Commit Graph

61 Commits

Author SHA1 Message Date
dependabot[bot]
496430dc48 chore(deps): bump streetsidesoftware/cspell-action from 3 to 4 (#3042)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-01 16:02:57 +09:00
J Rob Gant
0a9f716d8f Remove normalize.css and Optimize head tag order. (#3034) 2023-10-05 17:42:37 +09:00
dependabot[bot]
cbd5b8b6d3 chore(deps): bump actions/checkout from 3 to 4 (#3012)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-08 09:19:29 +09:00
Christian Oliff
29d7d8054b Add Prettier (#3011)
Consistent code formatting!
(it fixed a few minor bugs too)
2023-09-07 16:20:47 -04:00
Christian Oliff
17073f50b0 Remove a few more Modernizr mentions 2023-09-06 10:23:04 -04:00
Rob Larsen
7e8b7e9c03 this has been broken forever (#3006) 2023-09-05 15:28:42 -04:00
Rob Larsen
0836867337 Update build-dist.yaml 2023-09-05 15:00:34 -04:00
Rob Larsen
47923c6c03 Trying to bypass branch protection rules (#3005) 2023-09-05 14:59:38 -04:00
dependabot[bot]
bc68f051db chore(deps): bump streetsidesoftware/cspell-action from 2 to 3 (#2997)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-01 16:45:39 +09:00
Rob Larsen
5df316b86b Drop Normalize (#2960)
* npm updates

* tests and readme

* node versions
2023-08-30 21:34:43 -04:00
Rob Larsen
e4b20602a8 Update Issue Template 2023-03-11 01:31:56 +09:00
dependabot[bot]
a34a3954e7 chore(deps): bump actions/dependency-review-action from 2 to 3 (#2880)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-01 16:09:29 +09:00
Alex
e1c825d925 Update push-to-template.yaml 2022-08-31 08:13:16 +01:00
Christian Oliff
f0f8369df7 Add Spellcheck GitHub Action
This is setup to display typos in a PR review UI and will warn (but not error) if any detected.
2022-07-13 10:43:54 +09:00
dependabot[bot]
58f76aaa44 chore(deps): bump actions/dependency-review-action from 1 to 2
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 1 to 2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-27 02:33:24 +00:00
Christian Oliff
140fe31e5a Create codeql-analysis.yml
FIxes: #2785
2022-06-08 11:11:14 +09:00
Christian Oliff
a1d3ea3505 Remove apache-server-configs / .htaccess 2022-06-04 11:45:00 +09:00
Christian Oliff
3743365f8c Create dependency-review.yml 2022-04-18 20:16:01 +09:00
Christian Oliff
5ff5aad134 Update dependabot.yml
change frequency to monthly. This keeps thing a bit quieter and makes git history less busy.
2022-04-18 16:16:48 +09:00
Rob Larsen
d9f34cb5c3 Merge pull request #2740 from turrisxyz/naveen/feat/set-perms-actions
Set permissions for GitHub actions
2022-04-12 11:31:13 -04:00
Christian Oliff
ad158346ea update node version
package.json to specify node 14.x and above (as support for Node 12.x ends very soon).
https://nodejs.org/en/about/releases/

