12 Commits

Include renames

Author	SHA1	Message	Date
bashonly	ab3ff2d5dd	[build] Harden CI/CD pipeline (#15387) ... * NOTE: the release workflows' new handling of secrets may be a breaking change for forks that are using any secrets other than GPG_SIGNING_KEY or ARCHIVE_REPO_TOKEN. Previously, the release workflow would try to resolve a token secret name based on the `target` or `source` input, e.g. NIGHTLY_ARCHIVE_REPO_TOKEN or CUSTOM_ARCHIVE_REPO_TOKEN, and then fall back to using the ARCHIVE_REPO_TOKEN secret if the resolved token secret name was not found in the repository. This behavior has been replaced by the release workflow always using the ARCHIVE_REPO_TOKEN secret as the token for publishing releases to any external archive repository. * Add zizmor CI job for auditing workflows * Pin all actions to commit hashes instead of symbolic references * Explicitly set GITHUB_TOKEN permissions at the job level * Use actions/checkout with `persist-credentials: false` whenever possible * Remove/replace template expansions in workflow scripts * Remove all usage of actions/cache from build/release workflows * Remove the cache-warmer.yml workflow * Remove the unused download.yml workflow * Set concurrency limits for any workflows that are triggered by PRs * Avoid loading the entire secrets context * Replace usage of `secrets: inherit` with explicit `secrets:` blocks * Pin all external docker images to hash that are used by the build workflow * Explicitly set `shell: bash` for some steps to avoid pwsh or set pipefail * Ensure any pwsh steps will fail on non-zero exit codes Authored by: bashonly	2025-12-30 21:05:10 +00:00
bashonly	a6a8f6b6d6	[ci] Explicitly declare permissions and limit credentials (#15324) ... Authored by: bashonly	2025-12-19 19:22:23 +00:00
bashonly	825648a740	[build] Bump official actions to latest versions (#15305) ... * Bump actions/cache → v5 * Bump actions/upload-artifact → v6 * Bump actions/download-artifact → v7 Authored by: bashonly	2025-12-19 19:04:52 +00:00
bashonly	de7b3c0705	[cleanup] Misc (#14701) ... Authored by: bashonly	2025-10-22 19:25:35 +00:00
bashonly	50136eeeb3	[build] Overhaul Linux builds and refactor release workflow (#13997) ... - Use `manylinux-shared` images for Linux builds - Discontinue `yt-dlp_linux_armv7l`/`linux_armv7l_exe` release binary - Add `yt-dlp_linux_armv7l.zip`/`linux_armv7l_dir` release binary - Add `yt-dlp_musllinux` and `yt-dlp_musllinux_aarch64` release binaries - Migrate `linux_exe` build strategy from staticx+musl to manylinux2014/glibc2.17 - Rewrite release.yml's "unholy bash monstrosity" as devscripts/setup_variables.py Closes #10072, Closes #10630, Closes #10578, Closes #13976, Closes #13977, Closes #14106 Authored by: bashonly	2025-09-05 22:38:20 +00:00
bashonly	f13df591d4	[build] Enable attestations for trusted publishing (#11420) ... Reverts 428ffb75aa Authored by: bashonly	2024-11-09 23:26:02 +00:00
bashonly	46c1b7cfec	[build] Cache dependencies for macos job (#10088) ... Authored by: bashonly	2024-06-13 21:13:08 +00:00
bashonly	867f637b95	[cleanup] Build files cleanup ... - Fix `AUTHORS` file by doing an unshallow checkout - Update triggers for nightly/master release Authored by: bashonly	2024-02-11 19:09:03 +01:00
bashonly	775cde82dc	[build] Migrate to pyproject.toml and hatchling ... Authored by: bashonly	2024-02-11 19:09:02 +01:00
bashonly	a1b7784289	[build] Move bundle scripts into bundle submodule ... Authored by: bashonly	2024-02-11 18:17:24 +01:00
Simon Sawicki	f124fa4588	[ci] Concurrency optimizations (#8614) ... Authored by: Grub4K	2023-11-19 16:05:13 +01:00
bashonlyandSimon Sawicki	1d03633c5a	[build] Overhaul and unify release workflow ... Authored by: bashonly, Grub4K Co-authored-by: Simon Sawicki <[email protected]>	2023-11-12 18:29:19 -06:00