Nick Schonning
348bd5bf87
Merge pull request #2217 from nschonni/update-upload-artifact
...
ci: use actions/upload-artifact v4.6.2
2025-03-31 03:11:45 -04:00
Nick Schonning
7ed48822b8
Merge pull request #2214 from nodejs/dependabot/github_actions/ossf/scorecard-action-2.4.1
...
chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1
2025-03-30 15:44:00 -04:00
Nick Schonning
c1140a9ebe
ci: use actions/upload-artifact v4.6.2
2025-03-30 15:25:26 -04:00
Nick Schonning
92e368dd79
Merge pull request #2216 from nodejs/dependabot/github_actions/actions/checkout-4.2.2
...
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2
2025-03-30 15:22:45 -04:00
dependabot[bot]
219691a76d
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...11bd71901bbe5b1630ceea73d27597364c9af683 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-30 19:21:14 +00:00
dependabot[bot]
62a4ab3572
chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](0864cf1902...f49aabe0b5 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-30 19:21:04 +00:00
Peter Dave Hello
2c88943b18
Merge pull request #2210 from nodejs/nschonni-ossf
...
ci: add OSSF scanning
2025-03-31 00:01:22 +08:00
Peter Dave Hello
201f7a3764
Merge pull request #2213 from nodejs/update-branch
...
feat: Node.js 18.20.8
2025-03-27 22:26:44 +08:00
Node.js GitHub Bot
ba2b3e61e6
feat: Node.js 18.20.8
2025-03-27 14:23:08 +00:00
Peter Dave Hello
6e61abb4c1
Merge pull request #2212 from nodejs/dependabot/github_actions/tj-actions/changed-files-46.0.3
...
chore(deps): bump tj-actions/changed-files from 46.0.1 to 46.0.3
2025-03-27 22:21:34 +08:00
dependabot[bot]
a824d6e460
chore(deps): bump tj-actions/changed-files from 46.0.1 to 46.0.3
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 46.0.1 to 46.0.3.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](2f7c5bfce2...823fcebdb3 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 07:07:45 +00:00
Nick Schonning
ebe23e5c54
Merge pull request #2209 from nschonni/harden-ci
...
ci: pin various actions to SHAs
2025-03-17 10:05:32 -04:00
Nick Schonning
e500e20cbb
ci: remove crazy-max/ghaction-dump-context
2025-03-17 10:00:31 -04:00
Nick Schonning
c3460916f9
ci: pin peter-evans/create-or-update-comment v4.0.0 SHA
2025-03-17 10:00:30 -04:00
Nick Schonning
8790701396
ci: pin docker/build-push-action v6.15.0 SHA
2025-03-17 10:00:30 -04:00
Nick Schonning
9ac75cf0b9
ci: pin actions/setup-node v4.3.0 SHA
2025-03-17 10:00:22 -04:00
Nick Schonning
890d32f240
ci: add OSSF scanning
2025-03-17 01:20:24 -04:00
Nick Schonning
73ce790067
ci: pin tj-actions/changed-files v46.0.1 SHA
2025-03-17 01:08:26 -04:00
Nick Schonning
202c130697
ci: pin peter-evans/create-pull-request v7.0.8 SHA
2025-03-17 01:06:12 -04:00
Nick Schonning
133475e1a7
ci: pin actions/github-script v7.0.1 SHA
2025-03-17 01:04:49 -04:00
Nick Schonning
9d71cf8178
ci: pin actions/checkout 4.2.2 SHA
2025-03-17 01:03:00 -04:00
Peter Dave Hello
8e848ca2ec
Merge pull request #2206 from nodejs/update-branch
...
feat: Node.js 23.10.0
2025-03-14 09:32:36 +08:00
Node.js GitHub Bot
b788efbf94
feat: Node.js 23.10.0
2025-03-14 00:48:35 +00:00
Peter Dave Hello
c7db1060e9
Merge pull request #2205 from nodejs/update-branch
...
feat: Node.js 20.19.0
2025-03-13 22:52:14 +08:00
Node.js GitHub Bot
e028becede
feat: Node.js 20.19.0
2025-03-13 14:48:02 +00:00
Peter Dave Hello
7c659dfc7b
Merge pull request #2203 from nodejs/update-branch
...
