rusackas and Claude Opus 4.8
eceb7e2355
fix(ci): close docs-deploy freshness race, add test for freshness gate
...
Queue instead of cancel in the docs-deploy concurrency group so a stale
run that already passed check-freshness can never kill a fresher run's
in-progress deploy before skipping itself as stale. Also extract the
freshness-check shell logic into a standalone, tested script so the
dispatch-bypass and output contract can't regress silently.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-03 22:59:09 -07:00
dependabot[bot]
5b5e5cf82d
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 ( #42376 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 21:23:00 +07:00
dependabot[bot]
248f6e1064
chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 ( #42302 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 02:21:21 -07:00
1f81b700c1
chore(ci): upgrade GHA runner image to Ubuntu 26.04 ( #42191 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: David <39565245+dmunozv04@users.noreply.github.com >
Co-authored-by: Hans Yu <hans.yu@outlook.de >
Co-authored-by: Shaitan <105581038+sha174n@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Rehan Islam <2025eb01502@online.bits-pilani.ac.in >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: J0s3-H3nr1qu3 <hareboom@gmail.com >
Co-authored-by: José Teixeira <jose.teixeira@douroeci.com >
2026-07-20 09:43:19 -07:00
dependabot[bot]
eed41b6435
chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 ( #42229 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-20 21:33:36 +07:00
Evan Rusackas and Claude Opus 4.8
f9bcf189c9
chore(ci): suppress zizmor adhoc-packages on GHA validator install ( #41694 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-02 14:55:49 -07:00
Evan Rusackas and Claude Opus 4.8
7de77a35bc
chore(ci): pin @action-validator versions in GHA validator workflow ( #41545 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-30 10:31:36 -07:00
dependabot[bot]
7edae0817c
chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 ( #41519 )
2026-06-29 23:54:21 +07:00
dependabot[bot]
420a74b01e
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 ( #41358 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 00:52:16 -07:00
dependabot[bot] and hainenber
7a3b8f49c7
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 ( #40892 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-06-10 00:25:41 +07:00
Evan Rusackas and Claude Code
c373da1bb9
ci: add cancel-in-progress concurrency to PR helper workflows ( #40725 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-03 12:44:36 -07:00
Evan Rusackas and Claude Code
f165c3fa78
fix(ci): grant security-events write to GHA validator workflow ( #40539 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-29 21:46:54 -07:00
Đỗ Trọng Hải
b8ea4448d6
feat(ci): perform static security analysis for GHA workflows ( #40510 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-05-29 20:15:14 -07:00
Arpit Jain
62dc237014
chore(ci): add explicit permissions to additional workflows ( #40067 )
2026-05-14 23:24:46 +07:00
dependabot[bot]
dc9b459b27
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 ( #39481 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-20 08:34:02 -07:00
Đỗ Trọng Hải
83823911b5
feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions ( #38782 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-21 21:27:30 +07:00
dependabot[bot]
b8b7b958d9
chore(deps): bump actions/setup-node from 5 to 6 ( #35633 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 11:26:30 -08:00
dependabot[bot]
23b61b080e
chore(deps): bump actions/checkout from 5 to 6 ( #36219 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 12:02:43 -08:00
dependabot[bot]
6fbbc85df7
chore(deps): bump actions/setup-node from 4 to 5 ( #35394 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 06:59:44 -07:00
dependabot[bot]
3dbe593a4a
chore(deps): bump actions/checkout from 4 to 5 ( #34969 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-03 10:36:16 -07:00
Maxime Beauchemin
531f1b6aa4
chore(gha): bump ubuntu to latest fresh release ( #31390 )
2024-12-18 23:32:10 -08:00
Evan Rusackas
8e2f81816f
build(node): Bumping to Node 20 ( #29988 )
2024-08-21 16:48:21 -06:00
Maxime Beauchemin
446a3b22dc
chore: move all GHAs to ubuntu-22.04 ( #29447 )
2024-07-01 14:19:25 -06:00
Maxime Beauchemin
d49d79121c
chore: trigger CI jobs on all release-related branches ( #29274 )
2024-06-17 13:42:58 -07:00
Maxime Beauchemin
499fb2c631
chore: add a github "action-validator" in CI ( #28358 )
2024-05-09 08:26:27 -07:00
