Nick Schonning
|
9ac75cf0b9
|
ci: pin actions/setup-node v4.3.0 SHA
|
2025-03-17 10:00:22 -04:00 |
Nick Schonning
|
9d71cf8178
|
ci: pin actions/checkout 4.2.2 SHA
|
2025-03-17 01:03:00 -04:00 |
dependabot[bot]
|
f044847f3f
|
chore(deps): bump actions/setup-node from 3 to 4
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-10-24 07:02:56 +00:00 |
dependabot[bot]
|
aaae8ece68
|
chore(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-09-05 07:14:18 +00:00 |
naveensrinivasan
|
92477b4608
|
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
|
2022-04-23 21:23:42 -05:00 |
dependabot[bot]
|
0efe196a89
|
chore(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-03-02 07:24:29 +00:00 |
Simen Bekkhus
|
fb84cc6214
|
chore: run all GH actions using Node LTS, not v12
|
2022-02-27 20:40:45 +01:00 |
dependabot[bot]
|
e1038c648f
|
chore(deps): bump actions/setup-node from 2 to 3
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-02-27 19:34:13 +00:00 |
Nick Schonning
|
2fb063031e
|
ci: unpin setup-node to v2
|
2021-12-29 10:15:34 -05:00 |
dependabot[bot]
|
3bc55c2f43
|
chore(deps): bump actions/setup-node from 2.5.0 to 2.5.1
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.5.0...v2.5.1)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-12-29 07:03:44 +00:00 |
dependabot[bot]
|
edfc12cfac
|
chore(deps): bump actions/setup-node from 2.4.1 to 2.5.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.4.1...v2.5.0)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-11-30 07:04:12 +00:00 |
dependabot[bot]
|
5dde251000
|
chore(deps): bump actions/setup-node from 2.4.0 to 2.4.1
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.4.0...v2.4.1)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-09-28 07:04:27 +00:00 |
dependabot[bot]
|
960b9a3250
|
chore(deps): bump actions/setup-node from 2.3.2 to 2.4.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.3.2 to 2.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.3.2...v2.4.0)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-06 07:03:07 +00:00 |
dependabot[bot]
|
75fd827fec
|
chore(deps): bump actions/setup-node from 2.3.0 to 2.3.2
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.3.0 to 2.3.2.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.3.0...v2.3.2)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-04 17:08:07 +00:00 |
dependabot[bot]
|
ad0e7cec04
|
chore(deps): bump actions/setup-node from 2.2.0 to 2.3.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.2.0...v2.3.0)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-07-21 07:02:52 +00:00 |
dependabot[bot]
|
3eb5ad46de
|
chore(deps): bump actions/setup-node from 2.1.5 to 2.2.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.1.5 to 2.2.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.1.5...v2.2.0)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-07-01 07:04:00 +00:00 |
dependabot[bot]
|
9b75c37512
|
chore(deps): bump actions/setup-node from v2.1.4 to v2.1.5
Bumps [actions/setup-node](https://github.com/actions/setup-node) from v2.1.4 to v2.1.5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.1.4...46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea)
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-02-23 06:05:16 +00:00 |
dependabot[bot]
|
7cb07a2ec7
|
chore(deps): bump actions/setup-node from v2.1.3 to v2.1.4
Bumps [actions/setup-node](https://github.com/actions/setup-node) from v2.1.3 to v2.1.4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.1.3...c46424eee26de4078d34105d3de3cc4992202b1e)
Signed-off-by: dependabot[bot] <support@github.com>
|
2020-12-17 06:27:04 +00:00 |
dependabot[bot]
|
2926f59ea7
|
chore(deps): bump actions/setup-node from v2.1.2 to v2.1.3
Bumps [actions/setup-node](https://github.com/actions/setup-node) from v2.1.2 to v2.1.3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.1.2...27082cecf3ff7a1742dbd5e12605f0cb59dce2d9)
Signed-off-by: dependabot[bot] <support@github.com>
|
2020-12-11 06:14:46 +00:00 |
dependabot[bot]
|
7f53dd161e
|
chore(deps): bump actions/setup-node from v1 to v2.1.2
Bumps [actions/setup-node](https://github.com/actions/setup-node) from v1 to v2.1.2.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v1...c6fd00ceb9747fb23ffdf72987450a2664414867)
Signed-off-by: dependabot[bot] <support@github.com>
|
2020-10-07 04:31:52 +00:00 |
Nick Schonning
|
be6e86a7f6
|
chore: Switch ECLint build to GitHub Actions
|
2020-01-06 23:05:06 -05:00 |