Evan
c09347bb2e
chore(ci): pin @action-validator versions in GHA validator workflow
...
Pin @action-validator/core and @action-validator/cli to 0.6.0 instead of
installing them unpinned at runtime, resolving the zizmor adhoc-packages
finding. Also drops the no-op --save-dev flag (meaningless for a global
install).
Resolves code-scanning alert #2557
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-29 12:00:17 -07:00
dependabot[bot]
7edae0817c
chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 ( #41519 )
2026-06-29 23:54:21 +07:00
dependabot[bot]
420a74b01e
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 ( #41358 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 00:52:16 -07:00
dependabot[bot]
7a3b8f49c7
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 ( #40892 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-06-10 00:25:41 +07:00
Evan Rusackas
c373da1bb9
ci: add cancel-in-progress concurrency to PR helper workflows ( #40725 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-03 12:44:36 -07:00
Evan Rusackas
f165c3fa78
fix(ci): grant security-events write to GHA validator workflow ( #40539 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-29 21:46:54 -07:00
Đỗ Trọng Hải
b8ea4448d6
feat(ci): perform static security analysis for GHA workflows ( #40510 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-05-29 20:15:14 -07:00
Arpit Jain
62dc237014
chore(ci): add explicit permissions to additional workflows ( #40067 )
2026-05-14 23:24:46 +07:00
dependabot[bot]
dc9b459b27
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 ( #39481 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-20 08:34:02 -07:00
Đỗ Trọng Hải
83823911b5
feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions ( #38782 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-21 21:27:30 +07:00
dependabot[bot]
b8b7b958d9
chore(deps): bump actions/setup-node from 5 to 6 ( #35633 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 11:26:30 -08:00
dependabot[bot]
23b61b080e
chore(deps): bump actions/checkout from 5 to 6 ( #36219 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 12:02:43 -08:00
dependabot[bot]
6fbbc85df7
chore(deps): bump actions/setup-node from 4 to 5 ( #35394 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 06:59:44 -07:00
dependabot[bot]
3dbe593a4a
chore(deps): bump actions/checkout from 4 to 5 ( #34969 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-03 10:36:16 -07:00
Maxime Beauchemin
531f1b6aa4
chore(gha): bump ubuntu to latest fresh release ( #31390 )
2024-12-18 23:32:10 -08:00
Evan Rusackas
8e2f81816f
build(node): Bumping to Node 20 ( #29988 )
2024-08-21 16:48:21 -06:00
Maxime Beauchemin
446a3b22dc
chore: move all GHAs to ubuntu-22.04 ( #29447 )
2024-07-01 14:19:25 -06:00
Maxime Beauchemin
d49d79121c
chore: trigger CI jobs on all release-related branches ( #29274 )
2024-06-17 13:42:58 -07:00
Maxime Beauchemin
499fb2c631
chore: add a github "action-validator" in CI ( #28358 )
2024-05-09 08:26:27 -07:00
