.length > 0) {
+			this.lineWriter.writeLine(formatted.join('\n'));
+			this.lineWriter.writeLine();
+		}
+	}
+
+	formatErrorStack(error) {
+		if (!error.stack) {
+			return [];
+		}
+
+		if (error.shouldBeautifyStack) {
+			return beautifyStack(error.stack).map(line => {
+				if (nodeInternals.some(internal => internal.test(line))) {
+					return colors.errorStackInternal(`${figures.pointerSmall} ${line}`);
+				}
+
+				return colors.errorStack(`${figures.pointerSmall} ${line}`);
+			});
+		}
+
+		return [error.stack];
+	}
+
+	writeLogs(event, surroundLines) {
+		if (event.logs && event.logs.length > 0) {
+			if (surroundLines) {
+				this.lineWriter.writeLine();
+			}
+
+			for (const log of event.logs) {
+				const logLines = indentString(colors.log(log), 4);
+				const logLinesWithLeadingFigure = logLines.replace(/^ {4}/, `  ${colors.information(figures.info)} `);
+				this.lineWriter.writeLine(logLinesWithLeadingFigure);
+			}
+
+			if (surroundLines) {
+				this.lineWriter.writeLine();
+			}
+
+			return true;
+		}
+
+		return false;
+	}
+
+	writeTestSummary(event) {
+		if (event.type === 'hook-failed' || event.type === 'test-failed') {
+			this.write(`${colors.error(figures.cross)} ${this.prefixTitle(event.testFile, event.title)} ${colors.error(event.err.message)}`);
+		} else if (event.knownFailing) {
+			this.write(`${colors.error(figures.tick)} ${colors.error(this.prefixTitle(event.testFile, event.title))}`);
+		} else {
+			const duration = event.duration > this.durationThreshold ? colors.duration(' (' + prettyMs(event.duration) + ')') : '';
+			this.write(`${colors.pass(figures.tick)} ${this.prefixTitle(event.testFile, event.title)}${duration}`);
+		}
+
+		this.writeLogs(event);
+	}
+
+	writeFailure(event) {
+		this.lineWriter.writeLine(colors.title(this.prefixTitle(event.testFile, event.title)));
+
+		if (!event.logs || event.logs.length === 0) {
+			this.lineWriter.writeLine();
+		}
+
+		this.writeErr(event);
+	}
+
+	endRun() {// eslint-disable-line complexity
+		let firstLinePostfix = this.watching ? ` ${chalk.gray.dim(`[${new Date().toLocaleTimeString('en-US', {hour12: false})}]`)}` : '';
+
+		if (this.emptyParallelRun) {
+			this.lineWriter.writeLine('No files tested in this parallel run');
+			this.lineWriter.writeLine();
+			return;
+		}
+
+		if (this.selectionInsights.ignoredFilterPatternFiles.length > 0) {
+			this.write(colors.information(`${figures.warning} Paths for additional test files were disregarded:`));
+			this.lineWriter.writeLine();
+			for (const pattern of this.selectionInsights.ignoredFilterPatternFiles) {
+				this.lineWriter.writeLine(chalk.magenta(`* ${pattern}`));
+			}
+
+			this.lineWriter.writeLine();
+			this.write(colors.information('Files starting with underscores are never treated as test files.'));
+			this.write(colors.information('Files handled by @ava/typescript can only be selected if your configuration already selects them.'));
+			this.lineWriter.writeLine();
+		}
+
+		if (this.selectionInsights.selectionCount === 0) {
+			if (this.selectionInsights.testFileCount === 0) {
+				this.lineWriter.writeLine(colors.error(`${figures.cross} Couldn’t find any files to test` + firstLinePostfix));
+			} else {
+				const {testFileCount: count} = this.selectionInsights;
+				this.lineWriter.writeLine(colors.error(`${figures.cross} Based on your configuration, ${count} test ${plur('file was', 'files were', count)} found, but did not match the CLI arguments:` + firstLinePostfix));
+				this.lineWriter.writeLine();
+				for (const {pattern} of this.selectionInsights.filter) {
+					this.lineWriter.writeLine(colors.error(`* ${pattern}`));
+				}
+			}
+
+			this.lineWriter.writeLine();
+			return;
+		}
+
+		if (this.matching && this.stats.selectedTests === 0) {
+			this.lineWriter.writeLine(colors.error(`${figures.cross} Couldn’t find any matching tests` + firstLinePostfix));
+			this.lineWriter.writeLine();
+			return;
+		}
+
+		this.lineWriter.writeLine(colors.log(figures.line));
+		this.lineWriter.writeLine();
+
+		if (this.failures.length > 0) {
+			const lastFailure = this.failures[this.failures.length - 1];
+			for (const event of this.failures) {
+				this.writeFailure(event);
+				if (event !== lastFailure) {
+					this.lineWriter.writeLine();
+					this.lineWriter.writeLine();
+				}
+			}
+
+			this.lineWriter.writeLine(colors.log(figures.line));
+			this.lineWriter.writeLine();
+		}
+
+		if (this.failFastEnabled && (this.stats.remainingTests > 0 || this.stats.files > this.stats.finishedWorkers)) {
+			let remaining = '';
+			if (this.stats.remainingTests > 0) {
+				remaining += `At least ${this.stats.remainingTests} ${plur('test was', 'tests were', this.stats.remainingTests)} skipped`;
+				if (this.stats.files > this.stats.finishedWorkers) {
+					remaining += ', as well as ';
+				}
+			}
+
+			if (this.stats.files > this.stats.finishedWorkers) {
+				const skippedFileCount = this.stats.files - this.stats.finishedWorkers;
+				remaining += `${skippedFileCount} ${plur('test file', 'test files', skippedFileCount)}`;
+				if (this.stats.remainingTests === 0) {
+					remaining += ` ${plur('was', 'were', skippedFileCount)} skipped`;
+				}
+			}
+
+			this.lineWriter.writeLine(colors.information(`\`--fail-fast\` is on. ${remaining}.`));
+			this.lineWriter.writeLine();
+		}
+
+		if (this.stats.parallelRuns) {
+			const {
+				currentFileCount,
+				currentIndex,
+				totalRuns,
+			} = this.stats.parallelRuns;
+			this.lineWriter.writeLine(colors.information(`Ran ${currentFileCount} test ${plur('file', currentFileCount)} out of ${this.stats.files} for job ${currentIndex + 1} of ${totalRuns}`));
+			this.lineWriter.writeLine();
+		}
+
+		if (this.stats.failedHooks > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.stats.failedHooks} ${plur('hook', this.stats.failedHooks)} failed`) + firstLinePostfix);
+			firstLinePostfix = '';
+		}
+
+		if (this.stats.failedTests > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.stats.failedTests} ${plur('test', this.stats.failedTests)} failed`) + firstLinePostfix);
+			firstLinePostfix = '';
+		}
+
+		if (
+			this.stats.failedHooks === 0
+			&& this.stats.failedTests === 0
+			&& this.stats.passedTests > 0
+		) {
+			this.lineWriter.writeLine(colors.pass(`${this.stats.passedTests} ${plur('test', this.stats.passedTests)} passed`) + firstLinePostfix,
+			);
+			firstLinePostfix = '';
+		}
+
+		if (this.stats.passedKnownFailingTests > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.stats.passedKnownFailingTests} ${plur('known failure', this.stats.passedKnownFailingTests)}`));
+		}
+
+		if (this.stats.skippedTests > 0) {
+			this.lineWriter.writeLine(colors.skip(`${this.stats.skippedTests} ${plur('test', this.stats.skippedTests)} skipped`));
+		}
+
+		if (this.stats.todoTests > 0) {
+			this.lineWriter.writeLine(colors.todo(`${this.stats.todoTests} ${plur('test', this.stats.todoTests)} todo`));
+		}
+
+		if (this.stats.unhandledRejections > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.stats.unhandledRejections} unhandled ${plur('rejection', this.stats.unhandledRejections)}`));
+		}
+
+		if (this.stats.uncaughtExceptions > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.stats.uncaughtExceptions} uncaught ${plur('exception', this.stats.uncaughtExceptions)}`));
+		}
+
+		if (this.stats.timeouts > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.stats.timeouts} ${plur('test', this.stats.timeouts)} remained pending after a timeout`));
+		}
+
+		if (this.previousFailures > 0) {
+			this.lineWriter.writeLine(colors.error(`${this.previousFailures} previous ${plur('failure', this.previousFailures)} in test files that were not rerun`));
+		}
+
+		if (this.watching) {
+			this.lineWriter.writeLine();
+		}
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/reporters/format-serialized-error.js

@@ -0,0 +1,16 @@
+export default function formatSerializedError(error) {
+	const printMessage = error.values.length === 0
+		? Boolean(error.message)
+		: !error.values[0].label.startsWith(error.message);
+
+	if (error.values.length === 0) {
+		return {formatted: null, printMessage};
+	}
+
+	let formatted = '';
+	for (const value of error.values) {
+		formatted += `${value.label}\n\n${value.formatted}\n\n`;
+	}
+
+	return {formatted: formatted.trim(), printMessage};
+}

github/codeql-action-v1/node_modules/ava/lib/reporters/improper-usage-messages.js

@@ -0,0 +1,54 @@
+import {chalk} from '../chalk.js';
+import pkg from '../pkg.cjs';
+
+export default function buildMessage(error) {
+	if (!error.improperUsage) {
+		return null;
+	}
+
+	const {assertion} = error;
+	if (assertion === 'throws' || assertion === 'notThrows') {
+		return `Try wrapping the first argument to \`t.${assertion}()\` in a function:
+
+  ${chalk.cyan(`t.${assertion}(() => { `)}${chalk.grey('/* your code here */')}${chalk.cyan(' })')}
+
+Visit the following URL for more details:
+
+  ${chalk.blue.underline(`https://github.com/avajs/ava/blob/v${pkg.version}/docs/03-assertions.md#throwsfn-expected-message`)}`;
+	}
+
+	if (assertion === 'snapshot') {
+		const {name, snapPath} = error.improperUsage;
+
+		if (name === 'ChecksumError' || name === 'InvalidSnapshotError') {
+			return `The snapshot file is corrupted.
+
+File path: ${chalk.yellow(snapPath)}
+
+Please run AVA again with the ${chalk.cyan('--update-snapshots')} flag to recreate it.`;
+		}
+
+		if (name === 'LegacyError') {
+			return `The snapshot file was created with AVA 0.19. It’s not supported by this AVA version.
+
+File path: ${chalk.yellow(snapPath)}
+
+Please run AVA again with the ${chalk.cyan('--update-snapshots')} flag to upgrade.`;
+		}
+
+		if (name === 'VersionMismatchError') {
+			const {snapVersion, expectedVersion} = error.improperUsage;
+			const upgradeMessage = snapVersion < expectedVersion
+				? `Please run AVA again with the ${chalk.cyan('--update-snapshots')} flag to upgrade.`
+				: 'You should upgrade AVA.';
+
+			return `The snapshot file is v${snapVersion}, but only v${expectedVersion} is supported.
+
+File path: ${chalk.yellow(snapPath)}
+
+${upgradeMessage}`;
+		}
+	}
+
+	return null;
+}

github/codeql-action-v1/node_modules/ava/lib/reporters/prefix-title.js

@@ -0,0 +1,23 @@
+import path from 'node:path';
+
+import figures from 'figures';
+
+import {chalk} from '../chalk.js';
+
+const SEPARATOR = ' ' + chalk.gray.dim(figures.pointerSmall) + ' ';
+
+export default function prefixTitle(extensions, base, file, title) {
+	const parts = file
+		// Only replace base if it is found at the start of the path
+		.replace(base, (match, offset) => offset === 0 ? '' : match)
+		.split(path.sep)
+		.filter(p => p !== '__tests__');
+
+	const filename = parts.pop()
+		.replace(/\.spec\./, '.')
+		.replace(/\.test\./, '.')
+		.replace(/test-/, '')
+		.replace(new RegExp(`.(${extensions.join('|')})$`), '');
+
+	return [...parts, filename, title].join(SEPARATOR);
+}

github/codeql-action-v1/node_modules/ava/lib/reporters/tap.js

@@ -0,0 +1,215 @@
+import os from 'node:os';
+import path from 'node:path';
+
+import indentString from 'indent-string';
+import plur from 'plur';
+import stripAnsi from 'strip-ansi';
+import * as supertap from 'supertap';
+
+import beautifyStack from './beautify-stack.js';
+import prefixTitle from './prefix-title.js';
+
+function dumpError(error) {
+	const object = {...error.object};
+	if (error.name) {
+		object.name = error.name;
+	}
+
+	if (error.message) {
+		object.message = error.message;
+	}
+
+	if (error.avaAssertionError) {
+		if (error.assertion) {
+			object.assertion = error.assertion;
+		}
+
+		if (error.operator) {
+			object.operator = error.operator;
+		}
+
+		if (error.values.length > 0) {
+			object.values = Object.fromEntries(error.values.map(({label, formatted}) => [label, stripAnsi(formatted)]));
+		}
+	}
+
+	if (error.nonErrorObject) {
+		object.message = 'Non-error object';
+		object.formatted = stripAnsi(error.formatted);
+	}
+
+	if (error.stack) {
+		object.at = error.shouldBeautifyStack ? beautifyStack(error.stack).join('\n') : error.stack;
+	}
+
+	return object;
+}
+
+export default class TapReporter {
+	constructor(options) {
+		this.i = 0;
+
+		this.extensions = options.extensions;
+		this.stdStream = options.stdStream;
+		this.reportStream = options.reportStream;
+
+		this.crashCount = 0;
+		this.filesWithMissingAvaImports = new Set();
+		this.prefixTitle = (testFile, title) => title;
+		this.relativeFile = file => path.relative(options.projectDir, file);
+		this.stats = null;
+	}
+
+	startRun(plan) {
+		if (plan.files.length > 1) {
+			this.prefixTitle = (testFile, title) => prefixTitle(this.extensions, plan.filePathPrefix, testFile, title);
+		}
+
+		plan.status.on('stateChange', evt => this.consumeStateChange(evt));
+
+		this.reportStream.write(supertap.start() + os.EOL);
+	}
+
+	endRun() {
+		if (this.stats) {
+			this.reportStream.write(supertap.finish({
+				crashed: this.crashCount,
+				failed: this.stats.failedTests + this.stats.remainingTests,
+				passed: this.stats.passedTests + this.stats.passedKnownFailingTests,
+				skipped: this.stats.skippedTests,
+				todo: this.stats.todoTests,
+			}) + os.EOL);
+
+			if (this.stats.parallelRuns) {
+				const {currentFileCount, currentIndex, totalRuns} = this.stats.parallelRuns;
+				this.reportStream.write(`# Ran ${currentFileCount} test ${plur('file', currentFileCount)} out of ${this.stats.files} for job ${currentIndex + 1} of ${totalRuns}` + os.EOL + os.EOL);
+			}
+		} else {
+			this.reportStream.write(supertap.finish({
+				crashed: this.crashCount,
+				failed: 0,
+				passed: 0,
+				skipped: 0,
+				todo: 0,
+			}) + os.EOL);
+		}
+	}
+
+	writeTest(evt, flags) {
+		this.reportStream.write(supertap.test(this.prefixTitle(evt.testFile, evt.title), {
+			comment: evt.logs,
+			error: evt.err ? dumpError(evt.err) : null,
+			index: ++this.i,
+			passed: flags.passed,
+			skip: flags.skip,
+			todo: flags.todo,
+		}) + os.EOL);
+	}
+
+	writeCrash(evt, title) {
+		this.crashCount++;
+		this.reportStream.write(supertap.test(title || evt.err.summary || evt.type, {
+			comment: evt.logs,
+			error: evt.err ? dumpError(evt.err) : null,
+			index: ++this.i,
+			passed: false,
+			skip: false,
+			todo: false,
+		}) + os.EOL);
+	}
+
+	writeComment(evt, {title = this.prefixTitle(evt.testFile, evt.title)}) {
+		this.reportStream.write(`# ${stripAnsi(title)}${os.EOL}`);
+		if (evt.logs) {
+			for (const log of evt.logs) {
+				const logLines = indentString(log, 4).replace(/^ {4}/gm, '#   ');
+				this.reportStream.write(`${logLines}${os.EOL}`);
+			}
+		}
+	}
+
+	writeTimeout(evt) {
+		const error = new Error(`Exited because no new tests completed within the last ${evt.period}ms of inactivity`);
+
+		for (const [testFile, tests] of evt.pendingTests) {
+			for (const title of tests) {
+				this.writeTest({testFile, title, err: error}, {passed: false, todo: false, skip: false});
+			}
+		}
+	}
+
+	consumeStateChange(evt) { // eslint-disable-line complexity
+		const fileStats = this.stats && evt.testFile ? this.stats.byFile.get(evt.testFile) : null;
+
+		switch (evt.type) {
+			case 'declared-test':
+				// Ignore
+				break;
+			case 'hook-failed':
+				this.writeTest(evt, {passed: false, todo: false, skip: false});
+				break;
+			case 'hook-finished':
+				this.writeComment(evt, {});
+				break;
+			case 'internal-error':
+				this.writeCrash(evt);
+				break;
+			case 'missing-ava-import':
+				this.filesWithMissingAvaImports.add(evt.testFile);
+				this.writeCrash(evt, `No tests found in ${this.relativeFile(evt.testFile)}, make sure to import "ava" at the top of your test file`);
+				break;
+			case 'selected-test':
+				if (evt.skip) {
+					this.writeTest(evt, {passed: true, todo: false, skip: true});
+				} else if (evt.todo) {
+					this.writeTest(evt, {passed: false, todo: true, skip: false});
+				}
+
+				break;
+			case 'stats':
+				this.stats = evt.stats;
+				break;
+			case 'test-failed':
+				this.writeTest(evt, {passed: false, todo: false, skip: false});
+				break;
+			case 'test-passed':
+				this.writeTest(evt, {passed: true, todo: false, skip: false});
+				break;
+			case 'timeout':
+				this.writeTimeout(evt);
+				break;
+			case 'uncaught-exception':
+				this.writeCrash(evt);
+				break;
+			case 'unhandled-rejection':
+				this.writeCrash(evt);
+				break;
+			case 'worker-failed':
+				if (!this.filesWithMissingAvaImports.has(evt.testFile)) {
+					if (evt.nonZeroExitCode) {
+						this.writeCrash(evt, `${this.relativeFile(evt.testFile)} exited with a non-zero exit code: ${evt.nonZeroExitCode}`);
+					} else {
+						this.writeCrash(evt, `${this.relativeFile(evt.testFile)} exited due to ${evt.signal}`);
+					}
+				}
+
+				break;
+			case 'worker-finished':
+				if (!evt.forcedExit && !this.filesWithMissingAvaImports.has(evt.testFile)) {
+					if (fileStats.declaredTests === 0) {
+						this.writeCrash(evt, `No tests found in ${this.relativeFile(evt.testFile)}`);
+					} else if (!this.failFastEnabled && fileStats.remainingTests > 0) {
+						this.writeComment(evt, {title: `${fileStats.remainingTests} ${plur('test', fileStats.remainingTests)} remaining in ${this.relativeFile(evt.testFile)}`});
+					}
+				}
+
+				break;
+			case 'worker-stderr':
+			case 'worker-stdout':
+				this.stdStream.write(evt.chunk);
+				break;
+			default:
+				break;
+		}
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/run-status.js

@@ -0,0 +1,208 @@
+import v8 from 'node:v8';
+
+import Emittery from 'emittery';
+
+const copyStats = stats => v8.deserialize(v8.serialize(stats));
+
+export default class RunStatus extends Emittery {
+	constructor(files, parallelRuns, selectionInsights) {
+		super();
+
+		this.pendingTests = new Map();
+
+		this.emptyParallelRun = parallelRuns
+			&& parallelRuns.currentFileCount === 0
+			&& parallelRuns.totalRuns > 1
+			&& files > 0;
+
+		this.selectionInsights = selectionInsights;
+
+		this.stats = {
+			byFile: new Map(),
+			declaredTests: 0,
+			failedHooks: 0,
+			failedTests: 0,
+			failedWorkers: 0,
+			files,
+			parallelRuns,
+			finishedWorkers: 0,
+			internalErrors: 0,
+			remainingTests: 0,
+			passedKnownFailingTests: 0,
+			passedTests: 0,
+			selectedTests: 0,
+			sharedWorkerErrors: 0,
+			skippedTests: 0,
+			timeouts: 0,
+			todoTests: 0,
+			uncaughtExceptions: 0,
+			unhandledRejections: 0,
+		};
+	}
+
+	observeWorker(worker, testFile, stats) {
+		this.stats.byFile.set(testFile, {
+			declaredTests: 0,
+			failedHooks: 0,
+			failedTests: 0,
+			internalErrors: 0,
+			remainingTests: 0,
+			passedKnownFailingTests: 0,
+			passedTests: 0,
+			selectedTests: 0,
+			selectingLines: false,
+			skippedTests: 0,
+			todoTests: 0,
+			uncaughtExceptions: 0,
+			unhandledRejections: 0,
+			...stats,
+		});
+
+		this.pendingTests.set(testFile, new Set());
+		worker.onStateChange(data => this.emitStateChange(data));
+	}
+
+	emitStateChange(event) {
+		const {stats} = this;
+		const fileStats = stats.byFile.get(event.testFile);
+
+		let changedStats = true;
+		switch (event.type) {
+			case 'declared-test':
+				stats.declaredTests++;
+				fileStats.declaredTests++;
+				break;
+			case 'hook-failed':
+				stats.failedHooks++;
+				fileStats.failedHooks++;
+				break;
+			case 'internal-error':
+				stats.internalErrors++;
+				if (event.testFile) {
+					fileStats.internalErrors++;
+				}
+
+				break;
+			case 'selected-test':
+				stats.selectedTests++;
+				fileStats.selectedTests++;
+				if (event.skip) {
+					stats.skippedTests++;
+					fileStats.skippedTests++;
+				} else if (event.todo) {
+					stats.todoTests++;
+					fileStats.todoTests++;
+				} else {
+					stats.remainingTests++;
+					fileStats.remainingTests++;
+					this.addPendingTest(event);
+				}
+
+				break;
+			case 'shared-worker-error':
+				stats.sharedWorkerErrors++;
+				break;
+			case 'test-failed':
+				stats.failedTests++;
+				fileStats.failedTests++;
+				stats.remainingTests--;
+				fileStats.remainingTests--;
+				this.removePendingTest(event);
+				break;
+			case 'test-passed':
+				if (event.knownFailing) {
+					stats.passedKnownFailingTests++;
+					fileStats.passedKnownFailingTests++;
+				} else {
+					stats.passedTests++;
+					fileStats.passedTests++;
+				}
+
+				stats.remainingTests--;
+				fileStats.remainingTests--;
+				this.removePendingTest(event);
+				break;
+			case 'timeout':
+				event.pendingTests = this.pendingTests;
+				this.pendingTests = new Map();
+				for (const testsInFile of event.pendingTests.values()) {
+					stats.timeouts += testsInFile.size;
+				}
+
+				break;
+			case 'interrupt':
+				event.pendingTests = this.pendingTests;
+				this.pendingTests = new Map();
+				break;
+			case 'uncaught-exception':
+				stats.uncaughtExceptions++;
+				fileStats.uncaughtExceptions++;
+				break;
+			case 'unhandled-rejection':
+				stats.unhandledRejections++;
+				fileStats.unhandledRejections++;
+				break;
+			case 'worker-failed':
+				stats.failedWorkers++;
+				break;
+			case 'worker-finished':
+				stats.finishedWorkers++;
+				break;
+			default:
+				changedStats = false;
+				break;
+		}
+
+		if (changedStats) {
+			this.emit('stateChange', {type: 'stats', stats: copyStats(stats)});
+		}
+
+		this.emit('stateChange', event);
+	}
+
+	suggestExitCode(circumstances) {
+		if (this.emptyParallelRun) {
+			return 0;
+		}
+
+		if (circumstances.matching && this.stats.selectedTests === 0) {
+			return 1;
+		}
+
+		if (
+			this.stats.declaredTests === 0
+			|| this.stats.internalErrors > 0
+			|| this.stats.failedHooks > 0
+			|| this.stats.failedTests > 0
+			|| this.stats.failedWorkers > 0
+			|| this.stats.sharedWorkerErrors > 0
+			|| this.stats.timeouts > 0
+			|| this.stats.uncaughtExceptions > 0
+			|| this.stats.unhandledRejections > 0
+		) {
+			return 1;
+		}
+
+		if ([...this.stats.byFile.values()].some(stats => stats.selectingLines && stats.selectedTests === 0)) {
+			return 1;
+		}
+
+		return 0;
+	}
+
+	addPendingTest(event) {
+		if (this.pendingTests.has(event.testFile)) {
+			this.pendingTests.get(event.testFile).add(event.title);
+		}
+	}
+
+	removePendingTest(event) {
+		if (this.pendingTests.has(event.testFile)) {
+			this.pendingTests.get(event.testFile).delete(event.title);
+		}
+	}
+
+	getFailedTestFiles() {
+		return [...this.stats.byFile].filter(statByFile => statByFile[1].failedTests).map(statByFile => statByFile[0]);
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/runner.js

