12 Commits

Author	SHA1	Message	Date
dlp-bot	59bba1be7b	[ci] Update 3 actions in 9 workflows (#16782) ... * Bump actions/checkout v6.0.2 => v6.0.3 * Bump docker/setup-qemu-action v4.0.0 => v4.1.0 * Bump github/codeql-action v4.35.5 => v4.36.2 Authored by: dlp-bot	2026-06-09 00:52:34 +00:00
dlp-bot	125bb40468	[ci] Update 2 actions in 2 workflows (#16743) ... * Bump github/codeql-action v4.35.2 => v4.35.5 * Bump zizmorcore/zizmor-action v0.5.3 => v0.5.6 Authored by: dlp-bot	2026-05-22 17:23:03 +00:00
bashonly	a85b386212	[ci] Update 8 actions in 7 workflows (#16384) ... * Bump actions/cache v5.0.3 => v5.0.5 * Bump actions/setup-node v6.3.0 => v6.4.0 * Bump actions/upload-artifact v7.0.0 => v7.0.1 * Bump denoland/setup-deno v2.0.3 => v2.0.4 * Bump github/codeql-action v4.33.0 => v4.35.2 * Bump pypa/gh-action-pypi-publish v1.13.0 => v1.14.0 * Bump rhysd/actionlint 1.7.11 => 1.7.12 * Bump zizmorcore/zizmor-action v0.5.2 => v0.5.3 Authored by: bashonly	2026-05-16 00:24:12 +00:00
bashonly	4fc768b7f7	[ci] Bump actions pins (#16252) ... * Bump actions/cache v5.0.2 → v5.0.3 * Bump actions/download-artifact v7.0.0 → v8.0.1 * Bump actions/setup-node v6.2.0 → v6.3.0 * Bump actions/upload-artifact v6.0.0 → v7.0.0 * Bump docker/setup-qemu-action v3.7.0 → v4.0.0 * Bump github/codeql-action v4.31.9 → v4.33.0 * Bump oven-sh/setup-bun v2.1.2 → v2.2.0 * Bump zizmorcore/zizmor-action v0.4.1 → v0.5.2 * Bump actionlint v1.7.9 → v1.7.11 * Bump zizmor v1.22.0 → v1.23.1 * Adapt zizmor configuration to new version Authored by: bashonly	2026-03-17 18:04:32 +00:00
bashonly	a65349443b	[cleanup] Misc (#15430) ... Authored by: bashonly, Grub4K, seproDev Co-authored-by: sepro <sepro@sepr0.com> Co-authored-by: Simon Sawicki <contact@grub4k.dev>	2026-01-29 16:22:35 +00:00
bashonly	ab3ff2d5dd	[build] Harden CI/CD pipeline (#15387) ... * NOTE: the release workflows' new handling of secrets may be a breaking change for forks that are using any secrets other than GPG_SIGNING_KEY or ARCHIVE_REPO_TOKEN. Previously, the release workflow would try to resolve a token secret name based on the `target` or `source` input, e.g. NIGHTLY_ARCHIVE_REPO_TOKEN or CUSTOM_ARCHIVE_REPO_TOKEN, and then fall back to using the ARCHIVE_REPO_TOKEN secret if the resolved token secret name was not found in the repository. This behavior has been replaced by the release workflow always using the ARCHIVE_REPO_TOKEN secret as the token for publishing releases to any external archive repository. * Add zizmor CI job for auditing workflows * Pin all actions to commit hashes instead of symbolic references * Explicitly set GITHUB_TOKEN permissions at the job level * Use actions/checkout with `persist-credentials: false` whenever possible * Remove/replace template expansions in workflow scripts * Remove all usage of actions/cache from build/release workflows * Remove the cache-warmer.yml workflow * Remove the unused download.yml workflow * Set concurrency limits for any workflows that are triggered by PRs * Avoid loading the entire secrets context * Replace usage of `secrets: inherit` with explicit `secrets:` blocks * Pin all external docker images to hash that are used by the build workflow * Explicitly set `shell: bash` for some steps to avoid pwsh or set pipefail * Ensure any pwsh steps will fail on non-zero exit codes Authored by: bashonly	2025-12-30 21:05:10 +00:00
bashonly	a6a8f6b6d6	[ci] Explicitly declare permissions and limit credentials (#15324) ... Authored by: bashonly	2025-12-19 19:22:23 +00:00
bashonly	7a52ff29d8	[cleanup] Misc (#15016) ... Closes #15160, Closes #15184 Authored by: bashonly, seproDev, RezSat, oxyzenQ Co-authored-by: sepro <sepro@sepr0.com> Co-authored-by: Yehan Wasura <yehantest@gmail.com> Co-authored-by: rezky_nightky <with.rezky@gmail.com>	2025-12-07 23:58:34 +00:00
sepro	c7bda2192a	[cleanup] Misc (#14594) ... Authored by: seproDev, bashonly Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>	2025-10-15 11:16:50 +00:00
bashonly	4985a40417	[cleanup] Misc (#12238) ... Authored by: StefanLobbenmeier, dirkf, Grub4K Co-authored-by: Stefan Lobbenmeier <Stefan.Lobbenmeier@gmail.com> Co-authored-by: dirkf <fieldhouse@gmx.net> Co-authored-by: Simon Sawicki <contact@grub4k.xyz>	2025-02-19 02:29:29 +00:00
bashonly	5438593a35	[ci] Bump actions/checkout to v4 ... Authored by: bashonly	2023-11-12 18:30:01 -06:00
Jorge	6355b5f1e1	[misc] Add CodeQL workflow (#7497)	2023-07-06 20:21:46 +05:30