Commit Graph

2073 Commits

Author SHA1 Message Date
Nick Schonning 348bd5bf87
Merge pull request #2217 from nschonni/update-upload-artifact
ci: use actions/upload-artifact v4.6.2
2025-03-31 03:11:45 -04:00
Nick Schonning 7ed48822b8
Merge pull request #2214 from nodejs/dependabot/github_actions/ossf/scorecard-action-2.4.1
chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1
2025-03-30 15:44:00 -04:00
Nick Schonning c1140a9ebe
ci: use actions/upload-artifact v4.6.2 2025-03-30 15:25:26 -04:00
Nick Schonning 92e368dd79
Merge pull request #2216 from nodejs/dependabot/github_actions/actions/checkout-4.2.2
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2
2025-03-30 15:22:45 -04:00
dependabot[bot] 219691a76d
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...11bd71901bbe5b1630ceea73d27597364c9af683)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-30 19:21:14 +00:00
dependabot[bot] 62a4ab3572
chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](0864cf1902...f49aabe0b5)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-30 19:21:04 +00:00
Peter Dave Hello 2c88943b18
Merge pull request #2210 from nodejs/nschonni-ossf
ci: add OSSF scanning
2025-03-31 00:01:22 +08:00
Peter Dave Hello 201f7a3764
Merge pull request #2213 from nodejs/update-branch
feat: Node.js 18.20.8
2025-03-27 22:26:44 +08:00
Node.js GitHub Bot ba2b3e61e6 feat: Node.js 18.20.8 2025-03-27 14:23:08 +00:00
Peter Dave Hello 6e61abb4c1
Merge pull request #2212 from nodejs/dependabot/github_actions/tj-actions/changed-files-46.0.3
chore(deps): bump tj-actions/changed-files from 46.0.1 to 46.0.3
2025-03-27 22:21:34 +08:00
dependabot[bot] a824d6e460
chore(deps): bump tj-actions/changed-files from 46.0.1 to 46.0.3
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 46.0.1 to 46.0.3.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](2f7c5bfce2...823fcebdb3)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 07:07:45 +00:00
Nick Schonning ebe23e5c54
Merge pull request #2209 from nschonni/harden-ci
ci: pin various actions to SHAs
2025-03-17 10:05:32 -04:00
Nick Schonning e500e20cbb
ci: remove crazy-max/ghaction-dump-context 2025-03-17 10:00:31 -04:00
Nick Schonning c3460916f9
ci: pin peter-evans/create-or-update-comment v4.0.0 SHA 2025-03-17 10:00:30 -04:00
Nick Schonning 8790701396
ci: pin docker/build-push-action v6.15.0 SHA 2025-03-17 10:00:30 -04:00
Nick Schonning 9ac75cf0b9
ci: pin actions/setup-node v4.3.0 SHA 2025-03-17 10:00:22 -04:00
Nick Schonning 890d32f240
ci: add OSSF scanning 2025-03-17 01:20:24 -04:00
Nick Schonning 73ce790067
ci: pin tj-actions/changed-files v46.0.1 SHA 2025-03-17 01:08:26 -04:00
Nick Schonning 202c130697
ci: pin peter-evans/create-pull-request v7.0.8 SHA 2025-03-17 01:06:12 -04:00
Nick Schonning 133475e1a7
ci: pin actions/github-script v7.0.1 SHA 2025-03-17 01:04:49 -04:00
Nick Schonning 9d71cf8178
ci: pin actions/checkout 4.2.2 SHA 2025-03-17 01:03:00 -04:00
Peter Dave Hello 8e848ca2ec
Merge pull request #2206 from nodejs/update-branch
feat: Node.js 23.10.0
2025-03-14 09:32:36 +08:00
Node.js GitHub Bot b788efbf94 feat: Node.js 23.10.0 2025-03-14 00:48:35 +00:00
Peter Dave Hello c7db1060e9
Merge pull request #2205 from nodejs/update-branch
feat: Node.js 20.19.0
2025-03-13 22:52:14 +08:00
Node.js GitHub Bot e028becede feat: Node.js 20.19.0 2025-03-13 14:48:02 +00:00
