feat: improve Danger testing and flavor recognition

[vaind]

Summary

Improves the Danger workflow with comprehensive testing infrastructure, enhanced flavor recognition with proper conventional commit scope handling, and security improvements for better maintainability and reliability.

Key Improvements

• Comprehensive Testing: 18 focused test cases covering all core Danger functionality with CI integration
• Enhanced Flavor Recognition: Supports conventional commit format with scopes (e.g., feat(core):, fix(browser):)
• Security Hardening: Replaced ReDoS-vulnerable regex with safe string parsing
• Input Validation: Robust parameter validation prevents runtime errors
• Focused Scope: Removed unrelated functionality, pure flavor recognition focus

Testing Infrastructure

• 18 comprehensive test cases using Node.js built-in test runner
• CI integration running on Ubuntu for efficiency
• Configuration integrity validation ensures no duplicate labels or invalid configs
• Edge case coverage for malformed inputs, invalid types, and scope handling
• Security testing for nested parentheses and malformed scopes

Enhanced Flavor Support

Now properly handles conventional commit format with scopes and validates inputs:

Conventional Commits with Scopes:

• feat(core): add new feature → "Features" section ✅
• fix(browser): resolve issue → "Fixes" section ✅
• chore(deps): update packages → skip changelog ✅
• ref(core): internal refactoring → skip changelog ✅

Input Validation:

• extractPRFlavor(null, 123) → returns "" safely (no crash) ✅
• extractPRFlavor({}, []) → returns "" safely (no crash) ✅

Supported Flavors:

• Features: feat, feature → "Features" section, triggers docs reminder
• Fixes: fix, bug, bugfix → "Fixes" section
• Security: sec, security → "Security" section
• Performance: perf, performance → "Performance" section
• Internal Changes: docs, style, ref, refactor, test, build, ci, chore, deps → skip changelog

Configuration Improvements

• Grouped Labels: Related flavors like ["feat", "feature"] share the same configuration
• Consolidated Internal Types: All internal change types grouped into one config entry
• Smart Section Detection: Automatically determines appropriate changelog section based on PR flavor
• Proper ref Handling: Based on analysis of 228 ref commits across Sentry repos, treating as internal changes
• Focused Module: Removed unrelated findChangelogInsertionPoint function

Before vs After

Before:

// Scattered logic, hardcoded arrays, scope handling broken, security issues
if (["ci", "test", "deps", "chore(deps)", "build(deps)"].includes(prFlavor)) {
  return; // Skip changelog
}
// fix(browser): add feature → defaulted to "Features" (wrong!)
// extractPRFlavor(null, 123) → TypeError crash
// ReDoS vulnerable regex

After:

// Unified configuration, proper scope handling, secure and robust
const FLAVOR_CONFIG = [
  { labels: ["feat", "feature"], changelog: "Features", isFeature: true },
  { labels: ["fix", "bug", "bugfix"], changelog: "Fixes" },
  { labels: ["docs", "ref", "ci", "test", "deps", ...], changelog: undefined }
];
// fix(browser): add feature → "Fixes" (correct!)
// extractPRFlavor(null, 123) → "" (safe)
// Secure string parsing, no ReDoS risk

Test Plan

• All existing functionality preserved (backward compatible)
• All 18 unit tests pass locally and in CI
• Configuration handles all existing and new flavors correctly
• Conventional commit scopes properly stripped and handled securely
• Input validation prevents all runtime errors
• Security testing for ReDoS and malformed inputs
• ref commits correctly classified as internal
• No regressions in changelog checking logic

Security Verification

• No ReDoS vulnerability with deeply nested parentheses
• Safe handling of all input types (null, undefined, objects, arrays, numbers)
• No potential for string method crashes
• Performance tested with edge cases

🤖 Generated with Claude Code

[github-actions]

	Messages
📖	Do not forget to update Sentry-docs with your feature once the pull request gets approved.

Generated by 🚫 dangerJS against 4db5d95

[vaind]

@sentry review