Fix vulnerabilities and improve CI (#37)

* Run build in PR CI

Signed-off-by: Harry Mellor <19981378+hmellor@users.noreply.github.com>

* Update Gemfile.lock to remove vulnerable package

Signed-off-by: Harry Mellor <19981378+hmellor@users.noreply.github.com>

---------

Signed-off-by: Harry Mellor <19981378+hmellor@users.noreply.github.com>
This commit is contained in:
Harry Mellor 2025-02-25 14:09:57 +00:00 committed by GitHub
parent 57e3d78db2
commit 3128f43921
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 5 additions and 27 deletions

View File

@ -7,9 +7,10 @@
name: Deploy Jekyll site to Pages name: Deploy Jekyll site to Pages
on: on:
# Runs on pushes targeting the default branch # Runs on pushes targeting the default branch and pull requests
push: push:
branches: ["main"] branches: ["main"]
pull_request:
# Allows you to run this workflow manually from the Actions tab # Allows you to run this workflow manually from the Actions tab
workflow_dispatch: workflow_dispatch:
@ -52,8 +53,9 @@ jobs:
# Automatically uploads an artifact from the './_site' directory by default # Automatically uploads an artifact from the './_site' directory by default
uses: actions/upload-pages-artifact@v3 uses: actions/upload-pages-artifact@v3
# Deployment job # Deployment job (only if triggered by push to main)
deploy: deploy:
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
environment: environment:
name: github-pages name: github-pages
url: ${{ steps.deployment.outputs.page_url }} url: ${{ steps.deployment.outputs.page_url }}

View File

@ -45,14 +45,8 @@ GEM
logger logger
faraday-net_http (3.4.0) faraday-net_http (3.4.0)
net-http (>= 0.5.0) net-http (>= 0.5.0)
ffi (1.17.1-aarch64-linux-gnu)
ffi (1.17.1-aarch64-linux-musl)
ffi (1.17.1-arm-linux-gnu)
ffi (1.17.1-arm-linux-musl)
ffi (1.17.1-arm64-darwin) ffi (1.17.1-arm64-darwin)
ffi (1.17.1-x86_64-darwin)
ffi (1.17.1-x86_64-linux-gnu) ffi (1.17.1-x86_64-linux-gnu)
ffi (1.17.1-x86_64-linux-musl)
forwardable-extended (2.6.0) forwardable-extended (2.6.0)
gemoji (4.1.0) gemoji (4.1.0)
github-pages (232) github-pages (232)
@ -241,22 +235,10 @@ GEM
minitest (5.25.4) minitest (5.25.4)
net-http (0.6.0) net-http (0.6.0)
uri uri
nokogiri (1.18.3-aarch64-linux-gnu)
racc (~> 1.4)
nokogiri (1.18.3-aarch64-linux-musl)
racc (~> 1.4)
nokogiri (1.18.3-arm-linux-gnu)
racc (~> 1.4)
nokogiri (1.18.3-arm-linux-musl)
racc (~> 1.4)
nokogiri (1.18.3-arm64-darwin) nokogiri (1.18.3-arm64-darwin)
racc (~> 1.4) racc (~> 1.4)
nokogiri (1.18.3-x86_64-darwin)
racc (~> 1.4)
nokogiri (1.18.3-x86_64-linux-gnu) nokogiri (1.18.3-x86_64-linux-gnu)
racc (~> 1.4) racc (~> 1.4)
nokogiri (1.18.3-x86_64-linux-musl)
racc (~> 1.4)
octokit (4.25.1) octokit (4.25.1)
faraday (>= 1, < 3) faraday (>= 1, < 3)
sawyer (~> 0.9) sawyer (~> 0.9)
@ -292,14 +274,8 @@ GEM
webrick (1.9.1) webrick (1.9.1)
PLATFORMS PLATFORMS
aarch64-linux-gnu
aarch64-linux-musl
arm-linux-gnu
arm-linux-musl
arm64-darwin arm64-darwin
x86_64-darwin x86_64-linux
x86_64-linux-gnu
x86_64-linux-musl
DEPENDENCIES DEPENDENCIES
github-pages (~> 232) github-pages (~> 232)