@@ -0,0 +1,552 @@
+import process from 'node:process';
+import {pathToFileURL} from 'node:url';
+
+import Emittery from 'emittery';
+import {matcher} from 'matcher';
+
+import ContextRef from './context-ref.js';
+import createChain from './create-chain.js';
+import parseTestArgs from './parse-test-args.js';
+import serializeError from './serialize-error.js';
+import {load as loadSnapshots, determineSnapshotDir} from './snapshot-manager.js';
+import Runnable from './test.js';
+import {waitForReady} from './worker/state.cjs';
+
+const makeFileURL = file => file.startsWith('file://') ? file : pathToFileURL(file).toString();
+export default class Runner extends Emittery {
+	constructor(options = {}) {
+		super();
+
+		this.experiments = options.experiments || {};
+		this.failFast = options.failFast === true;
+		this.failWithoutAssertions = options.failWithoutAssertions !== false;
+		this.file = options.file;
+		this.checkSelectedByLineNumbers = options.checkSelectedByLineNumbers;
+		this.match = options.match || [];
+		this.projectDir = options.projectDir;
+		this.recordNewSnapshots = options.recordNewSnapshots === true;
+		this.runOnlyExclusive = options.runOnlyExclusive === true;
+		this.serial = options.serial === true;
+		this.snapshotDir = options.snapshotDir;
+		this.updateSnapshots = options.updateSnapshots;
+
+		this.activeRunnables = new Set();
+		this.boundCompareTestSnapshot = this.compareTestSnapshot.bind(this);
+		this.boundSkipSnapshot = this.skipSnapshot.bind(this);
+		this.interrupted = false;
+
+		this.nextTaskIndex = 0;
+		this.tasks = {
+			after: [],
+			afterAlways: [],
+			afterEach: [],
+			afterEachAlways: [],
+			before: [],
+			beforeEach: [],
+			concurrent: [],
+			serial: [],
+			todo: [],
+		};
+		this.waitForReady = waitForReady;
+
+		const uniqueTestTitles = new Set();
+		this.registerUniqueTitle = title => {
+			if (uniqueTestTitles.has(title)) {
+				return false;
+			}
+
+			uniqueTestTitles.add(title);
+			return true;
+		};
+
+		this.notifyTimeoutUpdate = timeoutMs => {
+			this.emit('stateChange', {
+				type: 'test-timeout-configured',
+				period: timeoutMs,
+			});
+		};
+
+		let hasStarted = false;
+		let scheduledStart = false;
+		const meta = Object.freeze({
+			file: makeFileURL(options.file),
+			get snapshotDirectory() {
+				const {file, snapshotDir: fixedLocation, projectDir} = options;
+				return makeFileURL(determineSnapshotDir({file, fixedLocation, projectDir}));
+			},
+		});
+		this.chain = createChain((metadata, testArgs) => { // eslint-disable-line complexity
+			if (hasStarted) {
+				throw new Error('All tests and hooks must be declared synchronously in your test file, and cannot be nested within other tests or hooks.');
+			}
+
+			if (!scheduledStart) {
+				scheduledStart = true;
+				process.nextTick(() => {
+					hasStarted = true;
+					this.start();
+				});
+			}
+
+			metadata.taskIndex = this.nextTaskIndex++;
+
+			const {args, implementation, title} = parseTestArgs(testArgs);
+
+			if (this.checkSelectedByLineNumbers) {
+				metadata.selected = this.checkSelectedByLineNumbers();
+			}
+
+			if (metadata.todo) {
+				if (implementation) {
+					throw new TypeError('`todo` tests are not allowed to have an implementation. Use `test.skip()` for tests with an implementation.');
+				}
+
+				if (!title.raw) { // Either undefined or a string.
+					throw new TypeError('`todo` tests require a title');
+				}
+
+				if (!this.registerUniqueTitle(title.value)) {
+					throw new Error(`Duplicate test title: ${title.value}`);
+				}
+
+				// --match selects TODO tests.
+				if (this.match.length > 0 && matcher(title.value, this.match).length === 1) {
+					metadata.exclusive = true;
+					this.runOnlyExclusive = true;
+				}
+
+				this.tasks.todo.push({title: title.value, metadata});
+				this.emit('stateChange', {
+					type: 'declared-test',
+					title: title.value,
+					knownFailing: false,
+					todo: true,
+				});
+			} else {
+				if (!implementation) {
+					throw new TypeError('Expected an implementation. Use `test.todo()` for tests without an implementation.');
+				}
+
+				if (Array.isArray(implementation)) {
+					throw new TypeError('AVA 4 no longer supports multiple implementations.');
+				}
+
+				if (title.isSet && !title.isValid) {
+					throw new TypeError('Test & hook titles must be strings');
+				}
+
+				let fallbackTitle = title.value;
+				if (title.isEmpty) {
+					if (metadata.type === 'test') {
+						throw new TypeError('Tests must have a title');
+					} else if (metadata.always) {
+						fallbackTitle = `${metadata.type}.always hook`;
+					} else {
+						fallbackTitle = `${metadata.type} hook`;
+					}
+				}
+
+				if (metadata.type === 'test' && !this.registerUniqueTitle(title.value)) {
+					throw new Error(`Duplicate test title: ${title.value}`);
+				}
+
+				const task = {
+					title: title.value || fallbackTitle,
+					implementation,
+					args,
+					metadata: {...metadata},
+				};
+
+				if (metadata.type === 'test') {
+					if (this.match.length > 0) {
+						// --match overrides .only()
+						task.metadata.exclusive = matcher(title.value, this.match).length === 1;
+					}
+
+					if (task.metadata.exclusive) {
+						this.runOnlyExclusive = true;
+					}
+
+					this.tasks[metadata.serial ? 'serial' : 'concurrent'].push(task);
+
+					this.snapshots.touch(title.value, metadata.taskIndex);
+
+					this.emit('stateChange', {
+						type: 'declared-test',
+						title: title.value,
+						knownFailing: metadata.failing,
+						todo: false,
+					});
+				} else if (!metadata.skipped) {
+					this.tasks[metadata.type + (metadata.always ? 'Always' : '')].push(task);
+				}
+			}
+		}, {
+			serial: false,
+			exclusive: false,
+			skipped: false,
+			todo: false,
+			failing: false,
+			callback: false,
+			inline: false, // Set for attempt metadata created by `t.try()`
+			always: false,
+		}, meta);
+	}
+
+	get snapshots() {
+		if (this._snapshots) {
+			return this._snapshots;
+		}
+
+		// Lazy load not when the runner is instantiated but when snapshots are
+		// needed. This should be after the test file has been loaded and source
+		// maps are available.
+		const snapshots = loadSnapshots({
+			file: this.file,
+			fixedLocation: this.snapshotDir,
+			projectDir: this.projectDir,
+			recordNewSnapshots: this.recordNewSnapshots,
+			updating: this.updateSnapshots,
+		});
+		if (snapshots.snapPath !== undefined) {
+			this.emit('dependency', snapshots.snapPath);
+		}
+
+		this._snapshots = snapshots;
+		return snapshots;
+	}
+
+	compareTestSnapshot(options) {
+		return this.snapshots.compare(options);
+	}
+
+	skipSnapshot(options) {
+		return this.snapshots.skipSnapshot(options);
+	}
+
+	async saveSnapshotState() {
+		return {touchedFiles: await this.snapshots.save()};
+	}
+
+	onRun(runnable) {
+		this.activeRunnables.add(runnable);
+	}
+
+	onRunComplete(runnable) {
+		this.activeRunnables.delete(runnable);
+	}
+
+	beforeExitHandler() {
+		for (const runnable of this.activeRunnables) {
+			runnable.finishDueToInactivity();
+		}
+	}
+
+	async runMultiple(runnables) {
+		let allPassed = true;
+		const storedResults = [];
+		const runAndStoreResult = async runnable => {
+			const result = await this.runSingle(runnable);
+			if (!result.passed) {
+				allPassed = false;
+			}
+
+			storedResults.push(result);
+		};
+
+		let waitForSerial = Promise.resolve();
+		await runnables.reduce((previous, runnable) => { // eslint-disable-line unicorn/no-array-reduce
+			if (runnable.metadata.serial || this.serial) {
+				waitForSerial = previous.then(() =>
+					// Serial runnables run as long as there was no previous failure, unless
+					// the runnable should always be run.
+					(allPassed || runnable.metadata.always) && runAndStoreResult(runnable),
+				);
+				return waitForSerial;
+			}
+
+			return Promise.all([
+				previous,
+				waitForSerial.then(() =>
+					// Concurrent runnables are kicked off after the previous serial
+					// runnables have completed, as long as there was no previous failure
+					// (or if the runnable should always be run). One concurrent runnable's
+					// failure does not prevent the next runnable from running.
+					(allPassed || runnable.metadata.always) && runAndStoreResult(runnable),
+				),
+			]);
+		}, waitForSerial);
+
+		return {allPassed, storedResults};
+	}
+
+	async runSingle(runnable) {
+		this.onRun(runnable);
+		const result = await runnable.run();
+		// If run() throws or rejects then the entire test run crashes, so
+		// onRunComplete() doesn't *have* to be inside a finally.
+		this.onRunComplete(runnable);
+		return result;
+	}
+
+	async runHooks(tasks, contextRef, {titleSuffix, testPassed} = {}) {
+		const hooks = tasks.map(task => new Runnable({
+			contextRef,
+			experiments: this.experiments,
+			failWithoutAssertions: false,
+			fn: task.args.length === 0
+				? task.implementation
+				: t => Reflect.apply(task.implementation, null, [t, ...task.args]),
+			compareTestSnapshot: this.boundCompareTestSnapshot,
+			skipSnapshot: this.boundSkipSnapshot,
+			updateSnapshots: this.updateSnapshots,
+			metadata: task.metadata,
+			title: `${task.title}${titleSuffix || ''}`,
+			isHook: true,
+			testPassed,
+			notifyTimeoutUpdate: this.notifyTimeoutUpdate,
+		}));
+		const outcome = await this.runMultiple(hooks, this.serial);
+		for (const result of outcome.storedResults) {
+			if (result.passed) {
+				this.emit('stateChange', {
+					type: 'hook-finished',
+					title: result.title,
+					duration: result.duration,
+					logs: result.logs,
+				});
+			} else {
+				this.emit('stateChange', {
+					type: 'hook-failed',
+					title: result.title,
+					err: serializeError('Hook failure', true, result.error),
+					duration: result.duration,
+					logs: result.logs,
+				});
+			}
+		}
+
+		return outcome.allPassed;
+	}
+
+	async runTest(task, contextRef) {
+		const hookSuffix = ` for ${task.title}`;
+		let hooksOk = await this.runHooks(
+			this.tasks.beforeEach,
+			contextRef,
+			{
+				titleSuffix: hookSuffix,
+			},
+		);
+
+		let testOk = false;
+		if (hooksOk) {
+			// Only run the test if all `beforeEach` hooks passed.
+			const test = new Runnable({
+				contextRef,
+				experiments: this.experiments,
+				failWithoutAssertions: this.failWithoutAssertions,
+				fn: task.args.length === 0
+					? task.implementation
+					: t => Reflect.apply(task.implementation, null, [t, ...task.args]),
+				compareTestSnapshot: this.boundCompareTestSnapshot,
+				skipSnapshot: this.boundSkipSnapshot,
+				updateSnapshots: this.updateSnapshots,
+				metadata: task.metadata,
+				title: task.title,
+				registerUniqueTitle: this.registerUniqueTitle,
+				notifyTimeoutUpdate: this.notifyTimeoutUpdate,
+			});
+
+			const result = await this.runSingle(test);
+			testOk = result.passed;
+
+			if (testOk) {
+				this.emit('stateChange', {
+					type: 'test-passed',
+					title: result.title,
+					duration: result.duration,
+					knownFailing: result.metadata.failing,
+					logs: result.logs,
+				});
+
+				hooksOk = await this.runHooks(
+					this.tasks.afterEach,
+					contextRef,
+					{
+						titleSuffix: hookSuffix,
+						testPassed: testOk,
+					});
+			} else {
+				this.emit('stateChange', {
+					type: 'test-failed',
+					title: result.title,
+					err: serializeError('Test failure', true, result.error, this.file),
+					duration: result.duration,
+					knownFailing: result.metadata.failing,
+					logs: result.logs,
+				});
+				// Don't run `afterEach` hooks if the test failed.
+			}
+		}
+
+		const alwaysOk = await this.runHooks(
+			this.tasks.afterEachAlways,
+			contextRef,
+			{
+				titleSuffix: hookSuffix,
+				testPassed: testOk,
+			});
+		return alwaysOk && hooksOk && testOk;
+	}
+
+	async start() { // eslint-disable-line complexity
+		const concurrentTests = [];
+		const serialTests = [];
+		for (const task of this.tasks.serial) {
+			if (this.runOnlyExclusive && !task.metadata.exclusive) {
+				this.snapshots.skipBlock(task.title, task.metadata.taskIndex);
+				continue;
+			}
+
+			if (this.checkSelectedByLineNumbers && !task.metadata.selected) {
+				this.snapshots.skipBlock(task.title, task.metadata.taskIndex);
+				continue;
+			}
+
+			this.emit('stateChange', {
+				type: 'selected-test',
+				title: task.title,
+				knownFailing: task.metadata.failing,
+				skip: task.metadata.skipped,
+				todo: false,
+			});
+
+			if (task.metadata.skipped) {
+				this.snapshots.skipBlock(task.title, task.metadata.taskIndex);
+			} else {
+				serialTests.push(task);
+			}
+		}
+
+		for (const task of this.tasks.concurrent) {
+			if (this.runOnlyExclusive && !task.metadata.exclusive) {
+				this.snapshots.skipBlock(task.title, task.metadata.taskIndex);
+				continue;
+			}
+
+			if (this.checkSelectedByLineNumbers && !task.metadata.selected) {
+				this.snapshots.skipBlock(task.title, task.metadata.taskIndex);
+				continue;
+			}
+
+			this.emit('stateChange', {
+				type: 'selected-test',
+				title: task.title,
+				knownFailing: task.metadata.failing,
+				skip: task.metadata.skipped,
+				todo: false,
+			});
+
+			if (task.metadata.skipped) {
+				this.snapshots.skipBlock(task.title, task.metadata.taskIndex);
+			} else if (this.serial) {
+				serialTests.push(task);
+			} else {
+				concurrentTests.push(task);
+			}
+		}
+
+		for (const task of this.tasks.todo) {
+			if (this.runOnlyExclusive && !task.metadata.exclusive) {
+				continue;
+			}
+
+			if (this.checkSelectedByLineNumbers && !task.metadata.selected) {
+				continue;
+			}
+
+			this.emit('stateChange', {
+				type: 'selected-test',
+				title: task.title,
+				knownFailing: false,
+				skip: false,
+				todo: true,
+			});
+		}
+
+		await Promise.all(this.waitForReady);
+
+		if (concurrentTests.length === 0 && serialTests.length === 0) {
+			this.emit('finish');
+			// Don't run any hooks if there are no tests to run.
+			return;
+		}
+
+		const contextRef = new ContextRef();
+
+		// Note that the hooks and tests always begin running asynchronously.
+		const beforePromise = this.runHooks(this.tasks.before, contextRef);
+		const serialPromise = beforePromise.then(beforeHooksOk => {
+			// Don't run tests if a `before` hook failed.
+			if (!beforeHooksOk) {
+				return false;
+			}
+
+			return serialTests.reduce(async (previous, task) => { // eslint-disable-line unicorn/no-array-reduce
+				const previousOk = await previous;
+				// Don't start tests after an interrupt.
+				if (this.interrupted) {
+					return previousOk;
+				}
+
+				// Prevent subsequent tests from running if `failFast` is enabled and
+				// the previous test failed.
+				if (!previousOk && this.failFast) {
+					return false;
+				}
+
+				return this.runTest(task, contextRef.copy());
+			}, true);
+		});
+		const concurrentPromise = Promise.all([beforePromise, serialPromise]).then(async ([beforeHooksOk, serialOk]) => {
+			// Don't run tests if a `before` hook failed, or if `failFast` is enabled
+			// and a previous serial test failed.
+			if (!beforeHooksOk || (!serialOk && this.failFast)) {
+				return false;
+			}
+
+			// Don't start tests after an interrupt.
+			if (this.interrupted) {
+				return true;
+			}
+
+			// If a concurrent test fails, even if `failFast` is enabled it won't
+			// stop other concurrent tests from running.
+			const allOkays = await Promise.all(concurrentTests.map(task => this.runTest(task, contextRef.copy())));
+			return allOkays.every(Boolean);
+		});
+
+		const beforeExitHandler = this.beforeExitHandler.bind(this);
+		process.on('beforeExit', beforeExitHandler);
+
+		try {
+			const ok = await concurrentPromise;
+			// Only run `after` hooks if all hooks and tests passed.
+			if (ok) {
+				await this.runHooks(this.tasks.after, contextRef);
+			}
+
+			// Always run `after.always` hooks.
+			await this.runHooks(this.tasks.afterAlways, contextRef);
+			process.removeListener('beforeExit', beforeExitHandler);
+			await this.emit('finish');
+		} catch (error) {
+			await this.emit('error', error);
+		}
+	}
+
+	interrupt() {
+		this.interrupted = true;
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/scheduler.js

@@ -0,0 +1,53 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+import writeFileAtomic from 'write-file-atomic';
+
+import isCi from './is-ci.js';
+
+const FILENAME = 'failing-tests.json';
+
+const scheduler = {
+	storeFailedTestFiles(runStatus, cacheDir) {
+		if (isCi || !cacheDir) {
+			return;
+		}
+
+		try {
+			writeFileAtomic.sync(path.join(cacheDir, FILENAME), JSON.stringify(runStatus.getFailedTestFiles()));
+		} catch {}
+	},
+
+	// Order test-files, so that files with failing tests come first
+	failingTestsFirst(selectedFiles, cacheDir, cacheEnabled) {
+		if (isCi || cacheEnabled === false) {
+			return selectedFiles;
+		}
+
+		const filePath = path.join(cacheDir, FILENAME);
+		let failedTestFiles;
+		try {
+			failedTestFiles = JSON.parse(fs.readFileSync(filePath));
+		} catch {
+			return selectedFiles;
+		}
+
+		return [...selectedFiles].sort((f, s) => {
+			if (failedTestFiles.includes(f) && failedTestFiles.includes(s)) {
+				return 0;
+			}
+
+			if (failedTestFiles.includes(f)) {
+				return -1;
+			}
+
+			if (failedTestFiles.includes(s)) {
+				return 1;
+			}
+
+			return 0;
+		});
+	},
+};
+
+export default scheduler;

github/codeql-action-v1/node_modules/ava/lib/serialize-error.js

@@ -0,0 +1,170 @@
+import path from 'node:path';
+import process from 'node:process';
+import {fileURLToPath, pathToFileURL} from 'node:url';
+
+import cleanYamlObject from 'clean-yaml-object';
+import concordance from 'concordance';
+import isError from 'is-error';
+import StackUtils from 'stack-utils';
+
+import {AssertionError} from './assert.js';
+import concordanceOptions from './concordance-options.js';
+
+function isAvaAssertionError(source) {
+	return source instanceof AssertionError;
+}
+
+function filter(propertyName, isRoot) {
+	return !isRoot || (propertyName !== 'message' && propertyName !== 'name' && propertyName !== 'stack');
+}
+
+function normalizeFile(file, ...base) {
+	return file.startsWith('file://') ? file : pathToFileURL(path.resolve(...base, file)).toString();
+}
+
+const stackUtils = new StackUtils();
+function extractSource(stack, testFile) {
+	if (!stack || !testFile) {
+		return null;
+	}
+
+	testFile = normalizeFile(testFile);
+
+	for (const line of stack.split('\n')) {
+		const callSite = stackUtils.parseLine(line);
+		if (callSite && normalizeFile(callSite.file) === testFile) {
+			return {
+				isDependency: false,
+				isWithinProject: true,
+				file: testFile,
+				line: callSite.line,
+			};
+		}
+	}
+
+	return null;
+}
+
+function buildSource(source) {
+	if (!source) {
+		return null;
+	}
+
+	// Assume the CWD is the project directory. This holds since this function
+	// is only called in test workers, which are created with their working
+	// directory set to the project directory.
+	const projectDir = process.cwd();
+
+	const file = normalizeFile(source.file.trim(), projectDir);
+	const rel = path.relative(projectDir, fileURLToPath(file));
+
+	const [segment] = rel.split(path.sep);
+	const isWithinProject = segment !== '..' && (process.platform !== 'win32' || !segment.includes(':'));
+	const isDependency = isWithinProject && path.dirname(rel).split(path.sep).includes('node_modules');
+
+	return {
+		isDependency,
+		isWithinProject,
+		file,
+		line: source.line,
+	};
+}
+
+function trySerializeError(error, shouldBeautifyStack, testFile) {
+	const stack = error.savedError ? error.savedError.stack : error.stack;
+
+	const retval = {
+		avaAssertionError: isAvaAssertionError(error),
+		nonErrorObject: false,
+		source: extractSource(stack, testFile),
+		stack,
+		shouldBeautifyStack,
+	};
+
+	if (error.actualStack) {
+		retval.stack = error.actualStack;
+	}
+
+	if (retval.avaAssertionError) {
+		retval.improperUsage = error.improperUsage;
+		retval.message = error.message;
+		retval.name = error.name;
+		retval.values = error.values;
+
+		if (error.fixedSource) {
+			const source = buildSource(error.fixedSource);
+			if (source) {
+				retval.source = source;
+			}
+		}
+
+		if (error.assertion) {
+			retval.assertion = error.assertion;
+		}
+
+		if (error.operator) {
+			retval.operator = error.operator;
+		}
+	} else {
+		retval.object = cleanYamlObject(error, filter); // Cleanly copy non-standard properties
+		if (typeof error.message === 'string') {
+			retval.message = error.message;
+		}
+
+		if (typeof error.name === 'string') {
+			retval.name = error.name;
+		}
+	}
+
+	if (typeof error.stack === 'string') {
+		const lines = error.stack.split('\n');
+		if (error.name === 'SyntaxError' && !lines[0].startsWith('SyntaxError')) {
+			retval.summary = '';
+			for (const line of lines) {
+				retval.summary += line + '\n';
+				if (line.startsWith('SyntaxError')) {
+					break;
+				}
+			}
+
+			retval.summary = retval.summary.trim();
+		} else {
+			retval.summary = '';
+			for (let index = 0; index < lines.length; index++) {
+				if (lines[index].startsWith('    at')) {
+					break;
+				}
+
+				const next = index + 1;
+				const end = next === lines.length || lines[next].startsWith('    at');
+				retval.summary += end ? lines[index] : lines[index] + '\n';
+			}
+		}
+	}
+
+	return retval;
+}
+
+export default function serializeError(origin, shouldBeautifyStack, error, testFile) {
+	if (!isError(error)) {
+		return {
+			avaAssertionError: false,
+			nonErrorObject: true,
+			formatted: concordance.formatDescriptor(concordance.describe(error, concordanceOptions), concordanceOptions),
+		};
+	}
+
+	try {
+		return trySerializeError(error, shouldBeautifyStack, testFile);
+	} catch {
+		const replacement = new Error(`${origin}: Could not serialize error`);
+		return {
+			avaAssertionError: false,
+			nonErrorObject: false,
+			name: replacement.name,
+			message: replacement.message,
+			stack: replacement.stack,
+			summary: replacement.message,
+		};
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/snapshot-manager.js

