dependabot[bot]
1c71d2134f
Bump the github-actions group across 1 directory with 2 updates
...
Bumps the github-actions group with 2 updates in the / directory: [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `tj-actions/changed-files` from 45.0.4 to 45.0.5
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](4edd678ac3...bab30c2299
)
Updates `github/codeql-action` from 3.27.4 to 3.27.7
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](ea9e4e3799...babb554ede
)
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-11 14:52:10 +00:00
Daz DeBoer
52ee405746
Run CodeQL on all commits
2024-11-14 13:44:22 -07:00
daz
b12c3a65f2
Pin version of 3rd party actions
2024-11-14 12:35:29 -07:00
daz
d30cc9ecf2
Pin actions/checkout@v4
2024-11-14 12:19:48 -07:00
Daz DeBoer
07e0f1c008
Limit token permissions in GitHub workflows ( #440 )
...
See
ea7e27ed41/docs/checks.md (token-permissions)
2024-11-13 19:01:45 -07:00
daz
e3bc05f224
Run CodeQL on PRs
2024-06-13 13:15:23 -06:00
daz
485ea107b7
Run CodeQL on dev/* branches
2024-06-13 13:01:56 -06:00
daz
0325d99e52
Workflow fixes
...
- Fix typo in 'paths-ignore'
- Add back 'buildDistribution' to demo job summary
2024-04-12 10:34:50 -06:00
daz
7d97cfadb0
Avoid most workflows when only 'dist' has changed
2024-04-11 22:54:09 -06:00
daz
d37a479015
Use pull_request triggers primarily for workflows
...
Instead of relying on push triggers in general, we now use pull_request
and reserve push triggers for main and release branches.
This makes the behaviour more consistent for users contributing from
repository forks. However, we no longer have a quick-feedback loop
for development.
2024-04-10 16:48:14 -06:00
daz
22e5c984e7
Update workflows for move to 'sources'
2024-01-25 11:53:44 -07:00
daz
4dda5928c7
Update CodeQL config to latest default
2024-01-04 13:03:33 -07:00
dependabot[bot]
14b4921945
Bump the github-actions group with 3 updates
...
Bumps the github-actions group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action ), [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action ) and [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
Updates `gradle/gradle-build-action` from 2.10.0 to 2.11.0
- [Release notes](https://github.com/gradle/gradle-build-action/releases )
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.10.0...v2.11.0 )
Updates `actions/upload-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: gradle/gradle-build-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-23 18:25:51 -07:00
dependabot[bot]
5e3952da92
Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout ) and [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action ).
Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
Updates `gradle/gradle-build-action` from 2.7.1 to 2.8.0
- [Release notes](https://github.com/gradle/gradle-build-action/releases )
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.7.1...v2.8.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: gradle/gradle-build-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-21 16:35:57 +02:00
Daz DeBoer
9ab4abd18c
Update to latest version of all github actions
2022-06-04 09:26:11 -06:00
Daz DeBoer
e32d23f291
Capitalize to improve ordering
2022-05-29 15:04:12 -06:00
Daz DeBoer
a880eab216
More consistent names for workflow jobs
2022-05-29 15:04:11 -06:00
Daz DeBoer
bdb9f7fd28
Use shorter workflow names
2022-05-29 13:04:26 -06:00