fix formatting

Author: stplasim

.env.example

@@ -1,4 +1,4 @@
 SLACK_BOT_TOKEN=xoxb-
 SLACK_APP_TOKEN=xapp-
 GITHUB_TOKEN=github_pat_
-DATABASE_URL=postgres://user:password@localhost/releases_db
+DATABASE_URL=postgres://user:password@localhost/releases_db

.gitattributes

@@ -1,2 +1,2 @@
-# Drizzle internal state — never hand-edited
+# Drizzle internal state - never hand-edited
 drizzle/meta/*.json linguist-generated=true

.githooks/pre-commit

@@ -3,4 +3,4 @@
 set -e
 set -o pipefail
 
-bun run lint
+bun run lint

.github/workflows/release.yml

@@ -58,4 +58,4 @@ jobs:
           tag-name: v${{ steps.version.outputs.version }}
       - uses: aboutbits/github-actions-base/github-create-release@v2
         with:
-          tag-name: v${{ steps.version.outputs.version }}
+          tag-name: v${{ steps.version.outputs.version }}

Dockerfile

@@ -13,4 +13,4 @@ COPY drizzle/ ./drizzle/
 # Non root user
 USER bun
 
-CMD ["bun", "run", "src/index.ts"]
+CMD ["bun", "run", "src/index.ts"]

eslint.config.js

@@ -13,7 +13,7 @@ export default defineConfig([
     rules: {
       // Ignore Bun built-in module specifiers (bun:test, bun:sqlite, etc.)
       'import/no-unresolved': ['error', { ignore: ['^bun:'] }],
-      // Backend app — console logging is intentional
+      // Backend app - console logging is intentional
       'no-console': 'off',
     },
   },

installation.md

@@ -15,11 +15,11 @@ This guide covers self-hosting the Release Monitor Slack app. The app runs as a
 
 You need to create a Slack app in your workspace:
 
-1. Go to [api.slack.com/apps](https://api.slack.com/apps) and click **Create New App → From an app manifest**.
+1. Go to [api.slack.com/apps](https://api.slack.com/apps) and click **Create New App -> From an app manifest**.
 2. Paste the contents of [`manifest.json`](./manifest.json) from this repository.
 3. Install the app to your workspace.
 4. Under **OAuth & Permissions**, copy the **Bot User OAuth Token** (`xoxb-…`).
-5. Under **Basic Information → App-Level Tokens**, create a token with the `connections:write` scope and copy it (`xapp-…`).
+5. Under **Basic Information -> App-Level Tokens**, create a token with the `connections:write` scope and copy it (`xapp-…`).
 
 ### Forges
 

readme.md

@@ -2,10 +2,10 @@
 
 A Slack bot that monitors repositories for new releases and posts updates to your channels.
 
-- **Daily digest** — one message per channel per day, grouped by repo
-- **Immediate notifications** — get notified right away for every new stable release
-- **Instant security alerts** — security releases are posted immediately to all subscribers regardless of their notification mode
-- **Per-channel subscriptions** — each channel manages its own list independently
+- **Daily digest** - one message per channel per day, grouped by repo
+- **Immediate notifications** - get notified right away for every new stable release
+- **Instant security alerts** - security releases are posted immediately to all subscribers regardless of their notification mode
+- **Per-channel subscriptions** - each channel manages its own list independently
 
 ## Commands
 

src/classify/security.test.ts

@@ -13,7 +13,7 @@ function release(overrides: Partial<Release> = {}): Release {
   }
 }
 
-describe('checkSecurityRelease — definitive identifiers', () => {
+describe('checkSecurityRelease - definitive identifiers', () => {
   test.each([
     {
       body: 'Fixes CVE-2024-12345.',
@@ -28,7 +28,7 @@ describe('checkSecurityRelease — definitive identifiers', () => {
       expectedReason: 'Contains OSV identifier',
     },
   ])(
-    '$expectedReason in body → high confidence',
+    '$expectedReason in body -> high confidence',
     ({ body, expectedReason }) => {
       const result = checkSecurityRelease(release({ body }))
       expect(result.isSecurity).toBe(true)
@@ -54,7 +54,7 @@ describe('checkSecurityRelease — definitive identifiers', () => {
   })
 })
 
-describe('checkSecurityRelease — strong phrase signals', () => {
+describe('checkSecurityRelease - strong phrase signals', () => {
   test.each([
     {
       body: 'security advisory released',
@@ -105,14 +105,14 @@ describe('checkSecurityRelease — strong phrase signals', () => {
     { body: 'exploitable buffer', expectedReason: 'Mentions exploit' },
     { body: 'exploited in the wild', expectedReason: 'Mentions exploit' },
     { body: 'CVSS score 9.8', expectedReason: 'Mentions CVSS score' },
-  ])('$expectedReason → isSecurity', ({ body, expectedReason }) => {
+  ])('$expectedReason -> isSecurity', ({ body, expectedReason }) => {
     const result = checkSecurityRelease(release({ body }))
     expect(result.isSecurity).toBe(true)
     expect(result.reasons).toContain(expectedReason)
   })
 })
 