@@ -0,0 +1,507 @@
+import {Buffer} from 'node:buffer';
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import {findSourceMap} from 'node:module';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import zlib from 'node:zlib';
+
+import cbor from 'cbor';
+import concordance from 'concordance';
+import indentString from 'indent-string';
+import mem from 'mem';
+import slash from 'slash';
+import writeFileAtomic from 'write-file-atomic';
+
+import {snapshotManager as concordanceOptions} from './concordance-options.js';
+
+// Increment if encoding layout or Concordance serialization versions change. Previous AVA versions will not be able to
+// decode buffers generated by a newer version, so changing this value will require a major version bump of AVA itself.
+// The version is encoded as an unsigned 16 bit integer.
+const VERSION = 3;
+
+const VERSION_HEADER = Buffer.alloc(2);
+VERSION_HEADER.writeUInt16LE(VERSION);
+
+// The decoder matches on the trailing newline byte (0x0A).
+const READABLE_PREFIX = Buffer.from(`AVA Snapshot v${VERSION}\n`, 'ascii');
+const REPORT_SEPARATOR = Buffer.from('\n\n', 'ascii');
+const REPORT_TRAILING_NEWLINE = Buffer.from('\n', 'ascii');
+
+const SHA_256_HASH_LENGTH = 32;
+
+export class SnapshotError extends Error {
+	constructor(message, snapPath) {
+		super(message);
+		this.name = 'SnapshotError';
+		this.snapPath = snapPath;
+	}
+}
+
+export class ChecksumError extends SnapshotError {
+	constructor(snapPath) {
+		super('Checksum mismatch', snapPath);
+		this.name = 'ChecksumError';
+	}
+}
+
+export class VersionMismatchError extends SnapshotError {
+	constructor(snapPath, version) {
+		super('Unexpected snapshot version', snapPath);
+		this.name = 'VersionMismatchError';
+		this.snapVersion = version;
+		this.expectedVersion = VERSION;
+	}
+}
+
+export class InvalidSnapshotError extends SnapshotError {
+	constructor(snapPath) {
+		super('Invalid snapshot file', snapPath);
+		this.name = 'InvalidSnapshotError';
+	}
+}
+
+const LEGACY_SNAPSHOT_HEADER = Buffer.from('// Jest Snapshot v1');
+function isLegacySnapshot(buffer) {
+	return LEGACY_SNAPSHOT_HEADER.equals(buffer.slice(0, LEGACY_SNAPSHOT_HEADER.byteLength));
+}
+
+export class LegacyError extends SnapshotError {
+	constructor(snapPath) {
+		super('Legacy snapshot file', snapPath);
+		this.name = 'LegacyError';
+	}
+}
+
+function tryRead(file) {
+	try {
+		return fs.readFileSync(file);
+	} catch (error) {
+		if (error.code === 'ENOENT') {
+			return null;
+		}
+
+		throw error;
+	}
+}
+
+function formatEntry(snapshot, index) {
+	const {
+		data,
+		label = `Snapshot ${index + 1}`, // Human-readable labels start counting at 1.
+	} = snapshot;
+
+	const description = data
+		? concordance.formatDescriptor(concordance.deserialize(data), concordanceOptions)
+		: '<No Data>';
+
+	const blockquote = label.split(/\n/).map(line => '> ' + line).join('\n');
+
+	return `${blockquote}\n\n${indentString(description, 4)}`;
+}
+
+function combineEntries({blocks}) {
+	const combined = new BufferBuilder();
+
+	for (const {title, snapshots} of blocks) {
+		const last = snapshots[snapshots.length - 1];
+		combined.write(`\n\n## ${title}\n\n`);
+
+		for (const [index, snapshot] of snapshots.entries()) {
+			combined.write(formatEntry(snapshot, index));
+
+			if (snapshot !== last) {
+				combined.write(REPORT_SEPARATOR);
+			}
+		}
+	}
+
+	return combined;
+}
+
+function generateReport(relFile, snapFile, snapshots) {
+	return new BufferBuilder()
+		.write(`# Snapshot report for \`${slash(relFile)}\`
+
+The actual snapshot is saved in \`${snapFile}\`.
+
+Generated by [AVA](https://avajs.dev).`)
+		.append(combineEntries(snapshots))
+		.write(REPORT_TRAILING_NEWLINE)
+		.toBuffer();
+}
+
+class BufferBuilder {
+	constructor() {
+		this.buffers = [];
+		this.byteOffset = 0;
+	}
+
+	append(builder) {
+		this.buffers.push(...builder.buffers);
+		this.byteOffset += builder.byteOffset;
+		return this;
+	}
+
+	write(data) {
+		if (typeof data === 'string') {
+			this.write(Buffer.from(data, 'utf8'));
+		} else {
+			this.buffers.push(data);
+			this.byteOffset += data.byteLength;
+		}
+
+		return this;
+	}
+
+	toBuffer() {
+		return Buffer.concat(this.buffers, this.byteOffset);
+	}
+}
+
+function sortBlocks(blocksByTitle, blockIndices) {
+	return [...blocksByTitle].sort(
+		([aTitle], [bTitle]) => {
+			const a = blockIndices.get(aTitle);
+			const b = blockIndices.get(bTitle);
+
+			if (a === undefined) {
+				if (b === undefined) {
+					return 0;
+				}
+
+				return 1;
+			}
+
+			if (b === undefined) {
+				return -1;
+			}
+
+			return a - b;
+		},
+	);
+}
+
+async function encodeSnapshots(snapshotData) {
+	const encoded = await cbor.encodeAsync(snapshotData, {
+		omitUndefinedProperties: true,
+		canonical: true,
+	});
+	const compressed = zlib.gzipSync(encoded);
+	compressed[9] = 0x03; // Override the GZip header containing the OS to always be Linux
+	const sha256sum = crypto.createHash('sha256').update(compressed).digest();
+	return Buffer.concat([
+		READABLE_PREFIX,
+		VERSION_HEADER,
+		sha256sum,
+		compressed,
+	], READABLE_PREFIX.byteLength + VERSION_HEADER.byteLength + SHA_256_HASH_LENGTH + compressed.byteLength);
+}
+
+function decodeSnapshots(buffer, snapPath) {
+	if (isLegacySnapshot(buffer)) {
+		throw new LegacyError(snapPath);
+	}
+
+	// The version starts after the readable prefix, which is ended by a newline
+	// byte (0x0A).
+	const newline = buffer.indexOf(0x0A);
+	if (newline === -1) {
+		throw new InvalidSnapshotError(snapPath);
+	}
+
+	const versionOffset = newline + 1;
+	const version = buffer.readUInt16LE(versionOffset);
+	if (version !== VERSION) {
+		throw new VersionMismatchError(snapPath, version);
+	}
+
+	const sha256sumOffset = versionOffset + 2;
+	const compressedOffset = sha256sumOffset + SHA_256_HASH_LENGTH;
+	const compressed = buffer.slice(compressedOffset);
+
+	const sha256sum = crypto.createHash('sha256').update(compressed).digest();
+	const expectedSum = buffer.slice(sha256sumOffset, compressedOffset);
+	if (!sha256sum.equals(expectedSum)) {
+		throw new ChecksumError(snapPath);
+	}
+
+	const decompressed = zlib.gunzipSync(compressed);
+	return cbor.decode(decompressed);
+}
+
+class Manager {
+	constructor(options) {
+		this.dir = options.dir;
+		this.recordNewSnapshots = options.recordNewSnapshots;
+		this.updating = options.updating;
+		this.relFile = options.relFile;
+		this.reportFile = options.reportFile;
+		this.reportPath = options.reportPath;
+		this.snapFile = options.snapFile;
+		this.snapPath = options.snapPath;
+		this.oldBlocksByTitle = options.oldBlocksByTitle;
+		this.newBlocksByTitle = options.newBlocksByTitle;
+		this.blockIndices = new Map();
+		this.error = options.error;
+
+		this.hasChanges = false;
+	}
+
+	touch(title, taskIndex) {
+		this.blockIndices.set(title, taskIndex);
+	}
+
+	compare(options) {
+		if (this.error) {
+			throw this.error;
+		}
+
+		const block = this.newBlocksByTitle.get(options.belongsTo);
+
+		const snapshot = block && block.snapshots[options.index];
+		const data = snapshot && snapshot.data;
+
+		if (!data) {
+			if (!this.recordNewSnapshots) {
+				return {pass: false};
+			}
+
+			if (options.deferRecording) {
+				const record = this.deferRecord(options);
+				return {pass: true, record};
+			}
+
+			this.record(options);
+			return {pass: true};
+		}
+
+		const actual = concordance.deserialize(data, concordanceOptions);
+		const expected = concordance.describe(options.expected, concordanceOptions);
+		const pass = concordance.compareDescriptors(actual, expected);
+
+		return {actual, expected, pass};
+	}
+
+	recordSerialized({data, label, belongsTo, index}) {
+		let block = this.newBlocksByTitle.get(belongsTo);
+		if (!block) {
+			block = {snapshots: []};
+		}
+
+		const {snapshots} = block;
+
+		if (index > snapshots.length) {
+			throw new RangeError(`Cannot record snapshot ${index} for ${JSON.stringify(belongsTo)}, exceeds expected index of ${snapshots.length}`);
+		} else if (index < snapshots.length) {
+			if (snapshots[index].data) {
+				throw new RangeError(`Cannot record snapshot ${index} for ${JSON.stringify(belongsTo)}, already exists`);
+			}
+
+			snapshots[index] = {data, label};
+		} else {
+			snapshots.push({data, label});
+		}
+
+		this.newBlocksByTitle.set(belongsTo, block);
+	}
+
+	deferRecord(options) {
+		const {expected, belongsTo, label, index} = options;
+		const descriptor = concordance.describe(expected, concordanceOptions);
+		const data = concordance.serialize(descriptor);
+
+		return () => { // Must be called in order!
+			this.hasChanges = true;
+			this.recordSerialized({data, label, belongsTo, index});
+		};
+	}
+
+	record(options) {
+		const record = this.deferRecord(options);
+		record();
+	}
+
+	skipBlock(title) {
+		const block = this.oldBlocksByTitle.get(title);
+
+		if (block) {
+			this.newBlocksByTitle.set(title, block);
+		}
+	}
+
+	skipSnapshot({belongsTo, index, deferRecording}) {
+		const oldBlock = this.oldBlocksByTitle.get(belongsTo);
+		let snapshot = oldBlock && oldBlock.snapshots[index];
+
+		if (!snapshot) {
+			snapshot = {};
+		}
+
+		// Retain the label from the old snapshot, so as not to assume that the
+		// snapshot.skip() arguments are well-formed.
+
+		// Defer recording if called in a try().
+		if (deferRecording) {
+			return () => { // Must be called in order!
+				this.recordSerialized({belongsTo, index, ...snapshot});
+			};
+		}
+
+		this.recordSerialized({belongsTo, index, ...snapshot});
+	}
+
+	async save() {
+		const {dir, relFile, snapFile, snapPath, reportPath} = this;
+
+		if (this.updating && this.newBlocksByTitle.size === 0) {
+			return {
+				changedFiles: [cleanFile(snapPath), cleanFile(reportPath)].flat(),
+				temporaryFiles: [],
+			};
+		}
+
+		if (!this.hasChanges) {
+			return null;
+		}
+
+		const snapshots = {
+			blocks: sortBlocks(this.newBlocksByTitle, this.blockIndices).map(
+				([title, block]) => ({title, ...block}),
+			),
+		};
+
+		const buffer = await encodeSnapshots(snapshots);
+		const reportBuffer = generateReport(relFile, snapFile, snapshots);
+
+		await fs.promises.mkdir(dir, {recursive: true});
+
+		const temporaryFiles = [];
+		const tmpfileCreated = file => temporaryFiles.push(file);
+		await Promise.all([
+			writeFileAtomic(snapPath, buffer, {tmpfileCreated}),
+			writeFileAtomic(reportPath, reportBuffer, {tmpfileCreated}),
+		]);
+		return {
+			changedFiles: [snapPath, reportPath],
+			temporaryFiles,
+		};
+	}
+}
+
+const resolveSourceFile = mem(file => {
+	const sourceMap = findSourceMap(file);
+	// Prior to Node.js 18.8.0, the value when a source map could not be found was `undefined`.
+	// This changed to `null` in <https://github.com/nodejs/node/pull/43875>. Check both.
+	if (sourceMap === undefined || sourceMap === null) {
+		return file;
+	}
+
+	const {payload} = sourceMap;
+	if (payload.sources.length === 0) { // Hypothetical?
+		return file;
+	}
+
+	return payload.sources[0].startsWith('file://')
+		? fileURLToPath(payload.sources[0])
+		: payload.sources[0];
+});
+
+export const determineSnapshotDir = mem(({file, fixedLocation, projectDir}) => {
+	const testDir = path.dirname(resolveSourceFile(file));
+	if (fixedLocation) {
+		const relativeTestLocation = path.relative(projectDir, testDir);
+		return path.join(fixedLocation, relativeTestLocation);
+	}
+
+	const parts = new Set(path.relative(projectDir, testDir).split(path.sep));
+	if (parts.has('__tests__')) {
+		return path.join(testDir, '__snapshots__');
+	}
+
+	if (parts.has('test') || parts.has('tests')) { // Accept tests, even though it's not in the default test patterns
+		return path.join(testDir, 'snapshots');
+	}
+
+	return testDir;
+}, {cacheKey: ([{file}]) => file});
+
+function determineSnapshotPaths({file, fixedLocation, projectDir}) {
+	const dir = determineSnapshotDir({file, fixedLocation, projectDir});
+	const relFile = path.relative(projectDir, resolveSourceFile(file));
+	const name = path.basename(relFile);
+	const reportFile = `${name}.md`;
+	const snapFile = `${name}.snap`;
+
+	return {
+		dir,
+		relFile,
+		snapFile,
+		reportFile,
+		snapPath: path.join(dir, snapFile),
+		reportPath: path.join(dir, reportFile),
+	};
+}
+
+function cleanFile(file) {
+	try {
+		fs.unlinkSync(file);
+		return [file];
+	} catch (error) {
+		if (error.code === 'ENOENT') {
+			return [];
+		}
+
+		throw error;
+	}
+}
+
+export function load({file, fixedLocation, projectDir, recordNewSnapshots, updating}) {
+	// Keep runner unit tests that use `new Runner()` happy
+	if (file === undefined || projectDir === undefined) {
+		return new Manager({
+			recordNewSnapshots,
+			updating,
+			oldBlocksByTitle: new Map(),
+			newBlocksByTitle: new Map(),
+		});
+	}
+
+	const paths = determineSnapshotPaths({file, fixedLocation, projectDir});
+	const buffer = tryRead(paths.snapPath);
+
+	if (!buffer) {
+		return new Manager({
+			recordNewSnapshots,
+			updating,
+			...paths,
+			oldBlocksByTitle: new Map(),
+			newBlocksByTitle: new Map(),
+		});
+	}
+
+	let blocksByTitle;
+	let snapshotError;
+
+	try {
+		const data = decodeSnapshots(buffer, paths.snapPath);
+		blocksByTitle = new Map(data.blocks.map(({title, ...block}) => [title, block]));
+	} catch (error) {
+		blocksByTitle = new Map();
+
+		if (!updating) { // Discard all decoding errors when updating snapshots
+			snapshotError = error instanceof SnapshotError
+				? error
+				: new InvalidSnapshotError(paths.snapPath);
+		}
+	}
+
+	return new Manager({
+		recordNewSnapshots,
+		updating,
+		...paths,
+		oldBlocksByTitle: blocksByTitle,
+		newBlocksByTitle: updating ? new Map() : blocksByTitle,
+		error: snapshotError,
+	});
+}

github/codeql-action-v1/node_modules/ava/lib/test.js

@@ -0,0 +1,611 @@
+import concordance from 'concordance';
+import isPromise from 'is-promise';
+import plur from 'plur';
+
+import {AssertionError, Assertions, checkAssertionMessage} from './assert.js';
+import concordanceOptions from './concordance-options.js';
+import nowAndTimers from './now-and-timers.cjs';
+import parseTestArgs from './parse-test-args.js';
+
+function formatErrorValue(label, error) {
+	const formatted = concordance.format(error, concordanceOptions);
+	return {label, formatted};
+}
+
+const captureSavedError = () => {
+	const limitBefore = Error.stackTraceLimit;
+	Error.stackTraceLimit = 1;
+	const error = new Error(); // eslint-disable-line unicorn/error-message
+	Error.stackTraceLimit = limitBefore;
+	return error;
+};
+
+const testMap = new WeakMap();
+class ExecutionContext extends Assertions {
+	constructor(test) {
+		super({
+			pass() {
+				test.countPassedAssertion();
+			},
+			pending(promise) {
+				test.addPendingAssertion(promise);
+			},
+			fail(error) {
+				test.addFailedAssertion(error);
+			},
+			skip() {
+				test.countPassedAssertion();
+			},
+			compareWithSnapshot: options => test.compareWithSnapshot(options),
+			experiments: test.experiments,
+			disableSnapshots: test.isHook === true,
+		});
+		testMap.set(this, test);
+
+		this.snapshot.skip = () => {
+			test.skipSnapshot();
+		};
+
+		this.log = (...inputArgs) => {
+			const args = inputArgs.map(value => typeof value === 'string'
+				? value
+				: concordance.format(value, concordanceOptions));
+			if (args.length > 0) {
+				test.addLog(args.join(' '));
+			}
+		};
+
+		this.plan = count => {
+			test.plan(count, captureSavedError());
+		};
+
+		this.plan.skip = () => {};
+
+		this.timeout = (ms, message) => {
+			test.timeout(ms, message);
+		};
+
+		this.teardown = callback => {
+			test.addTeardown(callback);
+		};
+
+		this.try = async (...attemptArgs) => {
+			if (test.isHook) {
+				const error = new Error('`t.try()` can only be used in tests');
+				test.saveFirstError(error);
+				throw error;
+			}
+
+			const {args, implementation, title} = parseTestArgs(attemptArgs);
+
+			if (!implementation) {
+				throw new TypeError('Expected an implementation.');
+			}
+
+			if (Array.isArray(implementation)) {
+				throw new TypeError('AVA 4 no longer supports t.try() with multiple implementations.');
+			}
+
+			let attemptTitle;
+			if (!title.isSet || title.isEmpty) {
+				attemptTitle = `${test.title} ─ attempt ${test.attemptCount + 1}`;
+			} else if (title.isValid) {
+				attemptTitle = `${test.title} ─ ${title.value}`;
+			} else {
+				throw new TypeError('`t.try()` titles must be strings');
+			}
+
+			if (!test.registerUniqueTitle(attemptTitle)) {
+				throw new Error(`Duplicate test title: ${attemptTitle}`);
+			}
+
+			let committed = false;
+			let discarded = false;
+
+			const {assertCount, deferredSnapshotRecordings, errors, logs, passed, snapshotCount, startingSnapshotCount} = await test.runAttempt(attemptTitle, t => implementation(t, ...args));
+
+			return {
+				errors,
+				logs: [...logs], // Don't allow modification of logs.
+				passed,
+				title: attemptTitle,
+				commit({retainLogs = true} = {}) {
+					if (committed) {
+						return;
+					}
+
+					if (discarded) {
+						test.saveFirstError(new Error('Can’t commit a result that was previously discarded'));
+						return;
+					}
+
+					committed = true;
+					test.finishAttempt({
+						assertCount,
+						commit: true,
+						deferredSnapshotRecordings,
+						errors,
+						logs,
+						passed,
+						retainLogs,
+						snapshotCount,
+						startingSnapshotCount,
+					});
+				},
+				discard({retainLogs = false} = {}) {
+					if (committed) {
+						test.saveFirstError(new Error('Can’t discard a result that was previously committed'));
+						return;
+					}
+
+					if (discarded) {
+						return;
+					}
+
+					discarded = true;
+					test.finishAttempt({
+						assertCount: 0,
+						commit: false,
+						deferredSnapshotRecordings,
+						errors,
+						logs,
+						passed,
+						retainLogs,
+						snapshotCount,
+						startingSnapshotCount,
+					});
+				},
+			};
+		};
+	}
+
+	get title() {
+		return testMap.get(this).title;
+	}
+
+	get context() {
+		return testMap.get(this).contextRef.get();
+	}
+
+	set context(context) {
+		testMap.get(this).contextRef.set(context);
+	}
+
+	get passed() {
+		const test = testMap.get(this);
+		return test.isHook ? test.testPassed : !test.assertError;
+	}
+}
+
+export default class Test {
+	constructor(options) {
+		this.contextRef = options.contextRef;
+		this.experiments = options.experiments || {};
+		this.failWithoutAssertions = options.failWithoutAssertions;
+		this.fn = options.fn;
+		this.isHook = options.isHook === true;
+		this.metadata = options.metadata;
+		this.title = options.title;
+		this.testPassed = options.testPassed;
+		this.registerUniqueTitle = options.registerUniqueTitle;
+		this.logs = [];
+		this.teardowns = [];
+		this.notifyTimeoutUpdate = options.notifyTimeoutUpdate;
+
+		const {snapshotBelongsTo = this.title, nextSnapshotIndex = 0} = options;
+		this.snapshotBelongsTo = snapshotBelongsTo;
+		this.nextSnapshotIndex = nextSnapshotIndex;
+		this.snapshotCount = 0;
+
+		const deferRecording = this.metadata.inline;
+		this.deferredSnapshotRecordings = [];
+		this.compareWithSnapshot = ({expected, message}) => {
+			this.snapshotCount++;
+
+			const belongsTo = snapshotBelongsTo;
+			const index = this.nextSnapshotIndex++;
+			const label = message;
+
+			const {record, ...result} = options.compareTestSnapshot({
+				belongsTo,
+				deferRecording,
+				expected,
+				index,
+				label,
+				taskIndex: this.metadata.taskIndex,
+			});
+			if (record) {
+				this.deferredSnapshotRecordings.push(record);
+			}
+
+			return result;
+		};
+
+		this.skipSnapshot = () => {
+			if (typeof options.skipSnapshot === 'function') {
+				const record = options.skipSnapshot({
+					belongsTo: snapshotBelongsTo,
+					index: this.nextSnapshotIndex,
+					deferRecording,
+					taskIndex: this.metadata.taskIndex,
+				});
+				if (record) {
+					this.deferredSnapshotRecordings.push(record);
+				}
+			}
+
+			this.nextSnapshotIndex++;
+			this.snapshotCount++;
+			this.countPassedAssertion();
+		};
+
+		this.runAttempt = async (title, fn) => {
+			if (this.finishing) {
+				this.saveFirstError(new Error('Running a `t.try()`, but the test has already finished'));
+			}
+
+			this.attemptCount++;
+			this.pendingAttemptCount++;
+
+			const {contextRef, snapshotBelongsTo, nextSnapshotIndex, snapshotCount: startingSnapshotCount} = this;
+			const attempt = new Test({
+				...options,
+				fn,
+				metadata: {...options.metadata, failing: false, inline: true},
+				contextRef: contextRef.copy(),
+				snapshotBelongsTo,
+				nextSnapshotIndex,
+				title,
+			});
+
+			const {deferredSnapshotRecordings, error, logs, passed, assertCount, snapshotCount} = await attempt.run();
+			const errors = error ? [error] : [];
+			return {assertCount, deferredSnapshotRecordings, errors, logs, passed, snapshotCount, startingSnapshotCount};
+		};
+
+		this.assertCount = 0;
+		this.assertError = undefined;
+		this.attemptCount = 0;
+		this.calledEnd = false;
+		this.duration = null;
+		this.finishDueToInactivity = null;
+		this.finishDueToTimeout = null;
+		this.finishing = false;
+		this.pendingAssertionCount = 0;
+		this.pendingAttemptCount = 0;
+		this.planCount = null;
+		this.startedAt = 0;
+		this.timeoutMs = 0;
+		this.timeoutTimer = null;
+	}
+
+	createExecutionContext() {
+		return new ExecutionContext(this);
+	}
+
+	countPassedAssertion() {
+		if (this.finishing) {
+			this.saveFirstError(new Error('Assertion passed, but test has already finished'));
+		}
+
+		if (this.pendingAttemptCount > 0) {
+			this.saveFirstError(new Error('Assertion passed, but an attempt is pending. Use the attempt’s assertions instead'));
+		}
+
+		this.assertCount++;
+		this.refreshTimeout();
+	}
+
+	addLog(text) {
+		this.logs.push(text);
+	}
+
+	addPendingAssertion(promise) {
+		if (this.finishing) {
+			this.saveFirstError(new Error('Assertion started, but test has already finished'));
+		}
+
+		if (this.pendingAttemptCount > 0) {
+			this.saveFirstError(new Error('Assertion started, but an attempt is pending. Use the attempt’s assertions instead'));
+		}
+
+		this.assertCount++;
+		this.pendingAssertionCount++;
+		this.refreshTimeout();
+
+		promise
+			.catch(error => this.saveFirstError(error))
+			.then(() => {
+				this.pendingAssertionCount--;
+				this.refreshTimeout();
+			});
+	}
+
+	addFailedAssertion(error) {
+		if (this.finishing) {
+			this.saveFirstError(new Error('Assertion failed, but test has already finished'));
+		}
+
+		if (this.pendingAttemptCount > 0) {
+			this.saveFirstError(new Error('Assertion failed, but an attempt is pending. Use the attempt’s assertions instead'));
+		}
+
+		this.assertCount++;
+		this.refreshTimeout();
+		this.saveFirstError(error);
+	}
+
+	finishAttempt({commit, deferredSnapshotRecordings, errors, logs, passed, retainLogs, snapshotCount, startingSnapshotCount}) {
+		if (this.finishing) {
+			if (commit) {
+				this.saveFirstError(new Error('`t.try()` result was committed, but the test has already finished'));
+			} else {
+				this.saveFirstError(new Error('`t.try()` result was discarded, but the test has already finished'));
+			}
+		}
+
+		if (commit) {
+			this.assertCount++;
+
+			if (startingSnapshotCount === this.snapshotCount) {
+				this.snapshotCount += snapshotCount;
+				this.nextSnapshotIndex += snapshotCount;
+				for (const record of deferredSnapshotRecordings) {
+					record();
+				}
+			} else {
+				this.saveFirstError(new Error('Cannot commit `t.try()` result. Do not run concurrent snapshot assertions when using `t.try()`'));
+			}
+		}
+
+		this.pendingAttemptCount--;
+
+		if (commit && !passed) {
+			this.saveFirstError(errors[0]);
+		}
+
+		if (retainLogs) {
+			for (const log of logs) {
+				this.addLog(log);
+			}
+		}
+
+		this.refreshTimeout();
+	}
+
+	saveFirstError(error) {
+		if (!this.assertError) {
+			this.assertError = error;
+		}
+	}
+
+	plan(count, planError) {
+		if (typeof count !== 'number') {
+			throw new TypeError('Expected a number');
+		}
+
+		this.planCount = count;
+
+		// In case the `planCount` doesn't match `assertCount, we need the stack of
+		// this function to throw with a useful stack.
+		this.planError = planError;
+	}
+
+	timeout(ms, message) {
+		const result = checkAssertionMessage('timeout', message);
+		if (result !== true) {
+			this.saveFirstError(result);
+			// Allow the timeout to be set even when the message is invalid.
+			message = '';
+		}
+
+		if (this.finishing) {
+			return;
+		}
+
+		this.clearTimeout();
+		this.timeoutMs = ms;
+		this.timeoutTimer = nowAndTimers.setTimeout(() => {
+			this.saveFirstError(new Error(message || 'Test timeout exceeded'));
+
+			if (this.finishDueToTimeout) {
+				this.finishDueToTimeout();
+			}
+		}, ms);
+
+		this.notifyTimeoutUpdate(this.timeoutMs);
+	}
+
+	refreshTimeout() {
+		if (!this.timeoutTimer) {
+			return;
+		}
+
+		if (this.timeoutTimer.refresh) {
+			this.timeoutTimer.refresh();
+		} else {
+			this.timeout(this.timeoutMs);
+		}
+	}
+
+	clearTimeout() {
+		nowAndTimers.clearTimeout(this.timeoutTimer);
+		this.timeoutTimer = null;
+	}
+
+	addTeardown(callback) {
+		if (this.isHook) {
+			this.saveFirstError(new Error('`t.teardown()` is not allowed in hooks'));
+			return;
+		}
+
+		if (this.finishing) {
+			this.saveFirstError(new Error('`t.teardown()` cannot be used during teardown'));
+			return;
+		}
+
+		if (typeof callback !== 'function') {
+			throw new TypeError('Expected a function');
+		}
+
+		this.teardowns.push(callback);
+	}
+
+	async runTeardowns() {
+		const teardowns = [...this.teardowns].reverse();
+
+		for (const teardown of teardowns) {
+			try {
+				await teardown(); // eslint-disable-line no-await-in-loop
+			} catch (error) {
+				this.saveFirstError(error);
+			}
+		}
+	}
+
+	verifyPlan() {
+		if (!this.assertError && this.planCount !== null && this.planCount !== this.assertCount) {
+			this.saveFirstError(new AssertionError({
+				assertion: 'plan',
+				message: `Planned for ${this.planCount} ${plur('assertion', this.planCount)}, but got ${this.assertCount}.`,
+				operator: '===',
+				savedError: this.planError,
+			}));
+		}
+	}
+
+	verifyAssertions() {
+		if (this.assertError) {
+			return;
+		}
+
+		if (this.pendingAttemptCount > 0) {
+			this.saveFirstError(new Error('Test finished, but not all attempts were committed or discarded'));
+			return;
+		}
+
+		if (this.pendingAssertionCount > 0) {
+			this.saveFirstError(new Error('Test finished, but an assertion is still pending'));
+			return;
+		}
+
+		if (this.failWithoutAssertions) {
+			if (this.planCount !== null) {
+				return; // `verifyPlan()` will report an error already.
+			}
+
+			if (this.assertCount === 0 && !this.calledEnd) {
+				this.saveFirstError(new Error('Test finished without running any assertions'));
+			}
+		}
+	}
+
+	callFn() {
+		try {
+			return {
+				ok: true,
+				retval: this.fn.call(null, this.createExecutionContext()),
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				error,
+			};
+		}
+	}
+
+	run() {
+		this.startedAt = nowAndTimers.now();
+
+		const result = this.callFn();
+		if (!result.ok) {
+			this.saveFirstError(new AssertionError({
+				message: 'Error thrown in test',
+				savedError: result.error instanceof Error && result.error,
+				values: [formatErrorValue('Error thrown in test:', result.error)],
+			}));
+
+			return this.finish();
+		}
+
+		const returnedObservable = result.retval !== null && typeof result.retval === 'object' && typeof result.retval.subscribe === 'function';
+		const returnedPromise = isPromise(result.retval);
+
+		let promise;
+		if (returnedObservable) {
+			promise = new Promise((resolve, reject) => {
+				result.retval.subscribe({
+					error: reject,
+					complete: () => resolve(),
+				});
+			});
+		} else if (returnedPromise) {
+			// `retval` can be any thenable, so convert to a proper promise.
+			promise = Promise.resolve(result.retval);
+		}
+
+		if (promise) {
+			return new Promise(resolve => {
+				this.finishDueToAttributedError = () => {
+					resolve(this.finish());
+				};
+
+				this.finishDueToTimeout = () => {
+					resolve(this.finish());
+				};
+
+				this.finishDueToInactivity = () => {
+					const error = returnedObservable
+						? new Error('Observable returned by test never completed')
+						: new Error('Promise returned by test never resolved');
+					this.saveFirstError(error);
+					resolve(this.finish());
+				};
+
+				promise
+					.catch(error => {
+						this.saveFirstError(new AssertionError({
+							message: 'Rejected promise returned by test',
+							savedError: error instanceof Error && error,
+							values: [formatErrorValue('Rejected promise returned by test. Reason:', error)],
+						}));
+					})
+					.then(() => resolve(this.finish()));
+			});
+		}
+
+		return this.finish();
+	}
+
+	async finish() {
+		this.finishing = true;
+
+		this.clearTimeout();
+		this.verifyPlan();
+		this.verifyAssertions();
+		await this.runTeardowns();
+
+		this.duration = nowAndTimers.now() - this.startedAt;
+
+		let error = this.assertError;
+		let passed = !error;
+
+		if (this.metadata.failing) {
+			passed = !passed;
+
+			error = passed ? null : new Error('Test was expected to fail, but succeeded, you should stop marking the test as failing');
+		}
+
+		return {
+			deferredSnapshotRecordings: this.deferredSnapshotRecordings,
+			duration: this.duration,
+			error,
+			logs: this.logs,
+			metadata: this.metadata,
+			passed,
+			snapshotCount: this.snapshotCount,
+			assertCount: this.assertCount,
+			title: this.title,
+		};
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/watcher.js

