dependabot[bot]
496430dc48
chore(deps): bump streetsidesoftware/cspell-action from 3 to 4 ( #3042 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-01 16:02:57 +09:00
J Rob Gant
0a9f716d8f
Remove normalize.css and Optimize head tag order. ( #3034 )
2023-10-05 17:42:37 +09:00
dependabot[bot]
cbd5b8b6d3
chore(deps): bump actions/checkout from 3 to 4 ( #3012 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-08 09:19:29 +09:00
Christian Oliff
29d7d8054b
Add Prettier ( #3011 )
...
Consistent code formatting!
(it fixed a few minor bugs too)
2023-09-07 16:20:47 -04:00
Christian Oliff
17073f50b0
Remove a few more Modernizr mentions
2023-09-06 10:23:04 -04:00
Rob Larsen
7e8b7e9c03
this has been broken forever ( #3006 )
2023-09-05 15:28:42 -04:00
Rob Larsen
0836867337
Update build-dist.yaml
2023-09-05 15:00:34 -04:00
Rob Larsen
47923c6c03
Trying to bypass branch protection rules ( #3005 )
2023-09-05 14:59:38 -04:00
dependabot[bot]
bc68f051db
chore(deps): bump streetsidesoftware/cspell-action from 2 to 3 ( #2997 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-01 16:45:39 +09:00
Rob Larsen
5df316b86b
Drop Normalize ( #2960 )
...
* npm updates
* tests and readme
* node versions
2023-08-30 21:34:43 -04:00
Rob Larsen
e4b20602a8
Update Issue Template
2023-03-11 01:31:56 +09:00
dependabot[bot]
a34a3954e7
chore(deps): bump actions/dependency-review-action from 2 to 3 ( #2880 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-01 16:09:29 +09:00
Alex
e1c825d925
Update push-to-template.yaml
2022-08-31 08:13:16 +01:00
Christian Oliff
f0f8369df7
Add Spellcheck GitHub Action
...
This is setup to display typos in a PR review UI and will warn (but not error) if any detected.
2022-07-13 10:43:54 +09:00
dependabot[bot]
58f76aaa44
chore(deps): bump actions/dependency-review-action from 1 to 2
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1 to 2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-27 02:33:24 +00:00
Christian Oliff
140fe31e5a
Create codeql-analysis.yml
...
FIxes : #2785
2022-06-08 11:11:14 +09:00
Christian Oliff
a1d3ea3505
Remove apache-server-configs / .htaccess
2022-06-04 11:45:00 +09:00
Christian Oliff
3743365f8c
Create dependency-review.yml
2022-04-18 20:16:01 +09:00
Christian Oliff
5ff5aad134
Update dependabot.yml
...
change frequency to monthly. This keeps thing a bit quieter and makes git history less busy.
2022-04-18 16:16:48 +09:00
Rob Larsen
d9f34cb5c3
Merge pull request #2740 from turrisxyz/naveen/feat/set-perms-actions
...
Set permissions for GitHub actions
2022-04-12 11:31:13 -04:00
Christian Oliff
ad158346ea
update node version
...
package.json to specify node 14.x and above (as support for Node 12.x ends very soon).
https://nodejs.org/en/about/releases/
Update GitHub Actions to use Maintained and Active versions of Node.
2022-04-12 11:19:02 +09:00
naveensrinivasan
1b6f24e927
Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com >
2022-04-10 00:09:46 +00:00
dependabot[bot]
01889180e8
chore(deps): bump actions/cache from 2 to 3
...