-describe('checkSecurityRelease — medium phrase signals', () => {
+describe('checkSecurityRelease - medium phrase signals', () => {
   test.each([
     {
       body: 'security fix included',
@@ -186,14 +186,14 @@ describe('checkSecurityRelease — medium phrase signals', () => {
       body: 'improper authorization logic',
       expectedReason: 'Mentions improper validation/auth',
     },
-  ])('$expectedReason → isSecurity', ({ body, expectedReason }) => {
+  ])('$expectedReason -> isSecurity', ({ body, expectedReason }) => {
     const result = checkSecurityRelease(release({ body }))
     expect(result.isSecurity).toBe(true)
     expect(result.reasons).toContain(expectedReason)
   })
 })
 
-describe('checkSecurityRelease — markdown section headers', () => {
+describe('checkSecurityRelease - markdown section headers', () => {
   test.each([
     {
       body: '## Security\nFixed an issue.',
@@ -211,14 +211,14 @@ describe('checkSecurityRelease — markdown section headers', () => {
       body: '## Vulnerabilities\nSee below.',
       expectedReason: 'Has Vulnerabilities section header',
     },
-  ])('$expectedReason → isSecurity', ({ body, expectedReason }) => {
+  ])('$expectedReason -> isSecurity', ({ body, expectedReason }) => {
     const result = checkSecurityRelease(release({ body }))
     expect(result.isSecurity).toBe(true)
     expect(result.reasons).toContain(expectedReason)
   })
 })
 
-describe('checkSecurityRelease — corroboration rule (weak signals only)', () => {
+describe('checkSecurityRelease - corroboration rule (weak signals only)', () => {
   test.each([
     {
       label: 'single weak signal below threshold',
@@ -231,7 +231,7 @@ describe('checkSecurityRelease — corroboration rule (weak signals only)', () =
         body: 'This is critical. A malicious attacker could abuse this. Urgent.',
       },
       // "critical" (2) + "malicious" (2) + "attacker" (2) + "urgent" (1) = 7,
-      // but all requiresCorroboration → hasNonWeakMatch stays false
+      // but all requiresCorroboration -> hasNonWeakMatch stays false
     },
     {
       label: 'weak signals split across title and body',
@@ -240,15 +240,15 @@ describe('checkSecurityRelease — corroboration rule (weak signals only)', () =
         body: 'Improved security hardening across the board.',
       },
       // "critical" in title (2 × 1.5 = 3) + "security" in body (2) = 5 ≥ threshold,
-      // but both requiresCorroboration → hasNonWeakMatch stays false
+      // but both requiresCorroboration -> hasNonWeakMatch stays false
     },
-  ])('$label → not flagged as security', ({ overrides }) => {
+  ])('$label -> not flagged as security', ({ overrides }) => {
     const result = checkSecurityRelease(release(overrides))
     expect(result.isSecurity).toBe(false)
   })
 })
 
-describe('checkSecurityRelease — non-security releases', () => {
+describe('checkSecurityRelease - non-security releases', () => {
   test.each([
     { body: '', label: 'empty body' },
     {
@@ -259,7 +259,7 @@ describe('checkSecurityRelease — non-security releases', () => {
       body: 'Bug fixes and stability improvements.',
       label: 'generic bug fix',
     },
-  ])('$label → not security', ({ body }) => {
+  ])('$label -> not security', ({ body }) => {
     const result = checkSecurityRelease(release({ body }))
     expect(result.isSecurity).toBe(false)
   })
@@ -272,7 +272,7 @@ describe('checkSecurityRelease — non-security releases', () => {
   })
 })
 
-describe('checkSecurityRelease — confidence levels', () => {
+describe('checkSecurityRelease - confidence levels', () => {
   test.each([
     {
       body: 'CVE-2024-00001 patched.',
@@ -290,15 +290,15 @@ describe('checkSecurityRelease — confidence levels', () => {
       label: 'score ≥ 5 and < 7',
     },
   ] as const)(
-    '$label → $expectedConfidence confidence',
+    '$label -> $expectedConfidence confidence',
     ({ body, expectedConfidence }) => {
       const result = checkSecurityRelease(release({ body }))
       expect(result.confidence).toBe(expectedConfidence)
     },
   )
 })
 
-describe('checkSecurityRelease — deduplication of reasons', () => {
+describe('checkSecurityRelease - deduplication of reasons', () => {
   test('same signal in title and body appears only once in reasons', () => {
     const result = checkSecurityRelease(
       release({

src/classify/security.ts

@@ -27,7 +27,7 @@ const SECURITY_SIGNALS: Signal[] = [
     reason: 'Contains OSV identifier',
   },
 
-  // Markdown section header — very strong signal, maintainers don't add this casually.
+  // Markdown section header - very strong signal, maintainers don't add this casually.
   {
     pattern: /^#+\s*security(\s+(fixes?|updates?|advisor))?/im,
     weight: 9,