@@ -0,0 +1,472 @@
+import nodePath from 'node:path';
+
+import chokidar_ from 'chokidar';
+import createDebug from 'debug';
+
+import {chalk} from './chalk.js';
+import {applyTestFileFilter, classify, getChokidarIgnorePatterns} from './globs.js';
+
+let chokidar = chokidar_;
+export function _testOnlyReplaceChokidar(replacement) {
+	chokidar = replacement;
+}
+
+let debug = createDebug('ava:watcher');
+export function _testOnlyReplaceDebug(replacement) {
+	debug = replacement('ava:watcher');
+}
+
+function rethrowAsync(error) {
+	// Don't swallow exceptions. Note that any
+	// expected error should already have been logged
+	setImmediate(() => {
+		throw error;
+	});
+}
+
+const MIN_DEBOUNCE_DELAY = 10;
+const INITIAL_DEBOUNCE_DELAY = 100;
+const END_MESSAGE = chalk.gray('Type `r` and press enter to rerun tests\nType `u` and press enter to update snapshots\n');
+
+class Debouncer {
+	constructor(watcher) {
+		this.watcher = watcher;
+		this.timer = null;
+		this.repeat = false;
+	}
+
+	debounce(delay) {
+		if (this.timer) {
+			this.again = true;
+			return;
+		}
+
+		delay = delay ? Math.max(delay, MIN_DEBOUNCE_DELAY) : INITIAL_DEBOUNCE_DELAY;
+
+		const timer = setTimeout(async () => {
+			await this.watcher.busy;
+			// Do nothing if debouncing was canceled while waiting for the busy
+			// promise to fulfil
+			if (this.timer !== timer) {
+				return;
+			}
+
+			if (this.again) {
+				this.timer = null;
+				this.again = false;
+				this.debounce(delay / 2);
+			} else {
+				this.watcher.runAfterChanges();
+				this.timer = null;
+				this.again = false;
+			}
+		}, delay);
+
+		this.timer = timer;
+	}
+
+	cancel() {
+		if (this.timer) {
+			clearTimeout(this.timer);
+			this.timer = null;
+			this.again = false;
+		}
+	}
+}
+
+class TestDependency {
+	constructor(file, dependencies) {
+		this.file = file;
+		this.dependencies = dependencies;
+	}
+
+	contains(dependency) {
+		return this.dependencies.includes(dependency);
+	}
+}
+
+export default class Watcher {
+	constructor({api, filter = [], globs, projectDir, providers, reporter}) {
+		this.debouncer = new Debouncer(this);
+
+		this.clearLogOnNextRun = true;
+		this.runVector = 0;
+		this.previousFiles = [];
+		this.globs = {cwd: projectDir, ...globs};
+
+		const patternFilters = filter.map(({pattern}) => pattern);
+
+		this.providers = providers;
+		this.run = (specificFiles = [], updateSnapshots = false) => {
+			const clearLogOnNextRun = this.clearLogOnNextRun && this.runVector > 0;
+			if (this.runVector > 0) {
+				this.clearLogOnNextRun = true;
+			}
+
+			this.runVector++;
+
+			let runOnlyExclusive = false;
+			if (specificFiles.length > 0) {
+				const exclusiveFiles = specificFiles.filter(file => this.filesWithExclusiveTests.includes(file));
+				runOnlyExclusive = exclusiveFiles.length !== this.filesWithExclusiveTests.length;
+				if (runOnlyExclusive) {
+					// The test files that previously contained exclusive tests are always
+					// run, together with the remaining specific files.
+					const remainingFiles = specificFiles.filter(file => !exclusiveFiles.includes(file));
+					specificFiles = [...this.filesWithExclusiveTests, ...remainingFiles];
+				}
+
+				if (filter.length > 0) {
+					specificFiles = applyTestFileFilter({
+						cwd: projectDir,
+						expandDirectories: false,
+						filter: patternFilters,
+						testFiles: specificFiles,
+						treatFilterPatternsAsFiles: false,
+					});
+				}
+
+				this.pruneFailures(specificFiles);
+			}
+
+			this.touchedFiles.clear();
+			this.previousFiles = specificFiles;
+			this.busy = api.run({
+				files: specificFiles,
+				filter,
+				runtimeOptions: {
+					clearLogOnNextRun,
+					previousFailures: this.sumPreviousFailures(this.runVector),
+					runOnlyExclusive,
+					runVector: this.runVector,
+					updateSnapshots: updateSnapshots === true,
+				},
+			})
+				.then(runStatus => {
+					reporter.endRun();
+					reporter.lineWriter.writeLine(END_MESSAGE);
+
+					if (this.clearLogOnNextRun && (
+						runStatus.stats.failedHooks > 0
+						|| runStatus.stats.failedTests > 0
+						|| runStatus.stats.failedWorkers > 0
+						|| runStatus.stats.internalErrors > 0
+						|| runStatus.stats.timeouts > 0
+						|| runStatus.stats.uncaughtExceptions > 0
+						|| runStatus.stats.unhandledRejections > 0
+					)) {
+						this.clearLogOnNextRun = false;
+					}
+				})
+				.catch(rethrowAsync);
+		};
+
+		this.testDependencies = [];
+		this.trackTestDependencies(api);
+
+		this.temporaryFiles = new Set();
+		this.touchedFiles = new Set();
+		this.trackTouchedFiles(api);
+
+		this.filesWithExclusiveTests = [];
+		this.trackExclusivity(api);
+
+		this.filesWithFailures = [];
+		this.trackFailures(api);
+
+		this.dirtyStates = {};
+		this.watchFiles();
+		this.rerunAll();
+	}
+
+	watchFiles() {
+		chokidar.watch(['**/*'], {
+			cwd: this.globs.cwd,
+			ignored: getChokidarIgnorePatterns(this.globs),
+			ignoreInitial: true,
+		}).on('all', (event, path) => {
+			if (event === 'add' || event === 'change' || event === 'unlink') {
+				debug('Detected %s of %s', event, path);
+				this.dirtyStates[nodePath.join(this.globs.cwd, path)] = event;
+				this.debouncer.debounce();
+			}
+		});
+	}
+
+	trackTestDependencies(api) {
+		api.on('run', plan => {
+			plan.status.on('stateChange', evt => {
+				if (evt.type !== 'dependencies') {
+					return;
+				}
+
+				const dependencies = evt.dependencies.filter(filePath => {
+					const {isIgnoredByWatcher} = classify(filePath, this.globs);
+					return !isIgnoredByWatcher;
+				});
+				this.updateTestDependencies(evt.testFile, dependencies);
+			});
+		});
+	}
+
+	updateTestDependencies(file, dependencies) {
+		// Ensure the rewritten test file path is included in the dependencies,
+		// since changes to non-rewritten paths are ignored.
+		for (const {main} of this.providers) {
+			const rewritten = main.resolveTestFile(file);
+			if (!dependencies.includes(rewritten)) {
+				dependencies = [rewritten, ...dependencies];
+			}
+		}
+
+		if (dependencies.length === 0) {
+			this.testDependencies = this.testDependencies.filter(dep => dep.file !== file);
+			return;
+		}
+
+		const isUpdate = this.testDependencies.some(dep => {
+			if (dep.file !== file) {
+				return false;
+			}
+
+			dep.dependencies = dependencies;
+
+			return true;
+		});
+
+		if (!isUpdate) {
+			this.testDependencies.push(new TestDependency(file, dependencies));
+		}
+	}
+
+	trackTouchedFiles(api) {
+		api.on('run', plan => {
+			plan.status.on('stateChange', evt => {
+				if (evt.type !== 'touched-files') {
+					return;
+				}
+
+				for (const file of evt.files.changedFiles) {
+					this.touchedFiles.add(file);
+				}
+
+				for (const file of evt.files.temporaryFiles) {
+					this.temporaryFiles.add(file);
+				}
+			});
+		});
+	}
+
+	trackExclusivity(api) {
+		api.on('run', plan => {
+			plan.status.on('stateChange', evt => {
+				if (evt.type !== 'worker-finished') {
+					return;
+				}
+
+				const fileStats = plan.status.stats.byFile.get(evt.testFile);
+				const ranExclusiveTests = fileStats.selectedTests > 0 && fileStats.declaredTests > fileStats.selectedTests;
+				this.updateExclusivity(evt.testFile, ranExclusiveTests);
+			});
+		});
+	}
+
+	updateExclusivity(file, hasExclusiveTests) {
+		const index = this.filesWithExclusiveTests.indexOf(file);
+
+		if (hasExclusiveTests && index === -1) {
+			this.filesWithExclusiveTests.push(file);
+		} else if (!hasExclusiveTests && index !== -1) {
+			this.filesWithExclusiveTests.splice(index, 1);
+		}
+	}
+
+	trackFailures(api) {
+		api.on('run', plan => {
+			this.pruneFailures(plan.files);
+
+			const currentVector = this.runVector;
+			plan.status.on('stateChange', evt => {
+				if (!evt.testFile) {
+					return;
+				}
+
+				switch (evt.type) {
+					case 'hook-failed':
+					case 'internal-error':
+					case 'test-failed':
+					case 'uncaught-exception':
+					case 'unhandled-rejection':
+					case 'worker-failed':
+						this.countFailure(evt.testFile, currentVector);
+						break;
+					default:
+						break;
+				}
+			});
+		});
+	}
+
+	pruneFailures(files) {
+		const toPrune = new Set(files);
+		this.filesWithFailures = this.filesWithFailures.filter(state => !toPrune.has(state.file));
+	}
+
+	countFailure(file, vector) {
+		const isUpdate = this.filesWithFailures.some(state => {
+			if (state.file !== file) {
+				return false;
+			}
+
+			state.count++;
+			return true;
+		});
+
+		if (!isUpdate) {
+			this.filesWithFailures.push({
+				file,
+				vector,
+				count: 1,
+			});
+		}
+	}
+
+	sumPreviousFailures(beforeVector) {
+		let total = 0;
+
+		for (const state of this.filesWithFailures) {
+			if (state.vector < beforeVector) {
+				total += state.count;
+			}
+		}
+
+		return total;
+	}
+
+	cleanUnlinkedTests(unlinkedTests) {
+		for (const testFile of unlinkedTests) {
+			this.updateTestDependencies(testFile, []);
+			this.updateExclusivity(testFile, false);
+			this.pruneFailures([testFile]);
+		}
+	}
+
+	observeStdin(stdin) {
+		stdin.resume();
+		stdin.setEncoding('utf8');
+
+		stdin.on('data', async data => {
+			data = data.trim().toLowerCase();
+			if (data !== 'r' && data !== 'rs' && data !== 'u') {
+				return;
+			}
+
+			// Cancel the debouncer, it might rerun specific tests whereas *all* tests
+			// need to be rerun
+			this.debouncer.cancel();
+			await this.busy;
+			// Cancel the debouncer again, it might have restarted while waiting for
+			// the busy promise to fulfil
+			this.debouncer.cancel();
+			this.clearLogOnNextRun = false;
+			if (data === 'u') {
+				this.updatePreviousSnapshots();
+			} else {
+				this.rerunAll();
+			}
+		});
+	}
+
+	rerunAll() {
+		this.dirtyStates = {};
+		this.run();
+	}
+
+	updatePreviousSnapshots() {
+		this.dirtyStates = {};
+		this.run(this.previousFiles, true);
+	}
+
+	runAfterChanges() {
+		const {dirtyStates} = this;
+		this.dirtyStates = {};
+
+		let dirtyPaths = Object.keys(dirtyStates).filter(path => {
+			if (this.touchedFiles.has(path)) {
+				debug('Ignoring known touched file %s', path);
+				this.touchedFiles.delete(path);
+				return false;
+			}
+
+			// Unlike touched files, temporary files are never cleared. We may see
+			// adds and unlinks detected separately, so we track the temporary files
+			// as long as AVA is running.
+			if (this.temporaryFiles.has(path)) {
+				debug('Ignoring known temporary file %s', path);
+				return false;
+			}
+
+			return true;
+		});
+
+		for (const {main} of this.providers) {
+			dirtyPaths = dirtyPaths.filter(path => {
+				if (main.ignoreChange(path)) {
+					debug('Ignoring changed file %s', path);
+					return false;
+				}
+
+				return true;
+			});
+		}
+
+		const dirtyHelpersAndSources = [];
+		const addedOrChangedTests = [];
+		const unlinkedTests = [];
+		for (const filePath of dirtyPaths) {
+			const {isIgnoredByWatcher, isTest} = classify(filePath, this.globs);
+			if (!isIgnoredByWatcher) {
+				if (isTest) {
+					if (dirtyStates[filePath] === 'unlink') {
+						unlinkedTests.push(filePath);
+					} else {
+						addedOrChangedTests.push(filePath);
+					}
+				} else {
+					dirtyHelpersAndSources.push(filePath);
+				}
+			}
+		}
+
+		this.cleanUnlinkedTests(unlinkedTests);
+
+		// No need to rerun tests if the only change is that tests were deleted
+		if (unlinkedTests.length === dirtyPaths.length) {
+			return;
+		}
+
+		if (dirtyHelpersAndSources.length === 0) {
+			// Run any new or changed tests
+			this.run(addedOrChangedTests);
+			return;
+		}
+
+		// Try to find tests that depend on the changed source files
+		const testsByHelpersOrSource = dirtyHelpersAndSources.map(path => this.testDependencies.filter(dep => dep.contains(path)).map(dep => {
+			debug('%s is a dependency of %s', path, dep.file);
+			return dep.file;
+		})).filter(tests => tests.length > 0);
+
+		// Rerun all tests if source files were changed that could not be traced to
+		// specific tests
+		if (testsByHelpersOrSource.length !== dirtyHelpersAndSources.length) {
+			debug('Files remain that cannot be traced to specific tests: %O', dirtyHelpersAndSources);
+			debug('Rerunning all tests');
+			this.run();
+			return;
+		}
+
+		// Run all affected tests
+		this.run([...new Set([addedOrChangedTests, testsByHelpersOrSource].flat(2))]);
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/worker/base.js

@@ -0,0 +1,208 @@
+import {createRequire} from 'node:module';
+import process from 'node:process';
+import {pathToFileURL} from 'node:url';
+import {workerData} from 'node:worker_threads';
+
+import setUpCurrentlyUnhandled from 'currently-unhandled';
+
+import {set as setChalk} from '../chalk.js';
+import nowAndTimers from '../now-and-timers.cjs';
+import providerManager from '../provider-manager.js';
+import Runner from '../runner.js';
+import serializeError from '../serialize-error.js';
+
+import channel from './channel.cjs';
+import dependencyTracking from './dependency-tracker.js';
+import lineNumberSelection from './line-numbers.js';
+import {set as setOptions} from './options.cjs';
+import {flags, refs, sharedWorkerTeardowns} from './state.cjs';
+import {isRunningInThread, isRunningInChildProcess} from './utils.cjs';
+
+const currentlyUnhandled = setUpCurrentlyUnhandled();
+
+const run = async options => {
+	setOptions(options);
+	setChalk(options.chalkOptions);
+
+	if (options.chalkOptions.level > 0) {
+		const {stdout, stderr} = process;
+		global.console = Object.assign(global.console, new console.Console({stdout, stderr, colorMode: true}));
+	}
+
+	async function exit(code) {
+		if (!process.exitCode) {
+			process.exitCode = code;
+		}
+
+		dependencyTracking.flush();
+		await channel.flush();
+		process.exit(); // eslint-disable-line unicorn/no-process-exit
+	}
+
+	let checkSelectedByLineNumbers;
+	try {
+		checkSelectedByLineNumbers = lineNumberSelection({
+			file: options.file,
+			lineNumbers: options.lineNumbers,
+		});
+	} catch (error) {
+		channel.send({type: 'line-number-selection-error', err: serializeError('Line number selection error', false, error, options.file)});
+		checkSelectedByLineNumbers = () => false;
+	}
+
+	const runner = new Runner({
+		checkSelectedByLineNumbers,
+		experiments: options.experiments,
+		failFast: options.failFast,
+		failWithoutAssertions: options.failWithoutAssertions,
+		file: options.file,
+		match: options.match,
+		projectDir: options.projectDir,
+		recordNewSnapshots: options.recordNewSnapshots,
+		runOnlyExclusive: options.runOnlyExclusive,
+		serial: options.serial,
+		snapshotDir: options.snapshotDir,
+		updateSnapshots: options.updateSnapshots,
+	});
+
+	refs.runnerChain = runner.chain;
+
+	channel.peerFailed.then(() => {
+		runner.interrupt();
+	});
+
+	runner.on('dependency', dependencyTracking.track);
+	runner.on('stateChange', state => channel.send(state));
+
+	runner.on('error', error => {
+		channel.send({type: 'internal-error', err: serializeError('Internal runner error', false, error, runner.file)});
+		exit(1);
+	});
+
+	runner.on('finish', async () => {
+		try {
+			const {touchedFiles} = await runner.saveSnapshotState();
+			if (touchedFiles) {
+				channel.send({type: 'touched-files', files: touchedFiles});
+			}
+		} catch (error) {
+			channel.send({type: 'internal-error', err: serializeError('Internal runner error', false, error, runner.file)});
+			exit(1);
+			return;
+		}
+
+		try {
+			await Promise.all(sharedWorkerTeardowns.map(fn => fn()));
+		} catch (error) {
+			channel.send({type: 'uncaught-exception', err: serializeError('Shared worker teardown error', false, error, runner.file)});
+			exit(1);
+			return;
+		}
+
+		nowAndTimers.setImmediate(() => {
+			for (const rejection of currentlyUnhandled()) {
+				channel.send({type: 'unhandled-rejection', err: serializeError('Unhandled rejection', true, rejection.reason, runner.file)});
+			}
+
+			exit(0);
+		});
+	});
+
+	process.on('uncaughtException', error => {
+		channel.send({type: 'uncaught-exception', err: serializeError('Uncaught exception', true, error, runner.file)});
+		exit(1);
+	});
+
+	// Store value to prevent required modules from modifying it.
+	const testPath = options.file;
+
+	const extensionsToLoadAsModules = Object.entries(options.moduleTypes)
+		.filter(([, type]) => type === 'module')
+		.map(([extension]) => extension);
+
+	// Install before processing options.require, so if helpers are added to the
+	// require configuration the *compiled* helper will be loaded.
+	const {projectDir, providerStates = []} = options;
+	const providers = [];
+	await Promise.all(providerStates.map(async ({type, state}) => {
+		if (type === 'typescript') {
+			const provider = await providerManager.typescript(projectDir);
+			providers.push(provider.worker({extensionsToLoadAsModules, state}));
+		}
+	}));
+
+	const require = createRequire(import.meta.url);
+	const load = async ref => {
+		for (const provider of providers) {
+			if (provider.canLoad(ref)) {
+				return provider.load(ref, {requireFn: require});
+			}
+		}
+
+		for (const extension of extensionsToLoadAsModules) {
+			if (ref.endsWith(`.${extension}`)) {
+				return import(pathToFileURL(ref)); // eslint-disable-line node/no-unsupported-features/es-syntax
+			}
+		}
+
+		// We still support require() since it's more easily monkey-patched.
+		return require(ref);
+	};
+
+	try {
+		for await (const ref of (options.require || [])) {
+			await load(ref);
+		}
+
+		// Install dependency tracker after the require configuration has been evaluated
+		// to make sure we also track dependencies with custom require hooks
+		dependencyTracking.install(require.extensions, testPath);
+
+		if (options.debug && options.debug.port !== undefined && options.debug.host !== undefined) {
+			// If an inspector was active when the main process started, and is
+			// already active for the worker process, do not open a new one.
+			const {default: inspector} = await import('node:inspector'); // eslint-disable-line node/no-unsupported-features/es-syntax
+			if (!options.debug.active || inspector.url() === undefined) {
+				inspector.open(options.debug.port, options.debug.host, true);
+			}
+
+			if (options.debug.break) {
+				debugger; // eslint-disable-line no-debugger
+			}
+		}
+
+		await load(testPath);
+
+		if (flags.loadedMain) {
+			// Unreference the channel if the test file required AVA. This stops it
+			// from keeping the event loop busy, which means the `beforeExit` event can be
+			// used to detect when tests stall.
+			channel.unref();
+		} else {
+			channel.send({type: 'missing-ava-import'});
+			exit(1);
+		}
+	} catch (error) {
+		channel.send({type: 'uncaught-exception', err: serializeError('Uncaught exception', true, error, runner.file)});
+		exit(1);
+	}
+};
+
+const onError = error => {
+	// There shouldn't be any errors, but if there are we may not have managed
+	// to bootstrap enough code to serialize them. Re-throw and let the process
+	// crash.
+	setImmediate(() => {
+		throw error;
+	});
+};
+
+if (isRunningInThread) {
+	channel.send({type: 'starting'}); // AVA won't terminate the worker thread until it's seen this message.
+	const {options} = workerData;
+	delete workerData.options; // Don't allow user code access.
+	run(options).catch(onError);
+} else if (isRunningInChildProcess) {
+	channel.send({type: 'ready-for-options'});
+	channel.options.then(run).catch(onError);
+}

github/codeql-action-v1/node_modules/ava/lib/worker/channel.cjs

@@ -0,0 +1,290 @@
+'use strict';
+const events = require('events');
+const process = require('process');
+const {MessageChannel, threadId} = require('worker_threads');
+
+const timers = require('../now-and-timers.cjs');
+
+const {isRunningInChildProcess, isRunningInThread} = require('./utils.cjs');
+
+let pEvent = async (emitter, event, options) => {
+	// We need to import p-event, but import() is asynchronous. Buffer any events
+	// emitted in the meantime. Don't handle errors.
+	const buffer = [];
+	const addToBuffer = (...args) => buffer.push(args);
+	emitter.on(event, addToBuffer);
+
+	try {
+		({pEvent} = await import('p-event')); // eslint-disable-line node/no-unsupported-features/es-syntax
+	} finally {
+		emitter.off(event, addToBuffer);
+	}
+
+	if (buffer.length === 0) {
+		return pEvent(emitter, event, options);
+	}
+
+	// Now replay buffered events.
+	const replayEmitter = new events.EventEmitter();
+	const promise = pEvent(replayEmitter, event, options);
+	for (const args of buffer) {
+		replayEmitter.emit(event, ...args);
+	}
+
+	const replay = (...args) => replayEmitter.emit(event, ...args);
+	emitter.on(event, replay);
+
+	try {
+		return await promise;
+	} finally {
+		emitter.off(event, replay);
+	}
+};
+
+const selectAvaMessage = type => message => message.ava && message.ava.type === type;
+
+class RefCounter {
+	constructor() {
+		this.count = 0;
+	}
+
+	refAndTest() {
+		return ++this.count === 1;
+	}
+
+	testAndUnref() {
+		return this.count > 0 && --this.count === 0;
+	}
+}
+
+class MessagePortHandle {
+	constructor(port) {
+		this.counter = new RefCounter();
+		this.unreferenceable = false;
+		this.channel = port;
+		// Referencing the port does not immediately prevent the thread from
+		// exiting. Use a timer to keep a reference for at least a second.
+		this.workaroundTimer = timers.setTimeout(() => {}, 1000).unref();
+	}
+
+	forceUnref() {
+		if (this.unreferenceable) {
+			return;
+		}
+
+		this.unreferenceable = true;
+		this.workaroundTimer.unref();
+		this.channel.unref();
+	}
+
+	ref() {
+		if (!this.unreferenceable && this.counter.refAndTest()) {
+			this.workaroundTimer.refresh().ref();
+			this.channel.ref();
+		}
+	}
+
+	unref() {
+		if (!this.unreferenceable && this.counter.testAndUnref()) {
+			this.workaroundTimer.unref();
+			this.channel.unref();
+		}
+	}
+
+	send(evt, transferList) {
+		this.channel.postMessage({ava: evt}, transferList);
+	}
+}
+
+class IpcHandle {
+	constructor(bufferedSend) {
+		this.counter = new RefCounter();
+		this.channel = process;
+		this.sendRaw = bufferedSend;
+	}
+
+	ref() {
+		if (this.counter.refAndTest()) {
+			process.channel.ref();
+		}
+	}
+
+	unref() {
+		if (this.counter.testAndUnref()) {
+			process.channel.unref();
+		}
+	}
+
+	send(evt) {
+		this.sendRaw({ava: evt});
+	}
+}
+
+let handle;
+if (isRunningInChildProcess) {
+	const {controlFlow} = require('../ipc-flow-control.cjs');
+	handle = new IpcHandle(controlFlow(process));
+} else if (isRunningInThread) {
+	const {parentPort} = require('worker_threads');
+	handle = new MessagePortHandle(parentPort);
+}
+
+// The attaching of message listeners will cause the port to be referenced by
+// Node.js. In order to keep track, explicitly reference before attaching.
+handle.ref();
+
+exports.options = pEvent(handle.channel, 'message', selectAvaMessage('options')).then(message => message.ava.options);
+exports.peerFailed = pEvent(handle.channel, 'message', selectAvaMessage('peer-failed'));
+exports.send = handle.send.bind(handle);
+exports.unref = handle.unref.bind(handle);
+
+let pendingPings = Promise.resolve();
+async function flush() {
+	handle.ref();
+	const promise = pendingPings.then(async () => {
+		handle.send({type: 'ping'});
+		await pEvent(handle.channel, 'message', selectAvaMessage('pong'));
+		if (promise === pendingPings) {
+			handle.unref();
+		}
+	});
+	pendingPings = promise;
+	await promise;
+}
+
+exports.flush = flush;
+
+let channelCounter = 0;
+let messageCounter = 0;
+
+const channelEmitters = new Map();
+function createChannelEmitter(channelId) {
+	if (channelEmitters.size === 0) {
+		handle.channel.on('message', message => {
+			if (!message.ava) {
+				return;
+			}
+
+			const {channelId, type, ...payload} = message.ava;
+			if (type === 'shared-worker-error') {
+				const emitter = channelEmitters.get(channelId);
+				if (emitter !== undefined) {
+					emitter.emit(type, payload);
+				}
+			}
+		});
+	}
+
+	const emitter = new events.EventEmitter();
+	channelEmitters.set(channelId, emitter);
+	return [emitter, () => channelEmitters.delete(channelId)];
+}
+
+function registerSharedWorker(filename, initialData) {
+	const channelId = `${threadId}/channel/${++channelCounter}`;
+
+	const {port1: ourPort, port2: theirPort} = new MessageChannel();
+	const sharedWorkerHandle = new MessagePortHandle(ourPort);
+
+	const [channelEmitter, unsubscribe] = createChannelEmitter(channelId);
+
+	handle.send({
+		type: 'shared-worker-connect',
+		channelId,
+		filename,
+		initialData,
+		port: theirPort,
+	}, [theirPort]);
+
+	let currentlyAvailable = false;
+	let error = null;
+
+	// The attaching of message listeners will cause the port to be referenced by
+	// Node.js. In order to keep track, explicitly reference before attaching.
+	sharedWorkerHandle.ref();
+	const ready = pEvent(ourPort, 'message', ({type}) => type === 'ready').then(() => {
+		currentlyAvailable = error === null;
+	}).finally(() => {
+		// Once ready, it's up to user code to subscribe to messages, which (see
+		// below) causes us to reference the port.
+		sharedWorkerHandle.unref();
+	});
+
+	const messageEmitters = new Set();
+
+	// Errors are received over the test worker channel, not the message port
+	// dedicated to the shared worker.
+	pEvent(channelEmitter, 'shared-worker-error').then(() => {
+		unsubscribe();
+		sharedWorkerHandle.forceUnref();
+		error = new Error('The shared worker is no longer available');
+		currentlyAvailable = false;
+		for (const emitter of messageEmitters) {
+			emitter.emit('error', error);
+		}
+	});
+
+	ourPort.on('message', message => {
+		if (message.type === 'message') {
+			// Wait for a turn of the event loop, to allow new subscriptions to be set
+			// up in response to the previous message.
+			setImmediate(() => {
+				for (const emitter of messageEmitters) {
+					emitter.emit('message', message);
+				}
+			});
+		}
+	});
+
+	return {
+		forceUnref: () => sharedWorkerHandle.forceUnref(),
+		ready,
+		channel: {
+			available: ready,
+
+			get currentlyAvailable() {
+				return currentlyAvailable;
+			},
+
+			async * receive() {
+				if (error !== null) {
+					throw error;
+				}
+
+				const emitter = new events.EventEmitter();
+				messageEmitters.add(emitter);
+				try {
+					sharedWorkerHandle.ref();
+					for await (const [message] of events.on(emitter, 'message')) {
+						yield message;
+					}
+				} finally {
+					sharedWorkerHandle.unref();
+					messageEmitters.delete(emitter);
+				}
+			},
+
+			post(data, replyTo) {
+				if (error !== null) {
+					throw error;
+				}
+
+				if (!currentlyAvailable) {
+					throw new Error('Shared worker is not yet available');
+				}
+
+				const messageId = `${channelId}/message/${++messageCounter}`;
+				ourPort.postMessage({
+					type: 'message',
+					messageId,
+					replyTo,
+					data,
+				});
+
+				return messageId;
+			},
+		},
+	};
+}
+
+exports.registerSharedWorker = registerSharedWorker;

