feat(output): add custom output format, test coverage, and release 2.1.0

.github/workflows/linter.yml

@@ -17,9 +17,7 @@ name: Lint Code Base
 on:
   pull_request
 
-permissions:
-  contents: read
-  pull-requests: read
+permissions: {}
 
 ###############
 # Set the Job #
@@ -29,6 +27,11 @@ jobs:
     # Set the agent to run on
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      pull-requests: read
+      statuses: write
+
     ##################
     # Load all steps #
     ##################
@@ -37,21 +40,23 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0
+          persist-credentials: false
 
       ################################
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: github/super-linter/slim@v7
+        uses: super-linter/super-linter/slim@4ce20838b8ab83717e78138c5b3a1407148e0918 # v8
         env:
           DEFAULT_BRANCH: main
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           VALIDATE_ALL_CODEBASE: false
           VALIDATE_GITLEAKS: false
+          VALIDATE_JSON_PRETTIER: false
           VALIDATE_MARKDOWN_PRETTIER: false
           VALIDATE_NATURAL_LANGUAGE: false
           VALIDATE_YAML_PRETTIER: false

.gitignore

@@ -16,3 +16,5 @@
 /output/
 *.gem
 .cursor/
+.claude/
+.scout/

.markdownlint.json

@@ -1,8 +1,8 @@
 {
-  "MD013": {
-    "line_length": 120,
-    "code_blocks": false,
-    "tables": false,
-    "headings": false
-  }
+	"MD013": {
+		"line_length": 120,
+		"code_blocks": false,
+		"tables": false,
+		"headings": false
+	}
 }

.rubocop.yml

@@ -0,0 +1 @@
+.github/linters/.ruby-lint.yml

.simplecov

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+SimpleCov.start do
+  add_filter '/spec/'
+end

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 2.1.0
+
+### New features
+
+- Added a `custom` `output_format` that renders rows through a project-supplied Mustache template (`templates.custom` / `custom_output` config keys)
+- `markdown` output now renders through a Mustache template instead of hand-built strings
+
+### Testing
+
+- Added RSpec coverage (SimpleCov, WebMock) across Config, Client, EnterpriseClient, Pulls, RowCollector, Row, Runner, CLI, and the output formatters
+- Replaced Cucumber and Aruba with RSpec integration tests covering config validation, output formats, and the enterprise SSRF guard
+- Included offline VCR replay of recorded GitHub API responses in the default test suite
+- Added fixture-based regression tests for nested template paths and directory-symlink escapes
+
 ## 2.0.0
 
 ### Breaking changes

Gemfile.lock

@@ -1,79 +1,82 @@
 PATH
   remote: .
   specs:
-    whatsup_github (2.0.0)
+    whatsup_github (2.1.0)
       dotenv (~> 3.0)
       faraday-retry (~> 2.2)
+      mustache (~> 1.1)
       netrc (~> 0.11)
       octokit (~> 10.0)
       thor (~> 1.3)
 