feat: Node.js 23.9.0
2025-02-27 02:26:15 +08:00
Node.js GitHub Bot
f35bdf80ef
feat: Node.js 23.9.0
2025-02-26 18:24:17 +00:00
Simen Bekkhus
91f9b83703
Merge pull request #2202 from nodejs/update-branch
...
feat: Node.js 18.20.7
2025-02-20 12:33:11 +01:00
Node.js GitHub Bot
8a3f536810
feat: Node.js 18.20.7
2025-02-20 11:20:37 +00:00
Nick Schonning
904a2f6004
Merge pull request #2200 from nodejs/update-branch
...
feat: Node.js 23.8.0
2025-02-13 14:42:37 -05:00
Node.js GitHub Bot
a3bf3e770e
feat: Node.js 23.8.0
2025-02-13 19:20:00 +00:00
Nick Schonning
cdedd40a65
Merge pull request #2198 from nodejs/update-branch
...
feat: Node.js 22.14.0
2025-02-13 00:12:06 -05:00
Node.js GitHub Bot
258c1a4075
feat: Node.js 22.14.0
2025-02-13 05:05:05 +00:00
Simen Bekkhus
10079d9aab
Merge pull request #2196 from nodejs/update-branch
...
feat: Node.js 20.18.3
2025-02-10 16:48:49 +01:00
Node.js GitHub Bot
6e130ce346
feat: Node.js 20.18.3
2025-02-10 15:34:31 +00:00
Simen Bekkhus
4ad03d42d8
Merge pull request #2193 from nodejs/update-branch
...
feat: Node.js 23.7.0
2025-01-31 18:22:30 +01:00
Node.js GitHub Bot
a3e68b35ee
feat: Node.js 23.7.0
2025-01-31 17:21:26 +00:00
Simen Bekkhus
32ee38269d
Merge pull request #2190 from nodejs/update-branch
...
feat: Node.js 18.20.6
2025-01-22 10:20:46 +01:00
Node.js GitHub Bot
a2d83853f4
feat: Node.js 18.20.6
2025-01-22 06:48:46 +00:00
Peter Dave Hello
32463fdf89
Merge pull request #2189 from PeterDaveHello/update-node.js
2025-01-22 13:58:59 +08:00
Peter Dave Hello
a35f40787c
Node.js January 2025 security release for v18, v20, v22, and v23
...
Reference:
- https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
- https://nodejs.org/en/blog/release/v18.20.6
- https://nodejs.org/en/blog/release/v20.18.2
- https://nodejs.org/en/blog/release/v22.13.1
- https://nodejs.org/en/blog/release/v23.6.1
2025-01-22 10:33:10 +08:00
Simen Bekkhus
4e29b63976
Merge pull request #2185 from candrews/patch-1
...
docs: Use numeric uid instead of username in Dockerfile
2025-01-17 09:52:03 +01:00
Craig Andrews
655ca3407c
docs: Use numeric uid instead of username in Dockerfile
...
Systems configured to disallow running images as root aren't able to run images that use user name string values for the `USER` because they can't validate that a named user isn't root. To allow images to run on such systems, use the uid of the user as the value for `USER` instead of the username.
See: https://github.com/kubernetes/kubernetes/pull/56503
2025-01-16 12:23:37 -05:00
Nick Schonning
6502c3ec72
Merge pull request #2182 from nodejs/update-branch
...
feat: Node.js 22.13.0, 23.6.0
2025-01-07 19:26:05 -05:00
Node.js GitHub Bot
056ab87550
feat: Node.js 22.13.0, 23.6.0
2025-01-07 23:47:58 +00:00
Peter Dave Hello
41d0d0d9af
Merge pull request #2156 from nodejs/fix-update-script
2024-12-30 00:01:27 +08:00
ttshivers
59baa0a57d
Merge pull request #2179 from nodejs/update-branch
...
feat: Node.js 23.5.0
2024-12-19 17:56:57 -06:00
Node.js GitHub Bot
74a1f79f7a
feat: Node.js 23.5.0
2024-12-19 20:48:00 +00:00
Nick Schonning
8d8fc479a7
Merge pull request #2176 from nodejs/update-branch
...
feat: Node.js 23.4.0
2024-12-10 13:17:49 -05:00
Node.js GitHub Bot
6983536382
feat: Node.js 23.4.0
2024-12-10 17:35:50 +00:00