github/codeql-action-v1/node_modules/ava/lib/worker/dependency-tracker.js

@@ -0,0 +1,48 @@
+import process from 'node:process';
+
+import channel from './channel.cjs';
+
+const seenDependencies = new Set();
+let newDependencies = [];
+
+function flush() {
+	if (newDependencies.length === 0) {
+		return;
+	}
+
+	channel.send({type: 'dependencies', dependencies: newDependencies});
+	newDependencies = [];
+}
+
+function track(filename) {
+	if (seenDependencies.has(filename)) {
+		return;
+	}
+
+	if (newDependencies.length === 0) {
+		process.nextTick(flush);
+	}
+
+	seenDependencies.add(filename);
+	newDependencies.push(filename);
+}
+
+const tracker = {
+	flush,
+	track,
+	install(extensions, testPath) {
+		for (const ext of Object.keys(extensions)) {
+			const wrappedHandler = extensions[ext];
+
+			extensions[ext] = (module, filename) => {
+				if (filename !== testPath) {
+					track(filename);
+				}
+
+				wrappedHandler(module, filename);
+			};
+		}
+	},
+};
+
+export default tracker;

github/codeql-action-v1/node_modules/ava/lib/worker/guard-environment.cjs

@@ -0,0 +1,19 @@
+'use strict';
+const path = require('path');
+const process = require('process');
+
+const {isRunningInThread, isRunningInChildProcess} = require('./utils.cjs');
+
+// Check if the test is being run without AVA cli
+if (!isRunningInChildProcess && !isRunningInThread) {
+	if (process.argv[1]) {
+		const fp = path.relative('.', process.argv[1]);
+
+		console.log();
+		console.error(`Test files must be run with the AVA CLI:\n\n    $ ava ${fp}\n`);
+
+		process.exit(1); // eslint-disable-line unicorn/no-process-exit
+	} else {
+		throw new Error('The ’ava’ module can only be imported in test files');
+	}
+}

github/codeql-action-v1/node_modules/ava/lib/worker/line-numbers.js

@@ -0,0 +1,141 @@
+import * as fs from 'node:fs';
+import {createRequire, findSourceMap} from 'node:module';
+import {pathToFileURL} from 'node:url';
+
+import callsites from 'callsites';
+
+const require = createRequire(import.meta.url);
+
+function parse(file) {
+	// Avoid loading these until we actually need to select tests by line number.
+	const acorn = require('acorn');
+	const walk = require('acorn-walk');
+
+	const ast = acorn.parse(fs.readFileSync(file, 'utf8'), {
+		ecmaVersion: 11,
+		locations: true,
+		sourceType: 'module',
+	});
+
+	const locations = [];
+	walk.simple(ast, {
+		CallExpression(node) {
+			locations.push(node.loc);
+		},
+	});
+
+	// Walking is depth-first, but we want to sort these breadth-first.
+	locations.sort((a, b) => {
+		if (a.start.line === b.start.line) {
+			return a.start.column - b.start.column;
+		}
+
+		return a.start.line - b.start.line;
+	});
+
+	return locations;
+}
+
+function findTest(locations, declaration) {
+	// Find all calls that span the test declaration.
+	const spans = locations.filter(loc => {
+		if (loc.start.line > declaration.line || loc.end.line < declaration.line) {
+			return false;
+		}
+
+		if (loc.start.line === declaration.line && loc.start.column > declaration.column) {
+			return false;
+		}
+
+		if (loc.end.line === declaration.line && loc.end.column < declaration.column) {
+			return false;
+		}
+
+		return true;
+	});
+
+	// Locations should be sorted by source order, so the last span must be the test.
+	return spans.pop();
+}
+
+const range = (start, end) => Array.from({length: end - start + 1}).fill(start).map((element, index) => element + index);
+
+const translate = (sourceMap, pos) => {
+	if (sourceMap === null) {
+		return pos;
+	}
+
+	const entry = sourceMap.findEntry(pos.line - 1, pos.column); // Source maps are 0-based
+
+	// When used with ts-node/register, we've seen entries without original values. Return the
+	// original position.
+	if (entry.originalLine === undefined || entry.originalColumn === undefined) {
+		return pos;
+	}
+
+	return {
+		line: entry.originalLine + 1, // Readjust for Acorn.
+		column: entry.originalColumn,
+	};
+};
+
+export default function lineNumberSelection({file, lineNumbers = []}) {
+	if (lineNumbers.length === 0) {
+		return undefined;
+	}
+
+	const selected = new Set(lineNumbers);
+
+	let locations = parse(file);
+	let lookedForSourceMap = false;
+	let sourceMap = null;
+
+	return () => {
+		if (!lookedForSourceMap) {
+			lookedForSourceMap = true;
+
+			// The returned function is called *after* the file has been loaded.
+			// Source maps are not available before then.
+			sourceMap = findSourceMap(file);
+
+			if (sourceMap === undefined) {
+				// Prior to Node.js 18.8.0, the value when a source map could not be found was `undefined`.
+				// This changed to `null` in <https://github.com/nodejs/node/pull/43875>.
+				sourceMap = null;
+			}
+
+			if (sourceMap !== null) {
+				locations = locations.map(({start, end}) => ({
+					start: translate(sourceMap, start),
+					end: translate(sourceMap, end),
+				}));
+			}
+		}
+
+		// Assume this is called from a test declaration, which is located in the file.
+		// If not… don't select the test!
+		const callSite = callsites().find(callSite => {
+			const current = callSite.getFileName();
+			if (file.startsWith('file://')) {
+				return current.startsWith('file://') ? file === current : file === pathToFileURL(current).toString();
+			}
+
+			return current.startsWith('file://') ? pathToFileURL(file).toString() === current : file === current;
+		});
+		if (!callSite) {
+			return false;
+		}
+
+		const start = translate(sourceMap, {
+			line: callSite.getLineNumber(), // 1-based
+			column: callSite.getColumnNumber() - 1, // Comes out as 1-based, Acorn wants 0-based
+		});
+
+		const test = findTest(locations, start);
+		if (!test) {
+			return false;
+		}
+
+		return range(test.start.line, test.end.line).some(line => selected.has(line));
+	};
+}

github/codeql-action-v1/node_modules/ava/lib/worker/main.cjs

@@ -0,0 +1,12 @@
+'use strict';
+require('./guard-environment.cjs'); // eslint-disable-line import/no-unassigned-import
+
+const assert = require('assert');
+
+const {flags, refs} = require('./state.cjs');
+
+assert(refs.runnerChain);
+
+flags.loadedMain = true;
+
+module.exports = refs.runnerChain;

github/codeql-action-v1/node_modules/ava/lib/worker/options.cjs

@@ -0,0 +1,17 @@
+'use strict';
+let options = null;
+exports.get = () => {
+	if (!options) {
+		throw new Error('Options have not yet been set');
+	}
+
+	return options;
+};
+
+exports.set = newOptions => {
+	if (options) {
+		throw new Error('Options have already been set');
+	}
+
+	options = newOptions;
+};

github/codeql-action-v1/node_modules/ava/lib/worker/plugin.cjs

@@ -0,0 +1,130 @@
+const pkg = require('../../package.json');
+
+const {registerSharedWorker: register} = require('./channel.cjs');
+const options = require('./options.cjs');
+const {sharedWorkerTeardowns, waitForReady} = require('./state.cjs');
+
+require('./guard-environment.cjs'); // eslint-disable-line import/no-unassigned-import
+
+const workers = new Map();
+const workerTeardownFns = new WeakMap();
+
+function createSharedWorker(filename, initialData, teardown) {
+	const {channel, forceUnref, ready} = register(filename, initialData, teardown);
+	waitForReady.push(ready);
+	sharedWorkerTeardowns.push(async () => {
+		try {
+			await teardown();
+		} finally {
+			forceUnref();
+		}
+	});
+
+	class ReceivedMessage {
+		constructor(id, data) {
+			this.id = id;
+			this.data = data;
+		}
+
+		reply(data) {
+			return publishMessage(data, this.id);
+		}
+	}
+
+	// Ensure that, no matter how often it's received, we have a stable message
+	// object.
+	const messageCache = new WeakMap();
+	async function * receiveMessages(replyTo) {
+		for await (const evt of channel.receive()) {
+			if (replyTo === undefined && evt.replyTo !== undefined) {
+				continue;
+			}
+
+			if (replyTo !== undefined && evt.replyTo !== replyTo) {
+				continue;
+			}
+
+			let message = messageCache.get(evt);
+			if (message === undefined) {
+				message = new ReceivedMessage(evt.messageId, evt.data);
+				messageCache.set(evt, message);
+			}
+
+			yield message;
+		}
+	}
+
+	function publishMessage(data, replyTo) {
+		const id = channel.post(data, replyTo);
+
+		return {
+			id,
+			async * replies() {
+				yield * receiveMessages(id);
+			},
+		};
+	}
+
+	return {
+		available: channel.available,
+		protocol: 'ava-4',
+
+		get currentlyAvailable() {
+			return channel.currentlyAvailable;
+		},
+
+		publish(data) {
+			return publishMessage(data);
+		},
+
+		async * subscribe() {
+			yield * receiveMessages();
+		},
+	};
+}
+
+function registerSharedWorker({
+	filename,
+	initialData,
+	supportedProtocols,
+	teardown,
+}) {
+	const options_ = options.get();
+
+	if (!options_.workerThreads) {
+		throw new Error('Shared workers can be used only when worker threads are enabled');
+	}
+
+	if (!supportedProtocols.includes('ava-4')) {
+		throw new Error(`This version of AVA (${pkg.version}) does not support any of the desired shared worker protocols: ${supportedProtocols.join(',')}`);
+	}
+
+	filename = String(filename); // Allow URL instances.
+
+	let worker = workers.get(filename);
+	if (worker === undefined) {
+		worker = createSharedWorker(filename, initialData, async () => {
+			// Run possibly asynchronous teardown functions serially, in reverse
+			// order. Any error will crash the worker.
+			const teardownFns = workerTeardownFns.get(worker);
+			if (teardownFns !== undefined) {
+				for await (const fn of [...teardownFns].reverse()) {
+					await fn();
+				}
+			}
+		});
+		workers.set(filename, worker);
+	}
+
+	if (teardown !== undefined) {
+		if (workerTeardownFns.has(worker)) {
+			workerTeardownFns.get(worker).push(teardown);
+		} else {
+			workerTeardownFns.set(worker, [teardown]);
+		}
+	}
+
+	return worker;
+}
+
+exports.registerSharedWorker = registerSharedWorker;

github/codeql-action-v1/node_modules/ava/lib/worker/state.cjs

@@ -0,0 +1,5 @@
+'use strict';
+exports.flags = {loadedMain: false};
+exports.refs = {runnerChain: null};
+exports.sharedWorkerTeardowns = [];
+exports.waitForReady = [];

github/codeql-action-v1/node_modules/ava/lib/worker/utils.cjs

@@ -0,0 +1,6 @@
+'use strict';
+const process = require('process');
+const {isMainThread} = require('worker_threads');
+
+exports.isRunningInThread = isMainThread === false;
+exports.isRunningInChildProcess = typeof process.send === 'function';

github/codeql-action-v1/node_modules/ava/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/.bin/acorn

@@ -0,0 +1 @@
+../acorn/bin/acorn

github/codeql-action-v1/node_modules/ava/node_modules/acorn/CHANGELOG.md

@@ -0,0 +1,810 @@
+## 8.8.0 (2022-07-21)
+
+### Bug fixes
+
+Allow parentheses around spread args in destructuring object assignment.
+
+Fix an issue where the tree contained `directive` properties in when parsing with a language version that doesn't support them.
+
+### New features
+
+Support hashbang comments by default in ECMAScript 2023 and later.
+
+## 8.7.1 (2021-04-26)
+
+### Bug fixes
+
+Stop handling `"use strict"` directives in ECMAScript versions before 5.
+
+Fix an issue where duplicate quoted export names in `export *` syntax were incorrectly checked.
+
+Add missing type for `tokTypes`.
+
+## 8.7.0 (2021-12-27)
+
+### New features
+
+Support quoted export names.
+
+Upgrade to Unicode 14.
+
+Add support for Unicode 13 properties in regular expressions.
+
+### Bug fixes
+
+Use a loop to find line breaks, because the existing regexp search would overrun the end of the searched range and waste a lot of time in minified code.
+
+## 8.6.0 (2021-11-18)
+
+### Bug fixes
+
+Fix a bug where an object literal with multiple `__proto__` properties would incorrectly be accepted if a later property value held an assigment.
+
+### New features
+
+Support class private fields with the `in` operator.
+
+## 8.5.0 (2021-09-06)
+
+### Bug fixes
+
+Improve context-dependent tokenization in a number of corner cases.
+
+Fix location tracking after a 0x2028 or 0x2029 character in a string literal (which before did not increase the line number).
+
+Fix an issue where arrow function bodies in for loop context would inappropriately consume `in` operators.
+
+Fix wrong end locations stored on SequenceExpression nodes.
+
+Implement restriction that `for`/`of` loop LHS can't start with `let`.
+
+### New features
+
+Add support for ES2022 class static blocks.
+
+Allow multiple input files to be passed to the CLI tool.
+
+## 8.4.1 (2021-06-24)
+
+### Bug fixes
+
+Fix a bug where `allowAwaitOutsideFunction` would allow `await` in class field initializers, and setting `ecmaVersion` to 13 or higher would allow top-level await in non-module sources.
+
+## 8.4.0 (2021-06-11)
+
+### New features
+
+A new option, `allowSuperOutsideMethod`, can be used to suppress the error when `super` is used in the wrong context.
+
+## 8.3.0 (2021-05-31)
+
+### New features
+
+Default `allowAwaitOutsideFunction` to true for ECMAScript 2022 an higher.
+
+Add support for the `d` ([indices](https://github.com/tc39/proposal-regexp-match-indices)) regexp flag.
+
+## 8.2.4 (2021-05-04)
+
+### Bug fixes
+
+Fix spec conformity in corner case 'for await (async of ...)'.
+
+## 8.2.3 (2021-05-04)
+
+### Bug fixes
+
+Fix an issue where the library couldn't parse 'for (async of ...)'.
+
+Fix a bug in UTF-16 decoding that would read characters incorrectly in some circumstances.
+
+## 8.2.2 (2021-04-29)
+
+### Bug fixes
+
+Fix a bug where a class field initialized to an async arrow function wouldn't allow await inside it. Same issue existed for generator arrow functions with yield.
+
+## 8.2.1 (2021-04-24)
+
+### Bug fixes
+
+Fix a regression introduced in 8.2.0 where static or async class methods with keyword names fail to parse.
+
+## 8.2.0 (2021-04-24)
+
+### New features
+
+Add support for ES2022 class fields and private methods.
+
+## 8.1.1 (2021-04-12)
+
+### Various
+
+Stop shipping source maps in the NPM package.
+
+## 8.1.0 (2021-03-09)
+
+### Bug fixes
+
+Fix a spurious error in nested destructuring arrays.
+
+### New features
+
+Expose `allowAwaitOutsideFunction` in CLI interface.
+
+Make `allowImportExportAnywhere` also apply to `import.meta`.
+
+## 8.0.5 (2021-01-25)
+
+### Bug fixes
+
+Adjust package.json to work with Node 12.16.0 and 13.0-13.6.
+
+## 8.0.4 (2020-10-05)
+
+### Bug fixes
+
+Make `await x ** y` an error, following the spec.
+
+Fix potentially exponential regular expression.
+
+## 8.0.3 (2020-10-02)
+
+### Bug fixes
+
+Fix a wasteful loop during `Parser` creation when setting `ecmaVersion` to `"latest"`.
+
+## 8.0.2 (2020-09-30)
+
+### Bug fixes
+
+Make the TypeScript types reflect the current allowed values for `ecmaVersion`.
+
+Fix another regexp/division tokenizer issue.
+
+## 8.0.1 (2020-08-12)
+
+### Bug fixes
+
+Provide the correct value in the `version` export.
+
+## 8.0.0 (2020-08-12)
+
+### Bug fixes
+
+Disallow expressions like `(a = b) = c`.
+
+Make non-octal escape sequences a syntax error in strict mode.
+
+### New features
+
+The package can now be loaded directly as an ECMAScript module in node 13+.
+
+Update to the set of Unicode properties from ES2021.
+
+### Breaking changes
+
+The `ecmaVersion` option is now required. For the moment, omitting it will still work with a warning, but that will change in a future release.
+
+Some changes to method signatures that may be used by plugins.
+
+## 7.4.0 (2020-08-03)
+
+### New features
+
+Add support for logical assignment operators.
+
+Add support for numeric separators.
+
+## 7.3.1 (2020-06-11)
+
+### Bug fixes
+
+Make the string in the `version` export match the actual library version.
+
+## 7.3.0 (2020-06-11)
+
+### Bug fixes
+
+Fix a bug that caused parsing of object patterns with a property named `set` that had a default value to fail.
+
+### New features
+
+Add support for optional chaining (`?.`).
+
+## 7.2.0 (2020-05-09)
+
+### Bug fixes
+
+Fix precedence issue in parsing of async arrow functions.
+
+### New features
+
+Add support for nullish coalescing.
+
+Add support for `import.meta`.
+
+Support `export * as ...` syntax.
+
+Upgrade to Unicode 13.
+
+## 6.4.1 (2020-03-09)
+
+### Bug fixes
+
+More carefully check for valid UTF16 surrogate pairs in regexp validator.
+
+## 7.1.1 (2020-03-01)
+
+### Bug fixes
+
+Treat `\8` and `\9` as invalid escapes in template strings.
+
+Allow unicode escapes in property names that are keywords.
+
+Don't error on an exponential operator expression as argument to `await`.
+
+More carefully check for valid UTF16 surrogate pairs in regexp validator.
+
+## 7.1.0 (2019-09-24)
+
+### Bug fixes
+
+Disallow trailing object literal commas when ecmaVersion is less than 5.
+
+### New features
+
+Add a static `acorn` property to the `Parser` class that contains the entire module interface, to allow plugins to access the instance of the library that they are acting on.
+
+## 7.0.0 (2019-08-13)
+
+### Breaking changes
+
+Changes the node format for dynamic imports to use the `ImportExpression` node type, as defined in [ESTree](https://github.com/estree/estree/blob/master/es2020.md#importexpression).
+
+Makes 10 (ES2019) the default value for the `ecmaVersion` option.
+
+## 6.3.0 (2019-08-12)
+
+### New features
+
+`sourceType: "module"` can now be used even when `ecmaVersion` is less than 6, to parse module-style code that otherwise conforms to an older standard.
+
+## 6.2.1 (2019-07-21)
+
+### Bug fixes
+
+Fix bug causing Acorn to treat some characters as identifier characters that shouldn't be treated as such.
+
+Fix issue where setting the `allowReserved` option to `"never"` allowed reserved words in some circumstances.
+
+## 6.2.0 (2019-07-04)
+
+### Bug fixes
+
+Improve valid assignment checking in `for`/`in` and `for`/`of` loops.
+
+Disallow binding `let` in patterns.
+
+### New features
+
+Support bigint syntax with `ecmaVersion` >= 11.
+
+Support dynamic `import` syntax with `ecmaVersion` >= 11.
+
+Upgrade to Unicode version 12.
+
+## 6.1.1 (2019-02-27)
+
+### Bug fixes
+
+Fix bug that caused parsing default exports of with names to fail.
+
+## 6.1.0 (2019-02-08)
+
+### Bug fixes
+
+Fix scope checking when redefining a `var` as a lexical binding.
+
+### New features
+
+Split up `parseSubscripts` to use an internal `parseSubscript` method to make it easier to extend with plugins.
+
+## 6.0.7 (2019-02-04)
+
+### Bug fixes
+
+Check that exported bindings are defined.
+
+Don't treat `\u180e` as a whitespace character.
+
+Check for duplicate parameter names in methods.
+
+Don't allow shorthand properties when they are generators or async methods.
+
+Forbid binding `await` in async arrow function's parameter list.
+
+## 6.0.6 (2019-01-30)
+
+### Bug fixes
+
+The content of class declarations and expressions is now always parsed in strict mode.
+
+Don't allow `let` or `const` to bind the variable name `let`.
+
+Treat class declarations as lexical.
+
+Don't allow a generator function declaration as the sole body of an `if` or `else`.
+
+Ignore `"use strict"` when after an empty statement.
+
+Allow string line continuations with special line terminator characters.
+
+Treat `for` bodies as part of the `for` scope when checking for conflicting bindings.
+
+Fix bug with parsing `yield` in a `for` loop initializer.
+
+Implement special cases around scope checking for functions.
+
+## 6.0.5 (2019-01-02)
+
+### Bug fixes
+
+Fix TypeScript type for `Parser.extend` and add `allowAwaitOutsideFunction` to options type.
+
+Don't treat `let` as a keyword when the next token is `{` on the next line.
+
+Fix bug that broke checking for parentheses around an object pattern in a destructuring assignment when `preserveParens` was on.
+
+## 6.0.4 (2018-11-05)
+
+### Bug fixes
+
+Further improvements to tokenizing regular expressions in corner cases.
+
+## 6.0.3 (2018-11-04)
+
+### Bug fixes
+
+Fix bug in tokenizing an expression-less return followed by a function followed by a regular expression.
+
+Remove stray symlink in the package tarball.
+
+## 6.0.2 (2018-09-26)
+
+### Bug fixes
+
+Fix bug where default expressions could fail to parse inside an object destructuring assignment expression.
+
+## 6.0.1 (2018-09-14)
+
+### Bug fixes
+
+Fix wrong value in `version` export.
+
+## 6.0.0 (2018-09-14)
+
+### Bug fixes
+
+Better handle variable-redefinition checks for catch bindings and functions directly under if statements.
+
+Forbid `new.target` in top-level arrow functions.
+
+Fix issue with parsing a regexp after `yield` in some contexts.
+
+### New features
+
+The package now comes with TypeScript definitions.
+
+### Breaking changes
+
+The default value of the `ecmaVersion` option is now 9 (2018).
+
+Plugins work differently, and will have to be rewritten to work with this version.
+
+The loose parser and walker have been moved into separate packages (`acorn-loose` and `acorn-walk`).
+
+## 5.7.3 (2018-09-10)
+
+### Bug fixes
+
+Fix failure to tokenize regexps after expressions like `x.of`.
+
+Better error message for unterminated template literals.
+
+## 5.7.2 (2018-08-24)
+
+### Bug fixes
+
+Properly handle `allowAwaitOutsideFunction` in for statements.
+
+Treat function declarations at the top level of modules like let bindings.
+
+Don't allow async function declarations as the only statement under a label.
+
+## 5.7.0 (2018-06-15)
+
+### New features
+
+Upgraded to Unicode 11.
+
+## 5.6.0 (2018-05-31)
+
+### New features
+
+Allow U+2028 and U+2029 in string when ECMAVersion >= 10.
+
+Allow binding-less catch statements when ECMAVersion >= 10.
+
+Add `allowAwaitOutsideFunction` option for parsing top-level `await`.
+
+## 5.5.3 (2018-03-08)
+
+### Bug fixes
+
+A _second_ republish of the code in 5.5.1, this time with yarn, to hopefully get valid timestamps.
+
+## 5.5.2 (2018-03-08)
+
+### Bug fixes
+
+A republish of the code in 5.5.1 in an attempt to solve an issue with the file timestamps in the npm package being 0.
+
+## 5.5.1 (2018-03-06)
+
+### Bug fixes
+
+Fix misleading error message for octal escapes in template strings.
+
+## 5.5.0 (2018-02-27)
+
+### New features
+
+The identifier character categorization is now based on Unicode version 10.
+
+Acorn will now validate the content of regular expressions, including new ES9 features.
+
+## 5.4.0 (2018-02-01)
+
+### Bug fixes
+
+Disallow duplicate or escaped flags on regular expressions.
+
+Disallow octal escapes in strings in strict mode.
+
+### New features
+
+Add support for async iteration.
+
+Add support for object spread and rest.
+
+## 5.3.0 (2017-12-28)
+
+### Bug fixes
+
+Fix parsing of floating point literals with leading zeroes in loose mode.
+
+Allow duplicate property names in object patterns.
+
+Don't allow static class methods named `prototype`.
+
+Disallow async functions directly under `if` or `else`.
+
+Parse right-hand-side of `for`/`of` as an assignment expression.
+
+Stricter parsing of `for`/`in`.
+
+Don't allow unicode escapes in contextual keywords.
+
+### New features
+
+Parsing class members was factored into smaller methods to allow plugins to hook into it.
+
+## 5.2.1 (2017-10-30)
+
+### Bug fixes
+
+Fix a token context corruption bug.
+
+## 5.2.0 (2017-10-30)
+
+### Bug fixes
+
+Fix token context tracking for `class` and `function` in property-name position.
+
+Make sure `%*` isn't parsed as a valid operator.
+
+Allow shorthand properties `get` and `set` to be followed by default values.
+
+Disallow `super` when not in callee or object position.
+
+### New features
+
+Support [`directive` property](https://github.com/estree/estree/compare/b3de58c9997504d6fba04b72f76e6dd1619ee4eb...1da8e603237144f44710360f8feb7a9977e905e0) on directive expression statements.
+
+## 5.1.2 (2017-09-04)
+
+### Bug fixes
+
+Disable parsing of legacy HTML-style comments in modules.
+
+Fix parsing of async methods whose names are keywords.
+
+## 5.1.1 (2017-07-06)
+
+### Bug fixes
+
+Fix problem with disambiguating regexp and division after a class.
+
+## 5.1.0 (2017-07-05)
+
+### Bug fixes
+
+Fix tokenizing of regexps in an object-desctructuring `for`/`of` loop and after `yield`.
+
+Parse zero-prefixed numbers with non-octal digits as decimal.
+
+Allow object/array patterns in rest parameters.
+
+Don't error when `yield` is used as a property name.
+
+Allow `async` as a shorthand object property.
+
+### New features
+
+Implement the [template literal revision proposal](https://github.com/tc39/proposal-template-literal-revision) for ES9.
+
+## 5.0.3 (2017-04-01)
+
+### Bug fixes
+
+Fix spurious duplicate variable definition errors for named functions.
+
+## 5.0.2 (2017-03-30)
+
+### Bug fixes
+
+A binary operator after a parenthesized arrow expression is no longer incorrectly treated as an error.
+
+## 5.0.0 (2017-03-28)
+
+### Bug fixes
+
+Raise an error for duplicated lexical bindings.
+
+Fix spurious error when an assignement expression occurred after a spread expression.
+
+Accept regular expressions after `of` (in `for`/`of`), `yield` (in a generator), and braced arrow functions.
+
+Allow labels in front or `var` declarations, even in strict mode.
+
+### Breaking changes
+
+Parse declarations following `export default` as declaration nodes, not expressions. This means that class and function declarations nodes can now have `null` as their `id`.
+
+## 4.0.11 (2017-02-07)
+
+### Bug fixes
+
+Allow all forms of member expressions to be parenthesized as lvalue.
+
+## 4.0.10 (2017-02-07)
+
+### Bug fixes
+
+Don't expect semicolons after default-exported functions or classes, even when they are expressions.
+
+Check for use of `'use strict'` directives in non-simple parameter functions, even when already in strict mode.
+
+## 4.0.9 (2017-02-06)
+
+### Bug fixes
+
+Fix incorrect error raised for parenthesized simple assignment targets, so that `(x) = 1` parses again.
+
+## 4.0.8 (2017-02-03)
+
+### Bug fixes
+
+Solve spurious parenthesized pattern errors by temporarily erring on the side of accepting programs that our delayed errors don't handle correctly yet.
+
+## 4.0.7 (2017-02-02)
+
+### Bug fixes
+
+Accept invalidly rejected code like `(x).y = 2` again.
+
+Don't raise an error when a function _inside_ strict code has a non-simple parameter list.
+
+## 4.0.6 (2017-02-02)
+
+### Bug fixes
+
+Fix exponential behavior (manifesting itself as a complete hang for even relatively small source files) introduced by the new 'use strict' check.
+
+## 4.0.5 (2017-02-02)
+
+### Bug fixes
+
+Disallow parenthesized pattern expressions.
+
+Allow keywords as export names.
+
+Don't allow the `async` keyword to be parenthesized.
+
+Properly raise an error when a keyword contains a character escape.
+
+Allow `"use strict"` to appear after other string literal expressions.
+
+Disallow labeled declarations.
+
+## 4.0.4 (2016-12-19)
+
+### Bug fixes
+
+Fix crash when `export` was followed by a keyword that can't be
+exported.
+
+## 4.0.3 (2016-08-16)
+
+### Bug fixes
+
+Allow regular function declarations inside single-statement `if` branches in loose mode. Forbid them entirely in strict mode.
+
+Properly parse properties named `async` in ES2017 mode.
+
+Fix bug where reserved words were broken in ES2017 mode.
+
+## 4.0.2 (2016-08-11)
+
+### Bug fixes
+
+Don't ignore period or 'e' characters after octal numbers.
+
+Fix broken parsing for call expressions in default parameter values of arrow functions.
+
+## 4.0.1 (2016-08-08)
+
+### Bug fixes
+
+Fix false positives in duplicated export name errors.
+
+## 4.0.0 (2016-08-07)
+
+### Breaking changes
+
+The default `ecmaVersion` option value is now 7.
+
+A number of internal method signatures changed, so plugins might need to be updated.
+
+### Bug fixes
+
+The parser now raises errors on duplicated export names.
+
+`arguments` and `eval` can now be used in shorthand properties.
+
+Duplicate parameter names in non-simple argument lists now always produce an error.
+
+### New features
+
+The `ecmaVersion` option now also accepts year-style version numbers
+(2015, etc).
+
+Support for `async`/`await` syntax when `ecmaVersion` is >= 8.
+
+Support for trailing commas in call expressions when `ecmaVersion` is >= 8.
+
+## 3.3.0 (2016-07-25)
+
+### Bug fixes
+
+Fix bug in tokenizing of regexp operator after a function declaration.
+
+Fix parser crash when parsing an array pattern with a hole.
+
+### New features
+
+Implement check against complex argument lists in functions that enable strict mode in ES7.
+
+## 3.2.0 (2016-06-07)
+
+### Bug fixes
+
+Improve handling of lack of unicode regexp support in host
+environment.
+
+Properly reject shorthand properties whose name is a keyword.
+
+### New features
+
+Visitors created with `visit.make` now have their base as _prototype_, rather than copying properties into a fresh object.
+
+## 3.1.0 (2016-04-18)
+
+### Bug fixes
+
+Properly tokenize the division operator directly after a function expression.
+
+Allow trailing comma in destructuring arrays.
+
+## 3.0.4 (2016-02-25)
+
+### Fixes
+
+Allow update expressions as left-hand-side of the ES7 exponential operator.
+
+## 3.0.2 (2016-02-10)
+
+### Fixes
+
+Fix bug that accidentally made `undefined` a reserved word when parsing ES7.
+
+## 3.0.0 (2016-02-10)
+
+### Breaking changes
+
+The default value of the `ecmaVersion` option is now 6 (used to be 5).
+
+Support for comprehension syntax (which was dropped from the draft spec) has been removed.
+
+### Fixes
+
+`let` and `yield` are now “contextual keywords”, meaning you can mostly use them as identifiers in ES5 non-strict code.
+
+A parenthesized class or function expression after `export default` is now parsed correctly.
+
+### New features
+
+When `ecmaVersion` is set to 7, Acorn will parse the exponentiation operator (`**`).
+
+The identifier character ranges are now based on Unicode 8.0.0.
+
+Plugins can now override the `raiseRecoverable` method to override the way non-critical errors are handled.
+
+## 2.7.0 (2016-01-04)
+
+### Fixes
+
+Stop allowing rest parameters in setters.
+
+Disallow `y` rexexp flag in ES5.
+
+Disallow `\00` and `\000` escapes in strict mode.
+
+Raise an error when an import name is a reserved word.
+
+## 2.6.2 (2015-11-10)
+
+### Fixes
+
+Don't crash when no options object is passed.
+
+## 2.6.0 (2015-11-09)
+
+### Fixes
+
+Add `await` as a reserved word in module sources.
+
+Disallow `yield` in a parameter default value for a generator.
+
+Forbid using a comma after a rest pattern in an array destructuring.
+
+### New features
+
+Support parsing stdin in command-line tool.
+
+## 2.5.0 (2015-10-27)
+
+### Fixes
+
+Fix tokenizer support in the command-line tool.
+
+Stop allowing `new.target` outside of functions.
+
+Remove legacy `guard` and `guardedHandler` properties from try nodes.
+
+Stop allowing multiple `__proto__` properties on an object literal in strict mode.
+
+Don't allow rest parameters to be non-identifier patterns.
+
+Check for duplicate paramter names in arrow functions.