Peter Dave Hello 7c659dfc7b
Merge pull request #2203 from nodejs/update-branch
feat: Node.js 23.9.0
2025-02-27 02:26:15 +08:00
Node.js GitHub Bot f35bdf80ef feat: Node.js 23.9.0 2025-02-26 18:24:17 +00:00
Simen Bekkhus 91f9b83703
Merge pull request #2202 from nodejs/update-branch
feat: Node.js 18.20.7
2025-02-20 12:33:11 +01:00
Node.js GitHub Bot 8a3f536810 feat: Node.js 18.20.7 2025-02-20 11:20:37 +00:00
Nick Schonning 904a2f6004
Merge pull request #2200 from nodejs/update-branch
feat: Node.js 23.8.0
2025-02-13 14:42:37 -05:00
Node.js GitHub Bot a3bf3e770e feat: Node.js 23.8.0 2025-02-13 19:20:00 +00:00
Nick Schonning cdedd40a65
Merge pull request #2198 from nodejs/update-branch
feat: Node.js 22.14.0
2025-02-13 00:12:06 -05:00
Node.js GitHub Bot 258c1a4075 feat: Node.js 22.14.0 2025-02-13 05:05:05 +00:00
Simen Bekkhus 10079d9aab
Merge pull request #2196 from nodejs/update-branch
feat: Node.js 20.18.3
2025-02-10 16:48:49 +01:00
Node.js GitHub Bot 6e130ce346 feat: Node.js 20.18.3 2025-02-10 15:34:31 +00:00
Simen Bekkhus 4ad03d42d8
Merge pull request #2193 from nodejs/update-branch
feat: Node.js 23.7.0
2025-01-31 18:22:30 +01:00
Node.js GitHub Bot a3e68b35ee feat: Node.js 23.7.0 2025-01-31 17:21:26 +00:00
Simen Bekkhus 32ee38269d
Merge pull request #2190 from nodejs/update-branch
feat: Node.js 18.20.6
2025-01-22 10:20:46 +01:00
Node.js GitHub Bot a2d83853f4 feat: Node.js 18.20.6 2025-01-22 06:48:46 +00:00
Peter Dave Hello 32463fdf89
Merge pull request #2189 from PeterDaveHello/update-node.js 2025-01-22 13:58:59 +08:00
Peter Dave Hello a35f40787c Node.js January 2025 security release for v18, v20, v22, and v23
Reference:
- https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
- https://nodejs.org/en/blog/release/v18.20.6
- https://nodejs.org/en/blog/release/v20.18.2
- https://nodejs.org/en/blog/release/v22.13.1
- https://nodejs.org/en/blog/release/v23.6.1
2025-01-22 10:33:10 +08:00
Simen Bekkhus 4e29b63976
Merge pull request #2185 from candrews/patch-1
docs: Use numeric uid instead of username in Dockerfile
2025-01-17 09:52:03 +01:00
Craig Andrews 655ca3407c
docs: Use numeric uid instead of username in Dockerfile
Systems configured to disallow running images as root aren't able to run images that use user name string values for the `USER` because they can't validate that a named user isn't root. To allow images to run on such systems, use the uid of the user as the value for `USER` instead of the username.

See: https://github.com/kubernetes/kubernetes/pull/56503
2025-01-16 12:23:37 -05:00
Nick Schonning 6502c3ec72
Merge pull request #2182 from nodejs/update-branch
feat: Node.js 22.13.0, 23.6.0
2025-01-07 19:26:05 -05:00
Node.js GitHub Bot 056ab87550 feat: Node.js 22.13.0, 23.6.0 2025-01-07 23:47:58 +00:00
Peter Dave Hello 41d0d0d9af
Merge pull request #2156 from nodejs/fix-update-script 2024-12-30 00:01:27 +08:00
ttshivers 59baa0a57d
Merge pull request #2179 from nodejs/update-branch
feat: Node.js 23.5.0
2024-12-19 17:56:57 -06:00
Node.js GitHub Bot 74a1f79f7a feat: Node.js 23.5.0 2024-12-19 20:48:00 +00:00
Nick Schonning 8d8fc479a7
Merge pull request #2176 from nodejs/update-branch
feat: Node.js 23.4.0
2024-12-10 13:17:49 -05:00
Node.js GitHub Bot 6983536382 feat: Node.js 23.4.0 2024-12-10 17:35:50 +00:00