Commit Graph

7 Commits

Author SHA1 Message Date
dependabot[bot]
c3a1e71d98 chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#3318)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](a0853c2454...2028fbc5c2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-04 14:50:57 +09:00
Christian Oliff
f814431eea Add OSSF Scorecard security workflow (#3287)
This also pins move GitHub Actions so our initial score will be higher.
2025-09-10 12:31:34 -04:00
Christian Oliff
a0db7c3c5d Pin GitHub Actions to specific commit SHAs (#3284)
Updated workflow files to use specific commit SHAs for actions/checkout, actions/setup-node, github/codeql-action, and streetsidesoftware/cspell-action. This improves security and reproducibility by preventing unexpected changes from upstream action updates. Also set 'persist-credentials: false' for checkout steps to enhance security.
2025-09-10 10:13:59 -04:00
Christian Oliff
9a9f4e1990 Update Node Versions (for tests) (#3237)
* Update Node Versions (for tests)

- Move all test to a single file
- test on Node 20, 22 and 24 - on Windows and Ubuntu
- Sort `package.json` (with VS Code extension of this https://www.npmjs.com/package/sort-package-json)

* Update test.yml
2025-06-04 11:30:00 +02:00
Christian Oliff
07e9dc66b9 GitHub Actions Tidy-up (#3114)
- Allow CodeQL workflow to be run from GitHub Actions WebUI at any time
- Set CodeQL to also check for best practises/code problems (as well as security)
- Capitalize Publish GH Action
- Change Windows Test workflow for consistent file extension (also means its formatted with Prettier) and remove leading empty linebreak
- Run Prettier (maybe we should add this to build script to ensure all code is formatted?)
- Change .gitattributes to have LF line-endings for more file types
2024-04-23 13:16:32 -04:00
Arun Sathiya
64126bb84d ci: Use GITHUB_OUTPUT envvar instead of set-output command (#3068)
* ci: Use GITHUB_OUTPUT envvar instead of set-output command

`save-state` and `set-output` commands used in GitHub Actions are deprecated and [GitHub recommends using environment files](https://github.blog/changelog/2023-07-24-github-actions-update-on-save-state-and-set-output-commands/).

This PR updates the usage of `::set-output` to `"$GITHUB_OUTPUT"`

Instructions for envvar usage from GitHub docs:

https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-an-output-parameter

* Patch up the remaining files too
2024-01-22 20:59:38 -05:00
coliff
e0689d1e8f Docs fixes
- Fix a few typos
- Remove mention of LGTM (service closed)
- Update Theme Color docs
- Fix a markdown link
- Remove unnecessary 'Table of Contents' from FAQ since we only have 2 questions
- Rename GitHub Action file extensions from .yaml to .yml for consistency
- Run Prettier
- Fix typo on CHANGELOG
2023-12-06 16:08:27 +09:00