github/codeql-action-v1/node_modules/ava/node_modules/acorn/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (C) 2012-2022 by various contributors (see AUTHORS)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/acorn/README.md

@@ -0,0 +1,273 @@
+# Acorn
+
+A tiny, fast JavaScript parser written in JavaScript.
+
+## Community
+
+Acorn is open source software released under an
+[MIT license](https://github.com/acornjs/acorn/blob/master/acorn/LICENSE).
+
+You are welcome to
+[report bugs](https://github.com/acornjs/acorn/issues) or create pull
+requests on [github](https://github.com/acornjs/acorn). For questions
+and discussion, please use the
+[Tern discussion forum](https://discuss.ternjs.net).
+
+## Installation
+
+The easiest way to install acorn is from [`npm`](https://www.npmjs.com/):
+
+```sh
+npm install acorn
+```
+
+Alternately, you can download the source and build acorn yourself:
+
+```sh
+git clone https://github.com/acornjs/acorn.git
+cd acorn
+npm install
+```
+
+## Interface
+
+**parse**`(input, options)` is the main interface to the library. The
+`input` parameter is a string, `options` must be an object setting
+some of the options listed below. The return value will be an abstract
+syntax tree object as specified by the [ESTree
+spec](https://github.com/estree/estree).
+
+```javascript
+let acorn = require("acorn");
+console.log(acorn.parse("1 + 1", {ecmaVersion: 2020}));
+```
+
+When encountering a syntax error, the parser will raise a
+`SyntaxError` object with a meaningful message. The error object will
+have a `pos` property that indicates the string offset at which the
+error occurred, and a `loc` object that contains a `{line, column}`
+object referring to that same position.
+
+Options are provided by in a second argument, which should be an
+object containing any of these fields (only `ecmaVersion` is
+required):
+
+- **ecmaVersion**: Indicates the ECMAScript version to parse. Must be
+  either 3, 5, 6 (or 2015), 7 (2016), 8 (2017), 9 (2018), 10 (2019),
+  11 (2020), 12 (2021), 13 (2022), 14 (2023), or `"latest"` (the
+  latest the library supports). This influences support for strict
+  mode, the set of reserved words, and support for new syntax
+  features.
+
+  **NOTE**: Only 'stage 4' (finalized) ECMAScript features are being
+  implemented by Acorn. Other proposed new features must be
+  implemented through plugins.
+
+- **sourceType**: Indicate the mode the code should be parsed in. Can be
+  either `"script"` or `"module"`. This influences global strict mode
+  and parsing of `import` and `export` declarations.
+
+  **NOTE**: If set to `"module"`, then static `import` / `export` syntax
+  will be valid, even if `ecmaVersion` is less than 6.
+
+- **onInsertedSemicolon**: If given a callback, that callback will be
+  called whenever a missing semicolon is inserted by the parser. The
+  callback will be given the character offset of the point where the
+  semicolon is inserted as argument, and if `locations` is on, also a
+  `{line, column}` object representing this position.
+
+- **onTrailingComma**: Like `onInsertedSemicolon`, but for trailing
+  commas.
+
+- **allowReserved**: If `false`, using a reserved word will generate
+  an error. Defaults to `true` for `ecmaVersion` 3, `false` for higher
+  versions. When given the value `"never"`, reserved words and
+  keywords can also not be used as property names (as in Internet
+  Explorer's old parser).
+
+- **allowReturnOutsideFunction**: By default, a return statement at
+  the top level raises an error. Set this to `true` to accept such
+  code.
+
+- **allowImportExportEverywhere**: By default, `import` and `export`
+  declarations can only appear at a program's top level. Setting this
+  option to `true` allows them anywhere where a statement is allowed,
+  and also allows `import.meta` expressions to appear in scripts
+  (when `sourceType` is not `"module"`).
+
+- **allowAwaitOutsideFunction**: If `false`, `await` expressions can
+  only appear inside `async` functions. Defaults to `true` for
+  `ecmaVersion` 2022 and later, `false` for lower versions. Setting this option to
+  `true` allows to have top-level `await` expressions. They are
+  still not allowed in non-`async` functions, though.
+
+- **allowSuperOutsideMethod**: By default, `super` outside a method
+  raises an error. Set this to `true` to accept such code.
+
+- **allowHashBang**: When this is enabled, if the code starts with the
+  characters `#!` (as in a shellscript), the first line will be
+  treated as a comment. Defaults to true when `ecmaVersion` >= 2023.
+
+- **locations**: When `true`, each node has a `loc` object attached
+  with `start` and `end` subobjects, each of which contains the
+  one-based line and zero-based column numbers in `{line, column}`
+  form. Default is `false`.
+
+- **onToken**: If a function is passed for this option, each found
+  token will be passed in same format as tokens returned from
+  `tokenizer().getToken()`.
+
+  If array is passed, each found token is pushed to it.
+
+  Note that you are not allowed to call the parser from the
+  callback—that will corrupt its internal state.
+
+- **onComment**: If a function is passed for this option, whenever a
+  comment is encountered the function will be called with the
+  following parameters:
+
+  - `block`: `true` if the comment is a block comment, false if it
+    is a line comment.
+  - `text`: The content of the comment.
+  - `start`: Character offset of the start of the comment.
+  - `end`: Character offset of the end of the comment.
+
+  When the `locations` options is on, the `{line, column}` locations
+  of the comment’s start and end are passed as two additional
+  parameters.
+
+  If array is passed for this option, each found comment is pushed
+  to it as object in Esprima format:
+
+  ```javascript
+  {
+    "type": "Line" | "Block",
+    "value": "comment text",
+    "start": Number,
+    "end": Number,
+    // If `locations` option is on:
+    "loc": {
+      "start": {line: Number, column: Number}
+      "end": {line: Number, column: Number}
+    },
+    // If `ranges` option is on:
+    "range": [Number, Number]
+  }
+  ```
+
+  Note that you are not allowed to call the parser from the
+  callback—that will corrupt its internal state.
+
+- **ranges**: Nodes have their start and end characters offsets
+  recorded in `start` and `end` properties (directly on the node,
+  rather than the `loc` object, which holds line/column data. To also
+  add a
+  [semi-standardized](https://bugzilla.mozilla.org/show_bug.cgi?id=745678)
+  `range` property holding a `[start, end]` array with the same
+  numbers, set the `ranges` option to `true`.
+
+- **program**: It is possible to parse multiple files into a single
+  AST by passing the tree produced by parsing the first file as the
+  `program` option in subsequent parses. This will add the toplevel
+  forms of the parsed file to the "Program" (top) node of an existing
+  parse tree.
+
+- **sourceFile**: When the `locations` option is `true`, you can pass
+  this option to add a `source` attribute in every node’s `loc`
+  object. Note that the contents of this option are not examined or
+  processed in any way; you are free to use whatever format you
+  choose.
+
+- **directSourceFile**: Like `sourceFile`, but a `sourceFile` property
+  will be added (regardless of the `location` option) directly to the
+  nodes, rather than the `loc` object.
+
+- **preserveParens**: If this option is `true`, parenthesized expressions
+  are represented by (non-standard) `ParenthesizedExpression` nodes
+  that have a single `expression` property containing the expression
+  inside parentheses.
+
+**parseExpressionAt**`(input, offset, options)` will parse a single
+expression in a string, and return its AST. It will not complain if
+there is more of the string left after the expression.
+
+**tokenizer**`(input, options)` returns an object with a `getToken`
+method that can be called repeatedly to get the next token, a `{start,
+end, type, value}` object (with added `loc` property when the
+`locations` option is enabled and `range` property when the `ranges`
+option is enabled). When the token's type is `tokTypes.eof`, you
+should stop calling the method, since it will keep returning that same
+token forever.
+
+In ES6 environment, returned result can be used as any other
+protocol-compliant iterable:
+
+```javascript
+for (let token of acorn.tokenizer(str)) {
+  // iterate over the tokens
+}
+
+// transform code to array of tokens:
+var tokens = [...acorn.tokenizer(str)];
+```
+
+**tokTypes** holds an object mapping names to the token type objects
+that end up in the `type` properties of tokens.
+
+**getLineInfo**`(input, offset)` can be used to get a `{line,
+column}` object for a given program string and offset.
+
+### The `Parser` class
+
+Instances of the **`Parser`** class contain all the state and logic
+that drives a parse. It has static methods `parse`,
+`parseExpressionAt`, and `tokenizer` that match the top-level
+functions by the same name.
+
+When extending the parser with plugins, you need to call these methods
+on the extended version of the class. To extend a parser with plugins,
+you can use its static `extend` method.
+
+```javascript
+var acorn = require("acorn");
+var jsx = require("acorn-jsx");
+var JSXParser = acorn.Parser.extend(jsx());
+JSXParser.parse("foo(<bar/>)", {ecmaVersion: 2020});
+```
+
+The `extend` method takes any number of plugin values, and returns a
+new `Parser` class that includes the extra parser logic provided by
+the plugins.
+
+## Command line interface
+
+The `bin/acorn` utility can be used to parse a file from the command
+line. It accepts as arguments its input file and the following
+options:
+
+- `--ecma3|--ecma5|--ecma6|--ecma7|--ecma8|--ecma9|--ecma10`: Sets the ECMAScript version
+  to parse. Default is version 9.
+
+- `--module`: Sets the parsing mode to `"module"`. Is set to `"script"` otherwise.
+
+- `--locations`: Attaches a "loc" object to each node with "start" and
+  "end" subobjects, each of which contains the one-based line and
+  zero-based column numbers in `{line, column}` form.
+
+- `--allow-hash-bang`: If the code starts with the characters #! (as
+  in a shellscript), the first line will be treated as a comment.
+
+- `--allow-await-outside-function`: Allows top-level `await` expressions.
+  See the `allowAwaitOutsideFunction` option for more information.
+
+- `--compact`: No whitespace is used in the AST output.
+
+- `--silent`: Do not output the AST, just return the exit status.
+
+- `--help`: Print the usage information and quit.
+
+The utility spits out the syntax tree as JSON data.
+
+## Existing plugins
+
+ - [`acorn-jsx`](https://github.com/RReverser/acorn-jsx): Parse [Facebook JSX syntax extensions](https://github.com/facebook/jsx)

github/codeql-action-v1/node_modules/ava/node_modules/acorn/bin/acorn

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+"use strict"
+
+require("../dist/bin.js")

github/codeql-action-v1/node_modules/ava/node_modules/acorn/dist/acorn.d.ts

@@ -0,0 +1,252 @@
+export as namespace acorn
+export = acorn
+
+declare namespace acorn {
+  function parse(input: string, options: Options): Node
+
+  function parseExpressionAt(input: string, pos: number, options: Options): Node
+
+  function tokenizer(input: string, options: Options): {
+    getToken(): Token
+    [Symbol.iterator](): Iterator<Token>
+  }
+
+  type ecmaVersion = 3 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 2015 | 2016 | 2017 | 2018 | 2019 | 2020 | 2021 | 2022 | 'latest'
+
+  interface Options {
+    ecmaVersion: ecmaVersion
+    sourceType?: 'script' | 'module'
+    onInsertedSemicolon?: (lastTokEnd: number, lastTokEndLoc?: Position) => void
+    onTrailingComma?: (lastTokEnd: number, lastTokEndLoc?: Position) => void
+    allowReserved?: boolean | 'never'
+    allowReturnOutsideFunction?: boolean
+    allowImportExportEverywhere?: boolean
+    allowAwaitOutsideFunction?: boolean
+    allowSuperOutsideMethod?: boolean
+    allowHashBang?: boolean
+    locations?: boolean
+    onToken?: ((token: Token) => any) | Token[]
+    onComment?: ((
+      isBlock: boolean, text: string, start: number, end: number, startLoc?: Position,
+      endLoc?: Position
+    ) => void) | Comment[]
+    ranges?: boolean
+    program?: Node
+    sourceFile?: string
+    directSourceFile?: string
+    preserveParens?: boolean
+  }
+
+  class Parser {
+    // state.js
+    lineStart: number;
+    options: Options;
+    curLine: number;
+    start: number;
+    end: number;
+    input: string;
+    type: TokenType;
+
+    // state.js
+    constructor(options: Options, input: string, startPos?: number)
+    parse(this: Parser): Node
+
+    // tokenize.js
+    next(): void;
+    nextToken(): void;
+
+    // statement.js
+    parseTopLevel(node: Node): Node;
+
+    // node.js
+    finishNode(node: Node, type: string): Node;
+    finishNodeAt(node: Node, type: string, pos: number, loc: Position): Node;
+
+    // location.js
+    raise(pos: number, message: string) : void;
+    raiseRecoverable?(pos: number, message: string) : void;
+
+    // parseutils.js
+    unexpected(pos: number) : void;
+
+    // index.js
+    static acorn: typeof acorn;
+
+    // state.js
+    static parse(this: typeof Parser, input: string, options: Options): Node
+    static parseExpressionAt(this: typeof Parser, input: string, pos: number, options: Options): Node
+    static tokenizer(this: typeof Parser, input: string, options: Options): {
+      getToken(): Token
+      [Symbol.iterator](): Iterator<Token>
+    }
+    static extend(this: typeof Parser, ...plugins: ((BaseParser: typeof Parser) => typeof Parser)[]): typeof Parser
+  }
+
+  interface Position { line: number; column: number; offset: number }
+
+  const defaultOptions: Options
+
+  function getLineInfo(input: string, offset: number): Position
+
+  class SourceLocation {
+    start: Position
+    end: Position
+    source?: string | null
+    constructor(p: Parser, start: Position, end: Position)
+  }
+
+  class Node {
+    type: string
+    start: number
+    end: number
+    loc?: SourceLocation
+    sourceFile?: string
+    range?: [number, number]
+    constructor(parser: Parser, pos: number, loc?: SourceLocation)
+  }
+
+  class TokenType {
+    label: string
+    keyword: string
+    beforeExpr: boolean
+    startsExpr: boolean
+    isLoop: boolean
+    isAssign: boolean
+    prefix: boolean
+    postfix: boolean
+    binop: number
+    updateContext?: (prevType: TokenType) => void
+    constructor(label: string, conf?: any)
+  }
+
+  const tokTypes: {
+    num: TokenType
+    regexp: TokenType
+    string: TokenType
+    name: TokenType
+    privateId: TokenType
+    eof: TokenType
+    bracketL: TokenType
+    bracketR: TokenType
+    braceL: TokenType
+    braceR: TokenType
+    parenL: TokenType
+    parenR: TokenType
+    comma: TokenType
+    semi: TokenType
+    colon: TokenType
+    dot: TokenType
+    question: TokenType
+    questionDot: TokenType
+    arrow: TokenType
+    template: TokenType
+    invalidTemplate: TokenType
+    ellipsis: TokenType
+    backQuote: TokenType
+    dollarBraceL: TokenType
+    eq: TokenType
+    assign: TokenType
+    incDec: TokenType
+    prefix: TokenType
+    logicalOR: TokenType
+    logicalAND: TokenType
+    bitwiseOR: TokenType
+    bitwiseXOR: TokenType
+    bitwiseAND: TokenType
+    equality: TokenType
+    relational: TokenType
+    bitShift: TokenType
+    plusMin: TokenType
+    modulo: TokenType
+    star: TokenType
+    slash: TokenType
+    starstar: TokenType
+    coalesce: TokenType
+    _break: TokenType
+    _case: TokenType
+    _catch: TokenType
+    _continue: TokenType
+    _debugger: TokenType
+    _default: TokenType
+    _do: TokenType
+    _else: TokenType
+    _finally: TokenType
+    _for: TokenType
+    _function: TokenType
+    _if: TokenType
+    _return: TokenType
+    _switch: TokenType
+    _throw: TokenType
+    _try: TokenType
+    _var: TokenType
+    _const: TokenType
+    _while: TokenType
+    _with: TokenType
+    _new: TokenType
+    _this: TokenType
+    _super: TokenType
+    _class: TokenType
+    _extends: TokenType
+    _export: TokenType
+    _import: TokenType
+    _null: TokenType
+    _true: TokenType
+    _false: TokenType
+    _in: TokenType
+    _instanceof: TokenType
+    _typeof: TokenType
+    _void: TokenType
+    _delete: TokenType
+  }
+
+  class TokContext {
+    constructor(token: string, isExpr: boolean, preserveSpace: boolean, override?: (p: Parser) => void)
+  }
+
+  const tokContexts: {
+    b_stat: TokContext
+    b_expr: TokContext
+    b_tmpl: TokContext
+    p_stat: TokContext
+    p_expr: TokContext
+    q_tmpl: TokContext
+    f_expr: TokContext
+    f_stat: TokContext
+    f_expr_gen: TokContext
+    f_gen: TokContext
+  }
+
+  function isIdentifierStart(code: number, astral?: boolean): boolean
+
+  function isIdentifierChar(code: number, astral?: boolean): boolean
+
+  interface AbstractToken {
+  }
+
+  interface Comment extends AbstractToken {
+    type: string
+    value: string
+    start: number
+    end: number
+    loc?: SourceLocation
+    range?: [number, number]
+  }
+
+  class Token {
+    type: TokenType
+    value: any
+    start: number
+    end: number
+    loc?: SourceLocation
+    range?: [number, number]
+    constructor(p: Parser)
+  }
+
+  function isNewLine(code: number): boolean
+
+  const lineBreak: RegExp
+
+  const lineBreakG: RegExp
+
+  const version: string
+}

github/codeql-action-v1/node_modules/ava/node_modules/acorn/dist/acorn.mjs.d.ts

@@ -0,0 +1,2 @@
+import * as acorn from "./acorn";
+export = acorn;

github/codeql-action-v1/node_modules/ava/node_modules/acorn/dist/bin.js

@@ -0,0 +1,91 @@
+'use strict';
+
+var path = require('path');
+var fs = require('fs');
+var acorn = require('./acorn.js');
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n["default"] = e;
+  return Object.freeze(n);
+}
+
+var acorn__namespace = /*#__PURE__*/_interopNamespace(acorn);
+
+var inputFilePaths = [], forceFileName = false, fileMode = false, silent = false, compact = false, tokenize = false;
+var options = {};
+
+function help(status) {
+  var print = (status === 0) ? console.log : console.error;
+  print("usage: " + path.basename(process.argv[1]) + " [--ecma3|--ecma5|--ecma6|--ecma7|--ecma8|--ecma9|...|--ecma2015|--ecma2016|--ecma2017|--ecma2018|...]");
+  print("        [--tokenize] [--locations] [--allow-hash-bang] [--allow-await-outside-function] [--compact] [--silent] [--module] [--help] [--] [<infile>...]");
+  process.exit(status);
+}
+
+for (var i = 2; i < process.argv.length; ++i) {
+  var arg = process.argv[i];
+  if (arg[0] !== "-" || arg === "-") { inputFilePaths.push(arg); }
+  else if (arg === "--") {
+    inputFilePaths.push.apply(inputFilePaths, process.argv.slice(i + 1));
+    forceFileName = true;
+    break
+  } else if (arg === "--locations") { options.locations = true; }
+  else if (arg === "--allow-hash-bang") { options.allowHashBang = true; }
+  else if (arg === "--allow-await-outside-function") { options.allowAwaitOutsideFunction = true; }
+  else if (arg === "--silent") { silent = true; }
+  else if (arg === "--compact") { compact = true; }
+  else if (arg === "--help") { help(0); }
+  else if (arg === "--tokenize") { tokenize = true; }
+  else if (arg === "--module") { options.sourceType = "module"; }
+  else {
+    var match = arg.match(/^--ecma(\d+)$/);
+    if (match)
+      { options.ecmaVersion = +match[1]; }
+    else
+      { help(1); }
+  }
+}
+
+function run(codeList) {
+  var result = [], fileIdx = 0;
+  try {
+    codeList.forEach(function (code, idx) {
+      fileIdx = idx;
+      if (!tokenize) {
+        result = acorn__namespace.parse(code, options);
+        options.program = result;
+      } else {
+        var tokenizer = acorn__namespace.tokenizer(code, options), token;
+        do {
+          token = tokenizer.getToken();
+          result.push(token);
+        } while (token.type !== acorn__namespace.tokTypes.eof)
+      }
+    });
+  } catch (e) {
+    console.error(fileMode ? e.message.replace(/\(\d+:\d+\)$/, function (m) { return m.slice(0, 1) + inputFilePaths[fileIdx] + " " + m.slice(1); }) : e.message);
+    process.exit(1);
+  }
+  if (!silent) { console.log(JSON.stringify(result, null, compact ? null : 2)); }
+}
+
+if (fileMode = inputFilePaths.length && (forceFileName || !inputFilePaths.includes("-") || inputFilePaths.length !== 1)) {
+  run(inputFilePaths.map(function (path) { return fs.readFileSync(path, "utf8"); }));
+} else {
+  var code = "";
+  process.stdin.resume();
+  process.stdin.on("data", function (chunk) { return code += chunk; });
+  process.stdin.on("end", function () { return run([code]); });
+}

github/codeql-action-v1/node_modules/ava/node_modules/acorn/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "acorn",
+  "description": "ECMAScript parser",
+  "homepage": "https://github.com/acornjs/acorn",
+  "main": "dist/acorn.js",
+  "types": "dist/acorn.d.ts",
+  "module": "dist/acorn.mjs",
+  "exports": {
+    ".": [
+      {
+        "import": "./dist/acorn.mjs",
+        "require": "./dist/acorn.js",
+        "default": "./dist/acorn.js"
+      },
+      "./dist/acorn.js"
+    ],
+    "./package.json": "./package.json"
+  },
+  "version": "8.8.0",
+  "engines": {
+    "node": ">=0.4.0"
+  },
+  "maintainers": [
+    {
+      "name": "Marijn Haverbeke",
+      "email": "marijnh@gmail.com",
+      "web": "https://marijnhaverbeke.nl"
+    },
+    {
+      "name": "Ingvar Stepanyan",
+      "email": "me@rreverser.com",
+      "web": "https://rreverser.com/"
+    },
+    {
+      "name": "Adrian Heine",
+      "web": "http://adrianheine.de"
+    }
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/acornjs/acorn.git"
+  },
+  "license": "MIT",
+  "scripts": {
+    "prepare": "cd ..; npm run build:main"
+  },
+  "bin": {
+    "acorn": "./bin/acorn"
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/aggregate-error/index.d.ts