Bumps [actions/cache](https://github.com/actions/cache ) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases )
- [Commits](https://github.com/actions/cache/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-03-28 07:11:30 +00:00
dependabot[bot]
28521df009
chore(deps): bump actions/checkout from 2 to 3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-03-07 07:14:09 +00:00
dependabot[bot]
c8c777b0cc
chore(deps): bump actions/setup-node from 2.5.1 to 3 ( #2714 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 2.5.1 to 3.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v2.5.1...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-28 12:55:35 -05:00
dependabot[bot]
4ebe7d9559
chore(deps): bump actions/setup-node from 2.5.0 to 2.5.1
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v2.5.0...v2.5.1 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-01-03 07:11:02 +00:00
Rob Larsen
8860e8542c
Update build-dist.yaml
2021-12-06 10:13:47 -05:00
dependabot[bot]
89863bab79
chore(deps): bump actions/setup-node from 2.4.1 to 2.5.0 ( #2658 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v2.4.1...v2.5.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-06 09:42:52 -05:00
Rob Larsen
899fb0b411
ci -> install
2021-12-03 23:00:57 -05:00
Rob Larsen
cc6785ebe5
Create build-dist.yaml
2021-12-03 22:49:03 -05:00
Rob Larsen
81bfc44462
Changing commit message
2021-11-11 22:06:45 -05:00
Rob Larsen
1e54989216
Update push-to-template.yaml
2021-11-11 21:58:26 -05:00
Rob Larsen
fba6c345d1
Update push-to-template.yaml
2021-11-11 21:28:29 -05:00
Rob Larsen
84043984bd
Update push-to-template.yaml
2021-11-11 21:26:57 -05:00
Rob Larsen
82160729f3
Merge branch 'push-to-another-repo' of https://github.com/vltansky/html5-boilerplate into vltansky-push-to-another-repo
2021-11-11 09:15:32 -05:00
dependabot[bot]
fb92e53224
chore(deps): bump actions/setup-node from 1 to 2.4.1
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 1 to 2.4.1.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v1...v2.4.1 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-10-19 01:56:06 +00:00
Christian Oliff
26302a5ec2
add github actions to dependabot
2021-10-19 10:48:09 +09:00
Christian Oliff
19ede6465e
Add link to CONTRIBUTING file
...
It can be easy to miss
2021-09-02 17:13:41 +09:00
Rob Larsen
ca25fc9a83
replaces references to master with main
2021-08-18 10:54:36 -04:00
Rob Larsen
595ce4a272
Adds src/package.json to dependabot
2021-03-31 20:50:03 -04:00
Christian Oliff
26d66ad35c
Update nodejs version and action
...
REF: actions/setup-node#v2
2021-02-02 12:27:04 +09:00
Vlad
72711ed978
ci: change name
2020-10-21 09:05:26 +03:00
Vlad
aab1e01865
ci: fixes to push-to-template workflw
2020-10-21 09:01:27 +03:00
Vlad
b894bdfe95
ci: push to antoher repo
2020-10-21 08:49:08 +03:00
Rob Larsen
1f26dfb2dd
Jquery refs ( #2348 )
...
* Removes some stray references to jQuery
2020-09-30 09:13:28 -04:00
Christian Oliff
5f0505976a
fix dependabot config
...
Right now when a PR is merged it updates the package-lock.json but not the package.json. Ideally it should do both.
We can adjust (fix) that by adding the line 'versioning-strategy: increase' to the dependabot.yml config.
That's what Bootstrap has (https://github.com/twbs/bootstrap/blob/main/.github/dependabot.yml ).
Details:
https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#versioning-strategy
2020-09-07 21:57:51 +09:00
Christian Oliff
fbb4530ad0
Change update check in dependabot config to weekly
...
change update frequency to cut down on PR 'noise'.
REF: https://dependabot.com/docs/config-file/#available-schedules
2020-08-19 00:40:40 +09:00
Vlad Tansky
c3189a6c0b
chore: add dependabot ( #2275 )
2020-06-26 12:11:36 -04:00
Vlad Tansky
3bb9b72319
CI: use GitHub Actions for Pull Requests / Push tests ( #2271 )
...
* ci: run tests with github actions
* ci: name
* ci: add nodejs 10
* ci: remove travis
* ci: nodejs 10 typo
* docs: replace travis build status badge with github actions
* docs: ci badge
* docs: use h5bp for ci badge
* ci: name
* ci: newline & remove comment
2020-06-12 11:59:05 -04:00
Rob Larsen
70e24fa6a3
Adjusts the contents of the zip folder...
...
and updates the name to match previous versions.
2020-06-03 13:02:49 -04:00