 GEM
   remote: https://rubygems.org/
   specs:
+    activesupport (8.1.4)
+      base64
+      bigdecimal
+      concurrent-ruby (~> 1.0, >= 1.3.1)
+      connection_pool (>= 2.2.5)
+      drb
+      i18n (>= 1.6, < 2)
+      json
+      logger (>= 1.4.2)
+      minitest (>= 5.1)
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0, >= 2.0.5)
+      uri (>= 0.13.1)
     addressable (2.9.0)
       public_suffix (>= 2.0.2, < 8.0)
-    aruba (2.3.3)
-      bundler (>= 1.17)
-      contracts (>= 0.16.0, < 0.18.0)
-      cucumber (>= 8.0, < 11.0)
-      rspec-expectations (>= 3.4, < 5.0)
-      thor (~> 1.0)
+    ast (2.4.3)
     base64 (0.3.0)
     bigdecimal (4.1.1)
-    builder (3.3.0)
-    contracts (0.17.3)
-    cucumber (10.2.0)
-      base64 (~> 0.2)
-      builder (~> 3.2)
-      cucumber-ci-environment (> 9, < 12)
-      cucumber-core (> 15, < 17)
-      cucumber-cucumber-expressions (> 17, < 20)
-      cucumber-html-formatter (> 21, < 23)
-      diff-lcs (~> 1.5)
-      logger (~> 1.6)
-      mini_mime (~> 1.1)
-      multi_test (~> 1.1)
-      sys-uname (~> 1.3)
-    cucumber-ci-environment (11.0.0)
-    cucumber-core (16.2.0)
-      cucumber-gherkin (> 36, < 40)
-      cucumber-messages (> 31, < 33)
-      cucumber-tag-expressions (> 6, < 9)
-    cucumber-cucumber-expressions (19.0.0)
+    concurrent-ruby (1.3.8)
+    connection_pool (3.0.2)
+    crack (1.0.1)
       bigdecimal
-    cucumber-gherkin (39.0.0)
-      cucumber-messages (>= 31, < 33)
-    cucumber-html-formatter (22.3.0)
-      cucumber-messages (> 23, < 33)
-    cucumber-messages (32.2.0)
-    cucumber-tag-expressions (8.1.0)
+      rexml
     diff-lcs (1.6.2)
+    docile (1.4.1)
     dotenv (3.2.0)
-    faraday (2.14.1)
+    drb (2.2.3)
+    faraday (2.14.4)
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger
     faraday-net_http (3.4.2)
       net-http (~> 0.5)
     faraday-retry (2.4.0)
       faraday (~> 2.0)
-    ffi (1.17.4)
-    ffi (1.17.4-arm64-darwin)
     fileutils (1.8.0)
-    json (2.19.3)
+    hashdiff (1.2.1)
+    i18n (1.15.2)
+      concurrent-ruby (~> 1.0)
+    json (3.0.2)
+    language_server-protocol (3.17.0.6)
+    lint_roller (1.1.0)
     logger (1.7.0)
-    memoist3 (1.0.0)
-    mini_mime (1.1.5)
-    multi_test (1.1.0)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
+    mustache (1.1.3)
     net-http (0.9.1)
       uri (>= 0.11.1)
     netrc (0.11.0)
     octokit (10.0.0)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
+    parallel (2.2.0)
+    parser (3.3.12.0)
+      ast (~> 2.4.1)
+      racc
+    prism (1.9.0)
     public_suffix (7.0.5)
+    racc (1.8.1)
+    rack (3.2.7)
+    rainbow (3.1.1)
     rake (13.3.1)
+    regexp_parser (2.13.1)
+    rexml (3.4.4)
     rspec (3.13.2)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
@@ -87,26 +90,71 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
     rspec-support (3.13.7)
+    rubocop (1.91.0)
+      json (>= 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
+      parallel (>= 1.10)
+      parser (>= 3.3.0.2)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.50.0)
+      parser (>= 3.3.7.2)
+      prism (~> 1.7)
+    rubocop-github (0.27.0)
+      rubocop (>= 1.76)
+      rubocop-performance (>= 1.24)
+      rubocop-rails (>= 2.23)
+    rubocop-performance (1.27.0)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.89.0, < 2.0)
+      rubocop-ast (>= 1.47.1, < 2.0)
+    rubocop-rails (2.38.0)
+      activesupport (>= 4.2.0)
+      lint_roller (~> 1.1)
+      rack (>= 1.1)
+      rubocop (>= 1.89.0, < 2.0)
+      rubocop-ast (>= 1.44.0, < 2.0)
+    ruby-progressbar (1.13.0)
     sawyer (0.9.3)
       addressable (>= 2.3.5)
       faraday (>= 0.17.3, < 3)
-    sys-uname (1.5.1)
-      ffi (~> 1.1)
-      memoist3 (~> 1.0.0)
+    securerandom (0.4.1)
+    simplecov (0.22.0)
+      docile (~> 1.1)
+      simplecov-html (~> 0.11)
+      simplecov_json_formatter (~> 0.1)
+    simplecov-html (0.13.2)
+    simplecov_json_formatter (0.1.4)
     thor (1.5.0)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
+    unicode-display_width (3.3.0)
+      unicode-emoji (~> 4.3)
+    unicode-emoji (4.3.0)
     uri (1.1.1)
+    vcr (6.4.0)
+    webmock (3.26.4)
+      addressable (>= 2.8.0)
+      crack (>= 0.3.2)
+      hashdiff (>= 0.4.0, < 2.0.0)
 
 PLATFORMS
   arm64-darwin-22
   ruby
 
 DEPENDENCIES
-  aruba (~> 2.2)
   bundler (~> 2.5)
-  cucumber (~> 10.1)
   fileutils (~> 1.7)
   rake (~> 13.1)
   rspec (~> 3.12)
+  rubocop-github (~> 0.27)
+  simplecov (~> 0.22)
+  vcr (~> 6.2)
+  webmock (~> 3.19)
   whatsup_github!
 
 BUNDLED WITH