Update GitHub Actions to use Maintained and Active versions of Node.
2022-04-12 11:19:02 +09:00
naveensrinivasan
1b6f24e927 Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-10 00:09:46 +00:00
dependabot[bot]
01889180e8 chore(deps): bump actions/cache from 2 to 3
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 07:11:30 +00:00
dependabot[bot]
28521df009 chore(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-07 07:14:09 +00:00
dependabot[bot]
c8c777b0cc chore(deps): bump actions/setup-node from 2.5.1 to 3 (#2714)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.5.1 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.5.1...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-28 12:55:35 -05:00
dependabot[bot]
4ebe7d9559 chore(deps): bump actions/setup-node from 2.5.0 to 2.5.1
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-03 07:11:02 +00:00
Rob Larsen
8860e8542c Update build-dist.yaml 2021-12-06 10:13:47 -05:00
dependabot[bot]
89863bab79 chore(deps): bump actions/setup-node from 2.4.1 to 2.5.0 (#2658)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-06 09:42:52 -05:00
Rob Larsen
899fb0b411 ci -> install 2021-12-03 23:00:57 -05:00
Rob Larsen
cc6785ebe5 Create build-dist.yaml 2021-12-03 22:49:03 -05:00
Rob Larsen
81bfc44462 Changing commit message 2021-11-11 22:06:45 -05:00
Rob Larsen
1e54989216 Update push-to-template.yaml 2021-11-11 21:58:26 -05:00
Rob Larsen
fba6c345d1 Update push-to-template.yaml 2021-11-11 21:28:29 -05:00
Rob Larsen
84043984bd Update push-to-template.yaml 2021-11-11 21:26:57 -05:00
Rob Larsen
82160729f3 Merge branch 'push-to-another-repo' of https://github.com/vltansky/html5-boilerplate into vltansky-push-to-another-repo 2021-11-11 09:15:32 -05:00
dependabot[bot]
fb92e53224 chore(deps): bump actions/setup-node from 1 to 2.4.1
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 1 to 2.4.1.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v1...v2.4.1)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-10-19 01:56:06 +00:00
Christian Oliff
26302a5ec2 add github actions to dependabot 2021-10-19 10:48:09 +09:00
Christian Oliff
19ede6465e Add link to CONTRIBUTING file
It can be easy to miss
2021-09-02 17:13:41 +09:00
Rob Larsen
ca25fc9a83 replaces references to master with main 2021-08-18 10:54:36 -04:00
Rob Larsen
595ce4a272 Adds src/package.json to dependabot 2021-03-31 20:50:03 -04:00
Christian Oliff
26d66ad35c Update nodejs version and action
REF: actions/setup-node#v2
2021-02-02 12:27:04 +09:00
Vlad
72711ed978 ci: change name 2020-10-21 09:05:26 +03:00
Vlad
aab1e01865 ci: fixes to push-to-template workflw 2020-10-21 09:01:27 +03:00
Vlad
b894bdfe95 ci: push to antoher repo 2020-10-21 08:49:08 +03:00
Rob Larsen
1f26dfb2dd Jquery refs (#2348)
* Removes some stray references to jQuery
2020-09-30 09:13:28 -04:00
Christian Oliff
5f0505976a fix dependabot config
Right now when a PR is merged it updates the package-lock.json but not the package.json. Ideally it should do both.
We can adjust (fix) that by adding the line 'versioning-strategy: increase' to the dependabot.yml config.
That's what Bootstrap has (https://github.com/twbs/bootstrap/blob/main/.github/dependabot.yml).
Details:
https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#versioning-strategy
2020-09-07 21:57:51 +09:00
Christian Oliff
fbb4530ad0 Change update check in dependabot config to weekly
change update frequency to cut down on PR 'noise'.

REF: https://dependabot.com/docs/config-file/#available-schedules
2020-08-19 00:40:40 +09:00
Vlad Tansky
c3189a6c0b chore: add dependabot (#2275) 2020-06-26 12:11:36 -04:00
Vlad Tansky
3bb9b72319 CI: use GitHub Actions for Pull Requests / Push tests (#2271)
* ci: run tests with github actions

* ci: name

* ci: add nodejs 10

* ci: remove travis

* ci: nodejs 10 typo

* docs: replace travis build status badge with github actions

* docs: ci badge

* docs: use h5bp for ci badge

* ci: name

* ci: newline & remove comment
2020-06-12 11:59:05 -04:00
Rob Larsen
70e24fa6a3 Adjusts the contents of the zip folder...
and updates the name to match previous versions.
2020-06-03 13:02:49 -04:00