renovate[bot]
9240bbc6ff
chore(deps): update github-actions ( #19045 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-24 22:54:05 +02:00
bo0tzz
b0a0ae6cd3
feat: use shared success-check action ( #18975 )
2025-06-07 10:54:39 +02:00
bo0tzz
68f6111b77
chore: use full action versions in comment ( #18260 )
...
* Update pr-label-validation.yml
* Update pr-labeler.yml
* Update prepare-release.yml
* Update preview-label.yaml
* Update sdk.yml
* Update static_analysis.yml
* Update test.yml
* Update weblate-lock.yml
* Update build-mobile.yml
* Update cache-cleanup.yml
* Update cli.yml
* Update codeql-analysis.yml
* Update docker.yml
* Update docs-build.yml
* Update docs-deploy.yml
* Update docs-destroy.yml
* Update fix-format.yml
2025-05-13 13:29:55 -04:00
bo0tzz
64000d9d76
feat: static analysis job for gha workflows ( #17688 )
...
* fix: set persist-credentials explicitly for checkout
https://woodruffw.github.io/zizmor/audits/#artipacked
* fix: minimize permissions scope for workflows
https://woodruffw.github.io/zizmor/audits/#excessive-permissions
* fix: remove potential template injections
https://woodruffw.github.io/zizmor/audits/#template-injection
* fix: only pass needed secrets in workflow_call
https://woodruffw.github.io/zizmor/audits/#secrets-inherit
* fix: push perm for single-arch build jobs
I hadn't realised these push to the registry too :x
* chore: fix formatting
* fix: $
* fix: retag job quoting
* feat: static analysis job for gha workflows
* chore: fix formatting
* fix: clear last zizmor checks
* fix: broken merge
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2025-04-23 15:49:06 +00:00
bo0tzz
504930947d
fix: various actions workflow security improvements ( #17651 )
...
* fix: set persist-credentials explicitly for checkout
https://woodruffw.github.io/zizmor/audits/#artipacked
* fix: minimize permissions scope for workflows
https://woodruffw.github.io/zizmor/audits/#excessive-permissions
* fix: remove potential template injections
https://woodruffw.github.io/zizmor/audits/#template-injection
* fix: only pass needed secrets in workflow_call
https://woodruffw.github.io/zizmor/audits/#secrets-inherit
* fix: push perm for single-arch build jobs
I hadn't realised these push to the registry too :x
* chore: fix formatting
* fix: $
* fix: retag job quoting
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2025-04-18 15:10:27 -05:00
Nicholas Flamy
9e015c7f97
feat: lint workflow files and others files in .github ( #16914 )
...
* add npm prettier dep and format script to .github folder
* initial work on prettier formatting test
* attempt index notation
* change name of .github job to be valid
* another use of index notation
this is getting overcomplicated
* Change job ID to `github-files-formatting` and chane the name to `.github Files Checks`
* Change job name to `.github Files Formatting`
* Update Makefile with .github module and `filter-out`s
* run prettier formatting as added in this PR
2025-03-24 10:49:18 -05:00
renovate[bot]
9105e696bf
chore(deps): pin github action dependencies ( #16923 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-17 17:25:14 +00:00
Zack Pollard
e0a09f2ea0
fix: weblate pre-job not running ( #16802 )
...
* chore: add debug step to weblate pre-job
* fix: weblate enforce lock missing needs for pre-job
2025-03-11 11:10:00 +00:00
Zack Pollard
23b1256592
ci: weblate checks should always run, should skip on en.json ( #16544 )
2025-03-03 17:12:26 +00:00
Zack Pollard
24da25dbbf
ci: don't check weblate lock on chore/translations and add success job ( #16533 )
2025-03-03 13:22:33 +01:00
bo0tzz
8e076ecfe4
feat: weblate checks workflow ( #16251 )
2025-03-03 11:39:53 +00:00