@@ -0,0 +1,47 @@
+/**
+Create an error from multiple errors.
+*/
+export default class AggregateError<T extends Error = Error> extends Error {
+	readonly name: 'AggregateError';
+
+	readonly errors: readonly [T];
+
+	/**
+	@param errors - If a string, a new `Error` is created with the string as the error message. If a non-Error object, a new `Error` is created with all properties from the object copied over.
+
+	@example
+	```
+	import AggregateError from 'aggregate-error';
+
+	const error = new AggregateError([new Error('foo'), 'bar', {message: 'baz'}]);
+
+	throw error;
+
+	// AggregateError:
+	//	Error: foo
+	//		at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:33)
+	//	Error: bar
+	//		at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:13)
+	//	Error: baz
+	//		at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:13)
+	//	at AggregateError (/Users/sindresorhus/dev/aggregate-error/index.js:19:3)
+	//	at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:13)
+	//	at Module._compile (module.js:556:32)
+	//	at Object.Module._extensions..js (module.js:565:10)
+	//	at Module.load (module.js:473:32)
+	//	at tryModuleLoad (module.js:432:12)
+	//	at Function.Module._load (module.js:424:3)
+	//	at Module.runMain (module.js:590:10)
+	//	at run (bootstrap_node.js:394:7)
+	//	at startup (bootstrap_node.js:149:9)
+
+	for (const individualError of error.errors) {
+		console.log(individualError);
+	}
+	//=> [Error: foo]
+	//=> [Error: bar]
+	//=> [Error: baz]
+	```
+	*/
+	constructor(errors: ReadonlyArray<T | Record<string, any> | string>);
+}

github/codeql-action-v1/node_modules/ava/node_modules/aggregate-error/index.js

@@ -0,0 +1,44 @@
+import indentString from 'indent-string';
+import cleanStack from 'clean-stack';
+
+const cleanInternalStack = stack => stack.replace(/\s+at .*aggregate-error\/index.js:\d+:\d+\)?/g, '');
+
+export default class AggregateError extends Error {
+	#errors;
+
+	name = 'AggregateError';
+
+	constructor(errors) {
+		if (!Array.isArray(errors)) {
+			throw new TypeError(`Expected input to be an Array, got ${typeof errors}`);
+		}
+
+		errors = errors.map(error => {
+			if (error instanceof Error) {
+				return error;
+			}
+
+			if (error !== null && typeof error === 'object') {
+				// Handle plain error objects with message property and/or possibly other metadata
+				return Object.assign(new Error(error.message), error);
+			}
+
+			return new Error(error);
+		});
+
+		let message = errors
+			.map(error => {
+				// The `stack` property is not standardized, so we can't assume it exists
+				return typeof error.stack === 'string' && error.stack.length > 0 ? cleanInternalStack(cleanStack(error.stack)) : String(error);
+			})
+			.join('\n');
+		message = '\n' + indentString(message, 4);
+		super(message);
+
+		this.#errors = errors;
+	}
+
+	get errors() {
+		return this.#errors.slice();
+	}
+}

github/codeql-action-v1/node_modules/ava/node_modules/aggregate-error/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/aggregate-error/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "aggregate-error",
+  "version": "4.0.1",
+  "description": "Create an error from multiple errors",
+  "license": "MIT",
+  "repository": "sindresorhus/aggregate-error",
+  "funding": "https://github.com/sponsors/sindresorhus",
+  "author": {
+    "name": "Sindre Sorhus",
+    "email": "sindresorhus@gmail.com",
+    "url": "https://sindresorhus.com"
+  },
+  "type": "module",
+  "exports": "./index.js",
+  "engines": {
+    "node": ">=12"
+  },
+  "scripts": {
+    "//test": "xo && ava && tsd",
+    "test": "ava && tsd"
+  },
+  "files": [
+    "index.js",
+    "index.d.ts"
+  ],
+  "keywords": [
+    "aggregate",
+    "error",
+    "combine",
+    "multiple",
+    "many",
+    "collection",
+    "iterable",
+    "iterator"
+  ],
+  "dependencies": {
+    "clean-stack": "^4.0.0",
+    "indent-string": "^5.0.0"
+  },
+  "devDependencies": {
+    "ava": "^3.15.0",
+    "tsd": "^0.14.0",
+    "xo": "^0.38.2"
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/aggregate-error/readme.md

@@ -0,0 +1,60 @@
+# aggregate-error
+
+> Create an error from multiple errors
+
+*Note: With [Node.js 15](https://medium.com/@nodejs/node-js-v15-0-0-is-here-deb00750f278), there's now a built-in [`AggregateError`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/AggregateError) type.*
+
+## Install
+
+```
+$ npm install aggregate-error
+```
+
+## Usage
+
+```js
+import AggregateError from 'aggregate-error';
+
+const error = new AggregateError([new Error('foo'), 'bar', {message: 'baz'}]);
+
+throw error;
+/*
+AggregateError:
+    Error: foo
+        at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:33)
+    Error: bar
+        at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:13)
+    Error: baz
+        at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:13)
+    at AggregateError (/Users/sindresorhus/dev/aggregate-error/index.js:19:3)
+    at Object.<anonymous> (/Users/sindresorhus/dev/aggregate-error/example.js:3:13)
+    at Module._compile (module.js:556:32)
+    at Object.Module._extensions..js (module.js:565:10)
+    at Module.load (module.js:473:32)
+    at tryModuleLoad (module.js:432:12)
+    at Function.Module._load (module.js:424:3)
+    at Module.runMain (module.js:590:10)
+    at run (bootstrap_node.js:394:7)
+    at startup (bootstrap_node.js:149:9)
+*/
+
+for (const individualError of error.errors) {
+	console.log(individualError);
+}
+//=> [Error: foo]
+//=> [Error: bar]
+//=> [Error: baz]
+```
+
+## API
+
+### AggregateError(errors)
+
+Returns an `Error`.
+
+#### errors
+
+Type: `Array<Error|object|string>`
+
+If a string, a new `Error` is created with the string as the error message.\
+If a non-Error object, a new `Error` is created with all properties from the object copied over.

github/codeql-action-v1/node_modules/ava/node_modules/ansi-regex/index.d.ts

@@ -0,0 +1,33 @@
+export interface Options {
+	/**
+	Match only the first ANSI escape.
+
+	@default false
+	*/
+	readonly onlyFirst: boolean;
+}
+
+/**
+Regular expression for matching ANSI escape codes.
+
+@example
+```
+import ansiRegex from 'ansi-regex';
+
+ansiRegex().test('\u001B[4mcake\u001B[0m');
+//=> true
+
+ansiRegex().test('cake');
+//=> false
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex());
+//=> ['\u001B[4m', '\u001B[0m']
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex({onlyFirst: true}));
+//=> ['\u001B[4m']
+
+'\u001B]8;;https://github.com\u0007click\u001B]8;;\u0007'.match(ansiRegex());
+//=> ['\u001B]8;;https://github.com\u0007', '\u001B]8;;\u0007']
+```
+*/
+export default function ansiRegex(options?: Options): RegExp;

github/codeql-action-v1/node_modules/ava/node_modules/ansi-regex/index.js

@@ -0,0 +1,8 @@
+export default function ansiRegex({onlyFirst = false} = {}) {
+	const pattern = [
+	    '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
+		'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
+	].join('|');
+
+	return new RegExp(pattern, onlyFirst ? undefined : 'g');
+}

github/codeql-action-v1/node_modules/ava/node_modules/ansi-regex/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/ansi-regex/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "ansi-regex",
+  "version": "6.0.1",
+  "description": "Regular expression for matching ANSI escape codes",
+  "license": "MIT",
+  "repository": "chalk/ansi-regex",
+  "funding": "https://github.com/chalk/ansi-regex?sponsor=1",
+  "author": {
+    "name": "Sindre Sorhus",
+    "email": "sindresorhus@gmail.com",
+    "url": "https://sindresorhus.com"
+  },
+  "type": "module",
+  "exports": "./index.js",
+  "engines": {
+    "node": ">=12"
+  },
+  "scripts": {
+    "test": "xo && ava && tsd",
+    "view-supported": "node fixtures/view-codes.js"
+  },
+  "files": [
+    "index.js",
+    "index.d.ts"
+  ],
+  "keywords": [
+    "ansi",
+    "styles",
+    "color",
+    "colour",
+    "colors",
+    "terminal",
+    "console",
+    "cli",
+    "string",
+    "tty",
+    "escape",
+    "formatting",
+    "rgb",
+    "256",
+    "shell",
+    "xterm",
+    "command-line",
+    "text",
+    "regex",
+    "regexp",
+    "re",
+    "match",
+    "test",
+    "find",
+    "pattern"
+  ],
+  "devDependencies": {
+    "ava": "^3.15.0",
+    "tsd": "^0.14.0",
+    "xo": "^0.38.2"
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/ansi-regex/readme.md

@@ -0,0 +1,72 @@
+# ansi-regex
+
+> Regular expression for matching [ANSI escape codes](https://en.wikipedia.org/wiki/ANSI_escape_code)
+
+## Install
+
+```
+$ npm install ansi-regex
+```
+
+## Usage
+
+```js
+import ansiRegex from 'ansi-regex';
+
+ansiRegex().test('\u001B[4mcake\u001B[0m');
+//=> true
+
+ansiRegex().test('cake');
+//=> false
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex());
+//=> ['\u001B[4m', '\u001B[0m']
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex({onlyFirst: true}));
+//=> ['\u001B[4m']
+
+'\u001B]8;;https://github.com\u0007click\u001B]8;;\u0007'.match(ansiRegex());
+//=> ['\u001B]8;;https://github.com\u0007', '\u001B]8;;\u0007']
+```
+
+## API
+
+### ansiRegex(options?)
+
+Returns a regex for matching ANSI escape codes.
+
+#### options
+
+Type: `object`
+
+##### onlyFirst
+
+Type: `boolean`\
+Default: `false` *(Matches any ANSI escape codes in a string)*
+
+Match only the first ANSI escape.
+
+## FAQ
+
+### Why do you test for codes not in the ECMA 48 standard?
+
+Some of the codes we run as a test are codes that we acquired finding various lists of non-standard or manufacturer specific codes. We test for both standard and non-standard codes, as most of them follow the same or similar format and can be safely matched in strings without the risk of removing actual string content. There are a few non-standard control codes that do not follow the traditional format (i.e. they end in numbers) thus forcing us to exclude them from the test because we cannot reliably match them.
+
+On the historical side, those ECMA standards were established in the early 90's whereas the VT100, for example, was designed in the mid/late 70's. At that point in time, control codes were still pretty ungoverned and engineers used them for a multitude of things, namely to activate hardware ports that may have been proprietary. Somewhere else you see a similar 'anarchy' of codes is in the x86 architecture for processors; there are a ton of "interrupts" that can mean different things on certain brands of processors, most of which have been phased out.
+
+## Maintainers
+
+- [Sindre Sorhus](https://github.com/sindresorhus)
+- [Josh Junon](https://github.com/qix-)
+
+---
+
+<div align="center">
+	<b>
+		<a href="https://tidelift.com/subscription/pkg/npm-ansi-regex?utm_source=npm-ansi-regex&utm_medium=referral&utm_campaign=readme">Get professional support for this package with a Tidelift subscription</a>
+	</b>
+	<br>
+	<sub>
+		Tidelift helps make open source sustainable for maintainers while giving companies<br>assurances about security, maintenance, and licensing for their dependencies.
+	</sub>
+</div>

github/codeql-action-v1/node_modules/ava/node_modules/ansi-styles/index.d.ts

@@ -0,0 +1,190 @@
+export interface CSPair {
+	/**
+	The ANSI terminal control sequence for starting this style.
+	*/
+	readonly open: string;
+
+	/**
+	The ANSI terminal control sequence for ending this style.
+	*/
+	readonly close: string;
+}
+
+export interface ColorBase {
+	/**
+	The ANSI terminal control sequence for ending this color.
+	*/
+	readonly close: string;
+
+	ansi(code: number): string;
+
+	ansi256(code: number): string;
+
+	ansi16m(red: number, green: number, blue: number): string;
+}
+
+export interface Modifier {
+	/**
+	Resets the current color chain.
+	*/
+	readonly reset: CSPair;
+
+	/**
+	Make text bold.
+	*/
+	readonly bold: CSPair;
+
+	/**
+	Emitting only a small amount of light.
+	*/
+	readonly dim: CSPair;
+
+	/**
+	Make text italic. (Not widely supported)
+	*/
+	readonly italic: CSPair;
+
+	/**
+	Make text underline. (Not widely supported)
+	*/
+	readonly underline: CSPair;
+
+	/**
+	Make text overline.
+
+	Supported on VTE-based terminals, the GNOME terminal, mintty, and Git Bash.
+	*/
+	readonly overline: CSPair;
+
+	/**
+	Inverse background and foreground colors.
+	*/
+	readonly inverse: CSPair;
+
+	/**
+	Prints the text, but makes it invisible.
+	*/
+	readonly hidden: CSPair;
+
+	/**
+	Puts a horizontal line through the center of the text. (Not widely supported)
+	*/
+	readonly strikethrough: CSPair;
+}
+
+export interface ForegroundColor {
+	readonly black: CSPair;
+	readonly red: CSPair;
+	readonly green: CSPair;
+	readonly yellow: CSPair;
+	readonly blue: CSPair;
+	readonly cyan: CSPair;
+	readonly magenta: CSPair;
+	readonly white: CSPair;
+
+	/**
+	Alias for `blackBright`.
+	*/
+	readonly gray: CSPair;
+
+	/**
+	Alias for `blackBright`.
+	*/
+	readonly grey: CSPair;
+
+	readonly blackBright: CSPair;
+	readonly redBright: CSPair;
+	readonly greenBright: CSPair;
+	readonly yellowBright: CSPair;
+	readonly blueBright: CSPair;
+	readonly cyanBright: CSPair;
+	readonly magentaBright: CSPair;
+	readonly whiteBright: CSPair;
+}
+
+export interface BackgroundColor {
+	readonly bgBlack: CSPair;
+	readonly bgRed: CSPair;
+	readonly bgGreen: CSPair;
+	readonly bgYellow: CSPair;
+	readonly bgBlue: CSPair;
+	readonly bgCyan: CSPair;
+	readonly bgMagenta: CSPair;
+	readonly bgWhite: CSPair;
+
+	/**
+	Alias for `bgBlackBright`.
+	*/
+	readonly bgGray: CSPair;
+
+	/**
+	Alias for `bgBlackBright`.
+	*/
+	readonly bgGrey: CSPair;
+
+	readonly bgBlackBright: CSPair;
+	readonly bgRedBright: CSPair;
+	readonly bgGreenBright: CSPair;
+	readonly bgYellowBright: CSPair;
+	readonly bgBlueBright: CSPair;
+	readonly bgCyanBright: CSPair;
+	readonly bgMagentaBright: CSPair;
+	readonly bgWhiteBright: CSPair;
+}
+
+export interface ConvertColor {
+	/**
+	Convert from the RGB color space to the ANSI 256 color space.
+
+	@param red - (`0...255`)
+	@param green - (`0...255`)
+	@param blue - (`0...255`)
+	*/
+	rgbToAnsi256(red: number, green: number, blue: number): number;
+
+	/**
+	Convert from the RGB HEX color space to the RGB color space.
+
+	@param hex - A hexadecimal string containing RGB data.
+	*/
+	hexToRgb(hex: string): [red: number, green: number, blue: number];
+
+	/**
+	Convert from the RGB HEX color space to the ANSI 256 color space.
+
+	@param hex - A hexadecimal string containing RGB data.
+	*/
+	hexToAnsi256(hex: string): number;
+
+	/**
+	Convert from the ANSI 256 color space to the ANSI 16 color space.
+
+	@param code - A number representing the ANSI 256 color.
+	*/
+	ansi256ToAnsi(code: number): number;
+
+	/**
+	Convert from the RGB color space to the ANSI 16 color space.
+
+	@param red - (`0...255`)
+	@param green - (`0...255`)
+	@param blue - (`0...255`)
+	*/
+	rgbToAnsi(red: number, green: number, blue: number): number;
+
+	/**
+	Convert from the RGB HEX color space to the ANSI 16 color space.
+
+	@param hex - A hexadecimal string containing RGB data.
+	*/
+	hexToAnsi(hex: string): number;
+}
+
+declare const ansiStyles: {
+	readonly modifier: Modifier;
+	readonly color: ColorBase & ForegroundColor;
+	readonly bgColor: ColorBase & BackgroundColor;
+	readonly codes: ReadonlyMap<number, number>;
+} & ForegroundColor & BackgroundColor & Modifier & ConvertColor;
+
+export default ansiStyles;

github/codeql-action-v1/node_modules/ava/node_modules/ansi-styles/index.js

@@ -0,0 +1,216 @@
+const ANSI_BACKGROUND_OFFSET = 10;
+
+const wrapAnsi16 = (offset = 0) => code => `\u001B[${code + offset}m`;
+
+const wrapAnsi256 = (offset = 0) => code => `\u001B[${38 + offset};5;${code}m`;
+
+const wrapAnsi16m = (offset = 0) => (red, green, blue) => `\u001B[${38 + offset};2;${red};${green};${blue}m`;
+
+function assembleStyles() {
+	const codes = new Map();
+	const styles = {
+		modifier: {
+			reset: [0, 0],
+			// 21 isn't widely supported and 22 does the same thing
+			bold: [1, 22],
+			dim: [2, 22],
+			italic: [3, 23],
+			underline: [4, 24],
+			overline: [53, 55],
+			inverse: [7, 27],
+			hidden: [8, 28],
+			strikethrough: [9, 29]
+		},
+		color: {
+			black: [30, 39],
+			red: [31, 39],
+			green: [32, 39],
+			yellow: [33, 39],
+			blue: [34, 39],
+			magenta: [35, 39],
+			cyan: [36, 39],
+			white: [37, 39],
+
+			// Bright color
+			blackBright: [90, 39],
+			redBright: [91, 39],
+			greenBright: [92, 39],
+			yellowBright: [93, 39],
+			blueBright: [94, 39],
+			magentaBright: [95, 39],
+			cyanBright: [96, 39],
+			whiteBright: [97, 39]
+		},
+		bgColor: {
+			bgBlack: [40, 49],
+			bgRed: [41, 49],
+			bgGreen: [42, 49],
+			bgYellow: [43, 49],
+			bgBlue: [44, 49],
+			bgMagenta: [45, 49],
+			bgCyan: [46, 49],
+			bgWhite: [47, 49],
+
+			// Bright color
+			bgBlackBright: [100, 49],
+			bgRedBright: [101, 49],
+			bgGreenBright: [102, 49],
+			bgYellowBright: [103, 49],
+			bgBlueBright: [104, 49],
+			bgMagentaBright: [105, 49],
+			bgCyanBright: [106, 49],
+			bgWhiteBright: [107, 49]
+		}
+	};
+
+	// Alias bright black as gray (and grey)
+	styles.color.gray = styles.color.blackBright;
+	styles.bgColor.bgGray = styles.bgColor.bgBlackBright;
+	styles.color.grey = styles.color.blackBright;
+	styles.bgColor.bgGrey = styles.bgColor.bgBlackBright;
+
+	for (const [groupName, group] of Object.entries(styles)) {
+		for (const [styleName, style] of Object.entries(group)) {
+			styles[styleName] = {
+				open: `\u001B[${style[0]}m`,
+				close: `\u001B[${style[1]}m`
+			};
+
+			group[styleName] = styles[styleName];
+
+			codes.set(style[0], style[1]);
+		}
+
+		Object.defineProperty(styles, groupName, {
+			value: group,
+			enumerable: false
+		});
+	}
+
+	Object.defineProperty(styles, 'codes', {
+		value: codes,
+		enumerable: false
+	});
+
+	styles.color.close = '\u001B[39m';
+	styles.bgColor.close = '\u001B[49m';
+
+	styles.color.ansi = wrapAnsi16();
+	styles.color.ansi256 = wrapAnsi256();
+	styles.color.ansi16m = wrapAnsi16m();
+	styles.bgColor.ansi = wrapAnsi16(ANSI_BACKGROUND_OFFSET);
+	styles.bgColor.ansi256 = wrapAnsi256(ANSI_BACKGROUND_OFFSET);
+	styles.bgColor.ansi16m = wrapAnsi16m(ANSI_BACKGROUND_OFFSET);
+
+	// From https://github.com/Qix-/color-convert/blob/3f0e0d4e92e235796ccb17f6e85c72094a651f49/conversions.js
+	Object.defineProperties(styles, {
+		rgbToAnsi256: {
+			value: (red, green, blue) => {
+				// We use the extended greyscale palette here, with the exception of
+				// black and white. normal palette only has 4 greyscale shades.
+				if (red === green && green === blue) {
+					if (red < 8) {
+						return 16;
+					}
+
+					if (red > 248) {
+						return 231;
+					}
+
+					return Math.round(((red - 8) / 247) * 24) + 232;
+				}
+
+				return 16 +
+					(36 * Math.round(red / 255 * 5)) +
+					(6 * Math.round(green / 255 * 5)) +
+					Math.round(blue / 255 * 5);
+			},
+			enumerable: false
+		},
+		hexToRgb: {
+			value: hex => {
+				const matches = /(?<colorString>[a-f\d]{6}|[a-f\d]{3})/i.exec(hex.toString(16));
+				if (!matches) {
+					return [0, 0, 0];
+				}
+
+				let {colorString} = matches.groups;
+
+				if (colorString.length === 3) {
+					colorString = colorString.split('').map(character => character + character).join('');
+				}
+
+				const integer = Number.parseInt(colorString, 16);
+
+				return [
+					(integer >> 16) & 0xFF,
+					(integer >> 8) & 0xFF,
+					integer & 0xFF
+				];
+			},
+			enumerable: false
+		},
+		hexToAnsi256: {
+			value: hex => styles.rgbToAnsi256(...styles.hexToRgb(hex)),
+			enumerable: false
+		},
+		ansi256ToAnsi: {
+			value: code => {
+				if (code < 8) {
+					return 30 + code;
+				}
+
+				if (code < 16) {
+					return 90 + (code - 8);
+				}
+
+				let red;
+				let green;
+				let blue;
+
+				if (code >= 232) {
+					red = (((code - 232) * 10) + 8) / 255;
+					green = red;
+					blue = red;
+				} else {
+					code -= 16;
+
+					const remainder = code % 36;
+
+					red = Math.floor(code / 36) / 5;
+					green = Math.floor(remainder / 6) / 5;
+					blue = (remainder % 6) / 5;
+				}
+
+				const value = Math.max(red, green, blue) * 2;
+
+				if (value === 0) {
+					return 30;
+				}
+
+				let result = 30 + ((Math.round(blue) << 2) | (Math.round(green) << 1) | Math.round(red));
+
+				if (value === 2) {
+					result += 60;
+				}
+
+				return result;
+			},
+			enumerable: false
+		},
+		rgbToAnsi: {
+			value: (red, green, blue) => styles.ansi256ToAnsi(styles.rgbToAnsi256(red, green, blue)),
+			enumerable: false
+		},
+		hexToAnsi: {
+			value: hex => styles.ansi256ToAnsi(styles.hexToAnsi256(hex)),
+			enumerable: false
+		}
+	});
+
+	return styles;
+}
+
+const ansiStyles = assembleStyles();
+
+export default ansiStyles;

github/codeql-action-v1/node_modules/ava/node_modules/ansi-styles/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/ansi-styles/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "ansi-styles",
+  "version": "6.1.0",
+  "description": "ANSI escape codes for styling strings in the terminal",
+  "license": "MIT",
+  "repository": "chalk/ansi-styles",
+  "funding": "https://github.com/chalk/ansi-styles?sponsor=1",
+  "author": {
+    "name": "Sindre Sorhus",
+    "email": "sindresorhus@gmail.com",
+    "url": "https://sindresorhus.com"
+  },
+  "type": "module",
+  "exports": "./index.js",
+  "engines": {
+    "node": ">=12"
+  },
+  "scripts": {
+    "test": "xo && ava && tsd",
+    "screenshot": "svg-term --command='node screenshot' --out=screenshot.svg --padding=3 --width=55 --height=3 --at=1000 --no-cursor"
+  },
+  "files": [
+    "index.js",
+    "index.d.ts"
+  ],
+  "keywords": [
+    "ansi",
+    "styles",
+    "color",
+    "colour",
+    "colors",
+    "terminal",
+    "console",
+    "cli",
+    "string",
+    "tty",
+    "escape",
+    "formatting",
+    "rgb",
+    "256",
+    "shell",
+    "xterm",
+    "log",
+    "logging",
+    "command-line",
+    "text"
+  ],
+  "devDependencies": {
+    "ava": "^3.15.0",
+    "svg-term-cli": "^2.1.1",
+    "tsd": "^0.14.0",
+    "xo": "^0.38.2"
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/ansi-styles/readme.md

