Dimitrie Hoekstra
3df161c3bc
Add package-lock.json for reproducible dependency chains
...
- Remove package-lock.json from .gitignore
- Add validated package-lock.json (Node 20, 1003 packages)
- Update CI workflow to use npm ci instead of npm install
- Update README development instructions to use npm ci
This ensures all developers and CI get identical dependency trees,
protecting against npm supply chain attacks where compromised patch
versions could automatically propagate through semver ranges.
Closes #5424
2026-01-07 16:15:12 +01:00
Nick O'Leary
8430d6eb51
add 24 to test matrix
2025-07-04 15:01:30 +01:00
Nick O'Leary
f7a43f83e5
Bump for 4.0.3
2024-09-17 14:23:43 +01:00
Nick O'Leary
97ee6c6745
Back off node 22.5
2024-07-18 17:17:50 +01:00
Rotzbua
fd1a001a23
feat(ci): add new nodejs v22
2024-05-14 13:39:32 +02:00
Nick O'Leary
a5223709ba
Bump minimum version to node 18
2024-02-19 16:38:06 +00:00
dependabot[bot]
60593fed4a
Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node ) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ).
Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3...v4 )
Updates `peter-evans/create-pull-request` from 2 to 5
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v2...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 07:42:43 +00:00
Rotzbua
25120e44ce
Update outdated GH Actions
2023-09-05 14:56:14 +02:00
Rotzbua
5fcace8776
Add Node 20 to GH Action test matrix
2023-09-04 14:31:30 +02:00
Nick O'Leary
55a9a29f76
Merge branch 'master' into dev
2023-04-28 18:49:03 +01:00
Nick O'Leary
246409970d
Remove coveralls reporting as it is failing builds
2023-04-28 17:17:40 +01:00
Nick O'Leary
2d066307f4
Merge branch 'master' into dev
2023-03-06 16:17:02 +00:00
Nick O'Leary
e7f650a9eb
Add node 18 and drop node 14
2023-03-02 15:20:48 +00:00
Dave Conway-Jones
95a7980ada
Update tests.yml
2022-11-30 22:28:52 +00:00
Ashish Kurmi
87e7f3a61c
ci: add minimum GitHub token permissions for workflows
...
Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
2022-10-02 11:16:13 -07:00
Nick O'Leary
f04d954882
Drop node 12 from test runs
2022-05-03 14:25:27 +01:00
Nick O'Leary
75c58093f1
Remove bye-travis branch trigger
2021-06-29 14:25:22 +01:00
Nick O'Leary
cc708e9fb4
Move to GH Actions in place of Travis
2021-06-29 14:19:24 +01:00