@@ -0,0 +1,155 @@
+# ansi-styles
+
+> [ANSI escape codes](https://en.wikipedia.org/wiki/ANSI_escape_code#Colors_and_Styles) for styling strings in the terminal
+
+You probably want the higher-level [chalk](https://github.com/chalk/chalk) module for styling your strings.
+
+<img src="screenshot.svg" width="900">
+
+## Install
+
+```
+$ npm install ansi-styles
+```
+
+## Usage
+
+```js
+import styles from 'ansi-styles';
+
+console.log(`${styles.green.open}Hello world!${styles.green.close}`);
+
+
+// Color conversion between 256/truecolor
+// NOTE: When converting from truecolor to 256 colors, the original color
+//       may be degraded to fit the new color palette. This means terminals
+//       that do not support 16 million colors will best-match the
+//       original color.
+console.log(`${styles.color.ansi(styles.rgbToAnsi(199, 20, 250))}Hello World${styles.color.close}`)
+console.log(`${styles.color.ansi256(styles.rgbToAnsi256(199, 20, 250))}Hello World${styles.color.close}`)
+console.log(`${styles.color.ansi16m(...styles.hexToRgb('#abcdef'))}Hello World${styles.color.close}`)
+```
+
+## API
+
+Each style has an `open` and `close` property.
+
+## Styles
+
+### Modifiers
+
+- `reset`
+- `bold`
+- `dim`
+- `italic` *(Not widely supported)*
+- `underline`
+- `overline` *Supported on VTE-based terminals, the GNOME terminal, mintty, and Git Bash.*
+- `inverse`
+- `hidden`
+- `strikethrough` *(Not widely supported)*
+
+### Colors
+
+- `black`
+- `red`
+- `green`
+- `yellow`
+- `blue`
+- `magenta`
+- `cyan`
+- `white`
+- `blackBright` (alias: `gray`, `grey`)
+- `redBright`
+- `greenBright`
+- `yellowBright`
+- `blueBright`
+- `magentaBright`
+- `cyanBright`
+- `whiteBright`
+
+### Background colors
+
+- `bgBlack`
+- `bgRed`
+- `bgGreen`
+- `bgYellow`
+- `bgBlue`
+- `bgMagenta`
+- `bgCyan`
+- `bgWhite`
+- `bgBlackBright` (alias: `bgGray`, `bgGrey`)
+- `bgRedBright`
+- `bgGreenBright`
+- `bgYellowBright`
+- `bgBlueBright`
+- `bgMagentaBright`
+- `bgCyanBright`
+- `bgWhiteBright`
+
+## Advanced usage
+
+By default, you get a map of styles, but the styles are also available as groups. They are non-enumerable so they don't show up unless you access them explicitly. This makes it easier to expose only a subset in a higher-level module.
+
+- `styles.modifier`
+- `styles.color`
+- `styles.bgColor`
+
+###### Example
+
+```js
+import styles from 'ansi-styles';
+
+console.log(styles.color.green.open);
+```
+
+Raw escape codes (i.e. without the CSI escape prefix `\u001B[` and render mode postfix `m`) are available under `styles.codes`, which returns a `Map` with the open codes as keys and close codes as values.
+
+###### Example
+
+```js
+import styles from 'ansi-styles';
+
+console.log(styles.codes.get(36));
+//=> 39
+```
+
+## 16 / 256 / 16 million (TrueColor) support
+
+`ansi-styles` allows converting between various color formats and ANSI escapes, with support for 16, 256 and [16 million colors](https://gist.github.com/XVilka/8346728).
+
+The following color spaces are supported:
+
+- `rgb`
+- `hex`
+- `ansi256`
+- `ansi`
+
+To use these, call the associated conversion function with the intended output, for example:
+
+```js
+import styles from 'ansi-styles';
+
+styles.color.ansi(styles.rgbToAnsi(100, 200, 15)); // RGB to 16 color ansi foreground code
+styles.bgColor.ansi(styles.hexToAnsi('#C0FFEE')); // HEX to 16 color ansi foreground code
+
+styles.color.ansi256(styles.rgbToAnsi256(100, 200, 15)); // RGB to 256 color ansi foreground code
+styles.bgColor.ansi256(styles.hexToAnsi256('#C0FFEE')); // HEX to 256 color ansi foreground code
+
+styles.color.ansi16m(100, 200, 15); // RGB to 16 million color foreground code
+styles.bgColor.ansi16m(...styles.hexToRgb('#C0FFEE')); // Hex (RGB) to 16 million color foreground code
+```
+
+## Related
+
+- [ansi-escapes](https://github.com/sindresorhus/ansi-escapes) - ANSI escape codes for manipulating the terminal
+
+## Maintainers
+
+- [Sindre Sorhus](https://github.com/sindresorhus)
+- [Josh Junon](https://github.com/qix-)
+
+## For enterprise
+
+Available as part of the Tidelift Subscription.
+
+The maintainers of `ansi-styles` and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. [Learn more.](https://tidelift.com/subscription/pkg/npm-ansi-styles?utm_source=npm-ansi-styles&utm_medium=referral&utm_campaign=enterprise&utm_term=repo)

github/codeql-action-v1/node_modules/ava/node_modules/arrify/index.d.ts

@@ -0,0 +1,36 @@
+/**
+Convert a value to an array.
+
+_Specifying `null` or `undefined` results in an empty array._
+
+@example
+```
+import arrify from 'arrify';
+
+arrify('🦄');
+//=> ['🦄']
+
+arrify(['🦄']);
+//=> ['🦄']
+
+arrify(new Set(['🦄']));
+//=> ['🦄']
+
+arrify(null);
+//=> []
+
+arrify(undefined);
+//=> []
+```
+*/
+export default function arrify<ValueType>(
+	value: ValueType
+): ValueType extends (null | undefined)
+	? [] // eslint-disable-line  @typescript-eslint/ban-types
+	: ValueType extends string
+		? [string]
+		: ValueType extends readonly unknown[]
+			? ValueType
+			: ValueType extends Iterable<infer T>
+				? T[]
+				: [ValueType];

github/codeql-action-v1/node_modules/ava/node_modules/arrify/index.js

@@ -0,0 +1,19 @@
+export default function arrify(value) {
+	if (value === null || value === undefined) {
+		return [];
+	}
+
+	if (Array.isArray(value)) {
+		return value;
+	}
+
+	if (typeof value === 'string') {
+		return [value];
+	}
+
+	if (typeof value[Symbol.iterator] === 'function') {
+		return [...value];
+	}
+
+	return [value];
+}

github/codeql-action-v1/node_modules/ava/node_modules/arrify/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/arrify/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "arrify",
+  "version": "3.0.0",
+  "description": "Convert a value to an array",
+  "license": "MIT",
+  "repository": "sindresorhus/arrify",
+  "funding": "https://github.com/sponsors/sindresorhus",
+  "author": {
+    "name": "Sindre Sorhus",
+    "email": "sindresorhus@gmail.com",
+    "url": "https://sindresorhus.com"
+  },
+  "type": "module",
+  "exports": "./index.js",
+  "engines": {
+    "node": ">=12"
+  },
+  "scripts": {
+    "test": "xo && ava && tsd"
+  },
+  "files": [
+    "index.js",
+    "index.d.ts"
+  ],
+  "keywords": [
+    "array",
+    "arrify",
+    "arrayify",
+    "convert",
+    "value",
+    "ensure"
+  ],
+  "devDependencies": {
+    "ava": "^3.15.0",
+    "tsd": "^0.14.0",
+    "xo": "^0.39.1"
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/arrify/readme.md

@@ -0,0 +1,44 @@
+# arrify
+
+> Convert a value to an array
+
+## Install
+
+```
+$ npm install arrify
+```
+
+## Usage
+
+```js
+import arrify from 'arrify';
+
+arrify('🦄');
+//=> ['🦄']
+
+arrify(['🦄']);
+//=> ['🦄']
+
+arrify(new Set(['🦄']));
+//=> ['🦄']
+
+arrify(null);
+//=> []
+
+arrify(undefined);
+//=> []
+```
+
+*Specifying `null` or `undefined` results in an empty array.*
+
+---
+
+<div align="center">
+	<b>
+		<a href="https://tidelift.com/subscription/pkg/npm-arrify?utm_source=npm-arrify&utm_medium=referral&utm_campaign=readme">Get professional support for this package with a Tidelift subscription</a>
+	</b>
+	<br>
+	<sub>
+		Tidelift helps make open source sustainable for maintainers while giving companies<br>assurances about security, maintenance, and licensing for their dependencies.
+	</sub>
+</div>

github/codeql-action-v1/node_modules/ava/node_modules/callsites/index.d.ts

@@ -0,0 +1,87 @@
+type AnyFunction = (...args: any[]) => any;
+
+export interface CallSite {
+	/**
+	Returns the value of `this`.
+	*/
+	getThis(): unknown | undefined;
+
+	/**
+	Returns the type of `this` as a string. This is the name of the function stored in the constructor field of `this`, if available, otherwise the object's `[[Class]]` internal property.
+	*/
+	getTypeName(): string | null;
+
+	/**
+	Returns the current function.
+	*/
+	getFunction(): AnyFunction | undefined;
+
+	/**
+	Returns the name of the current function, typically its `name` property. If a name property is not available an attempt will be made to try to infer a name from the function's context.
+	*/
+	getFunctionName(): string | null;
+
+	/**
+	Returns the name of the property of `this` or one of its prototypes that holds the current function.
+	*/
+	getMethodName(): string | undefined;
+
+	/**
+	Returns the name of the script if this function was defined in a script.
+	*/
+	getFileName(): string | null;
+
+	/**
+	Returns the current line number if this function was defined in a script.
+	*/
+	getLineNumber(): number | null;
+
+	/**
+	Returns the current column number if this function was defined in a script.
+	*/
+	getColumnNumber(): number | null;
+
+	/**
+	Returns a string representing the location where `eval` was called if this function was created using a call to `eval`.
+	*/
+	getEvalOrigin(): string | undefined;
+
+	/**
+	Returns `true` if this is a top-level invocation, that is, if it's a global object.
+	*/
+	isToplevel(): boolean;
+
+	/**
+	Returns `true` if this call takes place in code defined by a call to `eval`.
+	*/
+	isEval(): boolean;
+
+	/**
+	Returns `true` if this call is in native V8 code.
+	*/
+	isNative(): boolean;
+
+	/**
+	Returns `true` if this is a constructor call.
+	*/
+	isConstructor(): boolean;
+}
+
+/**
+Get callsites from the V8 stack trace API.
+
+@returns An array of `CallSite` objects.
+
+@example
+```
+import callsites from 'callsites';
+
+function unicorn() {
+	console.log(callsites()[0].getFileName());
+	//=> '/Users/sindresorhus/dev/callsites/test.js'
+}
+
+unicorn();
+```
+*/
+export default function callsites(): CallSite[];

github/codeql-action-v1/node_modules/ava/node_modules/callsites/index.js

@@ -0,0 +1,7 @@
+export default function callsites() {
+	const _prepareStackTrace = Error.prepareStackTrace;
+	Error.prepareStackTrace = (_, stack) => stack;
+	const stack = new Error().stack.slice(1); // eslint-disable-line unicorn/error-message
+	Error.prepareStackTrace = _prepareStackTrace;
+	return stack;
+}

github/codeql-action-v1/node_modules/ava/node_modules/callsites/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/callsites/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "callsites",
+  "version": "4.0.0",
+  "description": "Get callsites from the V8 stack trace API",
+  "license": "MIT",
+  "repository": "sindresorhus/callsites",
+  "funding": "https://github.com/sponsors/sindresorhus",
+  "author": {
+    "name": "Sindre Sorhus",
+    "email": "sindresorhus@gmail.com",
+    "url": "https://sindresorhus.com"
+  },
+  "type": "module",
+  "exports": "./index.js",
+  "engines": {
+    "node": ">=12.20"
+  },
+  "scripts": {
+    "test": "xo && ava && tsd"
+  },
+  "files": [
+    "index.js",
+    "index.d.ts"
+  ],
+  "keywords": [
+    "stacktrace",
+    "v8",
+    "callsite",
+    "callsites",
+    "stack",
+    "trace",
+    "function",
+    "file",
+    "line",
+    "debug"
+  ],
+  "devDependencies": {
+    "ava": "^3.15.0",
+    "tsd": "^0.17.0",
+    "xo": "^0.44.0"
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/callsites/readme.md

@@ -0,0 +1,52 @@
+# callsites
+
+> Get callsites from the [V8 stack trace API](https://v8.dev/docs/stack-trace-api)
+
+## Install
+
+```
+$ npm install callsites
+```
+
+## Usage
+
+```js
+import callsites from 'callsites';
+
+function unicorn() {
+	console.log(callsites()[0].getFileName());
+	//=> '/Users/sindresorhus/dev/callsites/test.js'
+}
+
+unicorn();
+```
+
+## API
+
+Returns an array of callsite objects with the following methods:
+
+- `getThis`: Returns the value of `this`.
+- `getTypeName`: Returns the type of `this` as a string. This is the name of the function stored in the constructor field of `this`, if available, otherwise the object's `[[Class]]` internal property.
+- `getFunction`: Returns the current function.
+- `getFunctionName`: Returns the name of the current function, typically its `name` property. If a name property is not available an attempt will be made to try to infer a name from the function's context.
+- `getMethodName`: Returns the name of the property of `this` or one of its prototypes that holds the current function.
+- `getFileName`: If this function was defined in a script returns the name of the script.
+- `getLineNumber`: If this function was defined in a script returns the current line number.
+- `getColumnNumber`: If this function was defined in a script returns the current column number
+- `getEvalOrigin`: If this function was created using a call to `eval` returns a string representing the location where `eval` was called.
+- `isToplevel`: Is this a top-level invocation, that is, is this the global object?
+- `isEval`: Does this call take place in code defined by a call to `eval`?
+- `isNative`: Is this call in native V8 code?
+- `isConstructor`: Is this a constructor call?
+
+---
+
+<div align="center">
+	<b>
+		<a href="https://tidelift.com/subscription/pkg/npm-callsites?utm_source=npm-callsites&utm_medium=referral&utm_campaign=readme">Get professional support for this package with a Tidelift subscription</a>
+	</b>
+	<br>
+	<sub>
+		Tidelift helps make open source sustainable for maintainers while giving companies<br>assurances about security, maintenance, and licensing for their dependencies.
+	</sub>
+</div>

github/codeql-action-v1/node_modules/ava/node_modules/chalk/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

github/codeql-action-v1/node_modules/ava/node_modules/chalk/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "chalk",
+  "version": "5.0.1",
+  "description": "Terminal string styling done right",
+  "license": "MIT",
+  "repository": "chalk/chalk",
+  "funding": "https://github.com/chalk/chalk?sponsor=1",
+  "type": "module",
+  "main": "./source/index.js",
+  "exports": "./source/index.js",
+  "imports": {
+    "#ansi-styles": "./source/vendor/ansi-styles/index.js",
+    "#supports-color": {
+      "node": "./source/vendor/supports-color/index.js",
+      "default": "./source/vendor/supports-color/browser.js"
+    }
+  },
+  "types": "./source/index.d.ts",
+  "engines": {
+    "node": "^12.17.0 || ^14.13 || >=16.0.0"
+  },
+  "scripts": {
+    "test": "xo && c8 ava && tsd",
+    "bench": "matcha benchmark.js"
+  },
+  "files": [
+    "source",
+    "!source/index.test-d.ts"
+  ],
+  "keywords": [
+    "color",
+    "colour",
+    "colors",
+    "terminal",
+    "console",
+    "cli",
+    "string",
+    "ansi",
+    "style",
+    "styles",
+    "tty",
+    "formatting",
+    "rgb",
+    "256",
+    "shell",
+    "xterm",
+    "log",
+    "logging",
+    "command-line",
+    "text"
+  ],
+  "devDependencies": {
+    "@types/node": "^16.11.10",
+    "ava": "^3.15.0",
+    "c8": "^7.10.0",
+    "color-convert": "^2.0.1",
+    "execa": "^6.0.0",
+    "log-update": "^5.0.0",
+    "matcha": "^0.7.0",
+    "tsd": "^0.19.0",
+    "xo": "^0.47.0",
+    "yoctodelay": "^2.0.0"
+  },
+  "xo": {
+    "rules": {
+      "unicorn/prefer-string-slice": "off"
+    }
+  },
+  "c8": {
+    "reporter": [
+      "text",
+      "lcov"
+    ],
+    "exclude": [
+      "source/vendor"
+    ]
+  }
+}

github/codeql-action-v1/node_modules/ava/node_modules/chalk/readme.md

@@ -0,0 +1,317 @@
+<h1 align="center">
+	<br>
+	<br>
+	<img width="320" src="media/logo.svg" alt="Chalk">
+	<br>
+	<br>
+	<br>
+</h1>
+
+> Terminal string styling done right
+
+[![Coverage Status](https://codecov.io/gh/chalk/chalk/branch/main/graph/badge.svg)](https://codecov.io/gh/chalk/chalk)
+[![npm dependents](https://badgen.net/npm/dependents/chalk)](https://www.npmjs.com/package/chalk?activeTab=dependents) [![Downloads](https://badgen.net/npm/dt/chalk)](https://www.npmjs.com/package/chalk)
+[![run on repl.it](https://repl.it/badge/github/chalk/chalk)](https://repl.it/github/chalk/chalk)
+[![Support Chalk on DEV](https://badge.devprotocol.xyz/0x44d871aebF0126Bf646753E2C976Aa7e68A66c15/descriptive)](https://stakes.social/0x44d871aebF0126Bf646753E2C976Aa7e68A66c15)
+
+<img src="https://cdn.jsdelivr.net/gh/chalk/ansi-styles@8261697c95bf34b6c7767e2cbe9941a851d59385/screenshot.svg" width="900">
+
+<br>
+
+---
+
+<div align="center">
+	<p>
+		<p>
+			<sup>
+				Sindre Sorhus' open source work is supported by the community on <a href="https://github.com/sponsors/sindresorhus">GitHub Sponsors</a> and <a href="https://stakes.social/0x44d871aebF0126Bf646753E2C976Aa7e68A66c15">Dev</a>
+			</sup>
+		</p>
+		<sup>Special thanks to:</sup>
+		<br>
+		<br>
+		<a href="https://standardresume.co/tech">
+			<img src="https://sindresorhus.com/assets/thanks/standard-resume-logo.svg" width="160"/>
+		</a>
+		<br>
+		<br>
+		<a href="https://retool.com/?utm_campaign=sindresorhus">
+			<img src="https://sindresorhus.com/assets/thanks/retool-logo.svg" width="230"/>
+		</a>
+		<br>
+		<br>
+		<a href="https://doppler.com/?utm_campaign=github_repo&utm_medium=referral&utm_content=chalk&utm_source=github">
+			<div>
+				<img src="https://dashboard.doppler.com/imgs/logo-long.svg" width="240" alt="Doppler">
+			</div>
+			<b>All your environment variables, in one place</b>
+			<div>
+				<span>Stop struggling with scattered API keys, hacking together home-brewed tools,</span>
+				<br>
+				<span>and avoiding access controls. Keep your team and servers in sync with Doppler.</span>
+			</div>
+		</a>
+		<br>
+		<a href="https://strapi.io/?ref=sindresorhus">
+			<div>
+				<img src="https://sindresorhus.com/assets/thanks/strapi-logo-white-bg.png" width="220" alt="Strapi">
+			</div>
+			<b>Strapi is the leading open-source headless CMS.</b>
+			<div>
+				<sup>It’s 100% JavaScript, fully customizable, and developer-first.</sup>
+			</div>
+		</a>
+	</p>
+</div>
+
+---
+
+<br>
+
+## Highlights
+
+- Expressive API
+- Highly performant
+- No dependencies
+- Ability to nest styles
+- [256/Truecolor color support](#256-and-truecolor-color-support)
+- Auto-detects color support
+- Doesn't extend `String.prototype`
+- Clean and focused
+- Actively maintained
+- [Used by ~76,000 packages](https://www.npmjs.com/browse/depended/chalk) as of October 26, 2021
+
+## Install
+
+```sh
+npm install chalk
+```
+
+**IMPORTANT:** Chalk 5 is ESM. If you want to use Chalk with TypeScript or a build tool, you will probably want to use Chalk 4 for now. [Read more.](https://github.com/chalk/chalk/releases/tag/v5.0.0)
+
+## Usage
+
+```js
+import chalk from 'chalk';
+
+console.log(chalk.blue('Hello world!'));
+```
+
+Chalk comes with an easy to use composable API where you just chain and nest the styles you want.
+
+```js
+import chalk from 'chalk';
+
+const log = console.log;
+
+// Combine styled and normal strings
+log(chalk.blue('Hello') + ' World' + chalk.red('!'));
+
+// Compose multiple styles using the chainable API
+log(chalk.blue.bgRed.bold('Hello world!'));
+
+// Pass in multiple arguments
+log(chalk.blue('Hello', 'World!', 'Foo', 'bar', 'biz', 'baz'));
+
+// Nest styles
+log(chalk.red('Hello', chalk.underline.bgBlue('world') + '!'));
+
+// Nest styles of the same type even (color, underline, background)
+log(chalk.green(
+	'I am a green line ' +
+	chalk.blue.underline.bold('with a blue substring') +
+	' that becomes green again!'
+));
+
+// ES2015 template literal
+log(`
+CPU: ${chalk.red('90%')}
+RAM: ${chalk.green('40%')}
+DISK: ${chalk.yellow('70%')}
+`);
+
+// Use RGB colors in terminal emulators that support it.
+log(chalk.rgb(123, 45, 67).underline('Underlined reddish color'));
+log(chalk.hex('#DEADED').bold('Bold gray!'));
+```
+
+Easily define your own themes:
+
+```js
+import chalk from 'chalk';
+
+const error = chalk.bold.red;
+const warning = chalk.hex('#FFA500'); // Orange color
+
+console.log(error('Error!'));
+console.log(warning('Warning!'));
+```
+
+Take advantage of console.log [string substitution](https://nodejs.org/docs/latest/api/console.html#console_console_log_data_args):
+
+```js
+import chalk from 'chalk';
+
+const name = 'Sindre';
+console.log(chalk.green('Hello %s'), name);
+//=> 'Hello Sindre'
+```
+
+## API
+
+### chalk.`<style>[.<style>...](string, [string...])`
+
+Example: `chalk.red.bold.underline('Hello', 'world');`
+
+Chain [styles](#styles) and call the last one as a method with a string argument. Order doesn't matter, and later styles take precedent in case of a conflict. This simply means that `chalk.red.yellow.green` is equivalent to `chalk.green`.
+
+Multiple arguments will be separated by space.
+
+### chalk.level
+
+Specifies the level of color support.
+
+Color support is automatically detected, but you can override it by setting the `level` property. You should however only do this in your own code as it applies globally to all Chalk consumers.
+
+If you need to change this in a reusable module, create a new instance:
+
+```js
+import {Chalk} from 'chalk';
+
+const customChalk = new Chalk({level: 0});
+```
+
+| Level | Description |
+| :---: | :--- |
+| `0` | All colors disabled |
+| `1` | Basic color support (16 colors) |
+| `2` | 256 color support |
+| `3` | Truecolor support (16 million colors) |
+
+### supportsColor
+
+Detect whether the terminal [supports color](https://github.com/chalk/supports-color). Used internally and handled for you, but exposed for convenience.
+
+Can be overridden by the user with the flags `--color` and `--no-color`. For situations where using `--color` is not possible, use the environment variable `FORCE_COLOR=1` (level 1), `FORCE_COLOR=2` (level 2), or `FORCE_COLOR=3` (level 3) to forcefully enable color, or `FORCE_COLOR=0` to forcefully disable. The use of `FORCE_COLOR` overrides all other color support checks.
+
+Explicit 256/Truecolor mode can be enabled using the `--color=256` and `--color=16m` flags, respectively.
+
+### chalkStderr and supportsColorStderr
+
+`chalkStderr` contains a separate instance configured with color support detected for `stderr` stream instead of `stdout`. Override rules from `supportsColor` apply to this too. `supportsColorStderr` is exposed for convenience.
+
+## Styles
+
+### Modifiers
+
+- `reset` - Reset the current style.
+- `bold` - Make the text bold.
+- `dim` - Make the text have lower opacity.
+- `italic` - Make the text italic. *(Not widely supported)*
+- `underline` - Put a horizontal line below the text. *(Not widely supported)*
+- `overline` - Put a horizontal line above the text. *(Not widely supported)*
+- `inverse`- Invert background and foreground colors.
+- `hidden` - Print the text but make it invisible.
+- `strikethrough` - Puts a horizontal line through the center of the text. *(Not widely supported)*
+- `visible`- Print the text only when Chalk has a color level above zero. Can be useful for things that are purely cosmetic.
+
+### Colors
+
+- `black`
+- `red`
+- `green`
+- `yellow`
+- `blue`
+- `magenta`
+- `cyan`
+- `white`
+- `blackBright` (alias: `gray`, `grey`)
+- `redBright`
+- `greenBright`
+- `yellowBright`
+- `blueBright`
+- `magentaBright`
+- `cyanBright`
+- `whiteBright`
+
+### Background colors
+
+- `bgBlack`
+- `bgRed`
+- `bgGreen`
+- `bgYellow`
+- `bgBlue`
+- `bgMagenta`
+- `bgCyan`
+- `bgWhite`
+- `bgBlackBright` (alias: `bgGray`, `bgGrey`)
+- `bgRedBright`
+- `bgGreenBright`
+- `bgYellowBright`
+- `bgBlueBright`
+- `bgMagentaBright`
+- `bgCyanBright`
+- `bgWhiteBright`
+
+## 256 and Truecolor color support
+
+Chalk supports 256 colors and [Truecolor](https://gist.github.com/XVilka/8346728) (16 million colors) on supported terminal apps.
+
+Colors are downsampled from 16 million RGB values to an ANSI color format that is supported by the terminal emulator (or by specifying `{level: n}` as a Chalk option). For example, Chalk configured to run at level 1 (basic color support) will downsample an RGB value of #FF0000 (red) to 31 (ANSI escape for red).
+
+Examples:
+
+- `chalk.hex('#DEADED').underline('Hello, world!')`
+- `chalk.rgb(15, 100, 204).inverse('Hello!')`
+
+Background versions of these models are prefixed with `bg` and the first level of the module capitalized (e.g. `hex` for foreground colors and `bgHex` for background colors).
+
+- `chalk.bgHex('#DEADED').underline('Hello, world!')`
+- `chalk.bgRgb(15, 100, 204).inverse('Hello!')`
+
+The following color models can be used:
+
+- [`rgb`](https://en.wikipedia.org/wiki/RGB_color_model) - Example: `chalk.rgb(255, 136, 0).bold('Orange!')`
+- [`hex`](https://en.wikipedia.org/wiki/Web_colors#Hex_triplet) - Example: `chalk.hex('#FF8800').bold('Orange!')`
+- [`ansi256`](https://en.wikipedia.org/wiki/ANSI_escape_code#8-bit) - Example: `chalk.bgAnsi256(194)('Honeydew, more or less')`
+
+## Browser support
+
+Since Chrome 69, ANSI escape codes are natively supported in the developer console.
+
+## Windows
+
+If you're on Windows, do yourself a favor and use [Windows Terminal](https://github.com/microsoft/terminal) instead of `cmd.exe`.
+
+## Origin story
+
+[colors.js](https://github.com/Marak/colors.js) used to be the most popular string styling module, but it has serious deficiencies like extending `String.prototype` which causes all kinds of [problems](https://github.com/yeoman/yo/issues/68) and the package is unmaintained. Although there are other packages, they either do too much or not enough. Chalk is a clean and focused alternative.
+
+## chalk for enterprise
+
+Available as part of the Tidelift Subscription.
+
+The maintainers of chalk and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. [Learn more.](https://tidelift.com/subscription/pkg/npm-chalk?utm_source=npm-chalk&utm_medium=referral&utm_campaign=enterprise&utm_term=repo)
+
+## Related
+
+- [chalk-template](https://github.com/chalk/chalk-template) - [Tagged template literals](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Template_literals#tagged_templates) support for this module
+- [chalk-cli](https://github.com/chalk/chalk-cli) - CLI for this module
+- [ansi-styles](https://github.com/chalk/ansi-styles) - ANSI escape codes for styling strings in the terminal
+- [supports-color](https://github.com/chalk/supports-color) - Detect whether a terminal supports color
+- [strip-ansi](https://github.com/chalk/strip-ansi) - Strip ANSI escape codes
+- [strip-ansi-stream](https://github.com/chalk/strip-ansi-stream) - Strip ANSI escape codes from a stream
+- [has-ansi](https://github.com/chalk/has-ansi) - Check if a string has ANSI escape codes
+- [ansi-regex](https://github.com/chalk/ansi-regex) - Regular expression for matching ANSI escape codes
+- [wrap-ansi](https://github.com/chalk/wrap-ansi) - Wordwrap a string with ANSI escape codes
+- [slice-ansi](https://github.com/chalk/slice-ansi) - Slice a string with ANSI escape codes
+- [color-convert](https://github.com/qix-/color-convert) - Converts colors between different models
+- [chalk-animation](https://github.com/bokub/chalk-animation) - Animate strings in the terminal
+- [gradient-string](https://github.com/bokub/gradient-string) - Apply color gradients to strings
+- [chalk-pipe](https://github.com/LitoMore/chalk-pipe) - Create chalk style schemes with simpler style strings
+- [terminal-link](https://github.com/sindresorhus/terminal-link) - Create clickable links in the terminal
+
+## Maintainers
+
+- [Sindre Sorhus](https://github.com/sindresorhus)
+- [Josh Junon](https://github.com/qix-)