Dimitrie Hoekstra
3df161c3bc
Add package-lock.json for reproducible dependency chains
...
- Remove package-lock.json from .gitignore
- Add validated package-lock.json (Node 20, 1003 packages)
- Update CI workflow to use npm ci instead of npm install
- Update README development instructions to use npm ci
This ensures all developers and CI get identical dependency trees,
protecting against npm supply chain attacks where compromised patch
versions could automatically propagate through semver ranges.
Closes #5424
2026-01-07 16:15:12 +01:00
Nick O'Leary
8430d6eb51
add 24 to test matrix
2025-07-04 15:01:30 +01:00
Nick O'Leary
f7a43f83e5
Bump for 4.0.3
2024-09-17 14:23:43 +01:00
Nick O'Leary
97ee6c6745
Back off node 22.5
2024-07-18 17:17:50 +01:00
Rotzbua
fd1a001a23
feat(ci): add new nodejs v22
2024-05-14 13:39:32 +02:00
Nick O'Leary
a5223709ba
Bump minimum version to node 18
2024-02-19 16:38:06 +00:00
dependabot[bot]
b54e9d8d55
Bump the github-actions group with 1 update
...
Bumps the github-actions group with 1 update: [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ).
Updates `peter-evans/create-pull-request` from 5 to 6
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-01 07:29:17 +00:00
dependabot[bot]
60593fed4a
Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node ) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ).
Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3...v4 )
Updates `peter-evans/create-pull-request` from 2 to 5
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v2...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 07:42:43 +00:00
Nick O'Leary
58dec7b9b0
Merge pull request #4312 from Rotzbua/add_dependabot
...
Add dependabot for Github Actions
2023-09-19 09:28:50 +01:00
Nick O'Leary
b0f900e25d
Merge pull request #4311 from Rotzbua/update_gh_actions
...
Update outdated Github Actions
2023-09-19 09:28:19 +01:00
Zeger-Jan van de Weg
01b0bf1a36
github: Request `npm run test` in PR template
...
Due to the way grunt is installed, `grunt` might not work for the user locally.
However, `npm run test` will succeed for them, as NPM knows where `grunt` is located to execute.
2023-09-17 08:38:10 +02:00
Rotzbua
25120e44ce
Update outdated GH Actions
2023-09-05 14:56:14 +02:00
Rotzbua
12a1c5c2f4
Add dependabot for GH Action workflows
2023-09-05 14:11:08 +02:00
Rotzbua
5fcace8776
Add Node 20 to GH Action test matrix
2023-09-04 14:31:30 +02:00
Nick O'Leary
55a9a29f76
Merge branch 'master' into dev
2023-04-28 18:49:03 +01:00
Nick O'Leary
246409970d
Remove coveralls reporting as it is failing builds
2023-04-28 17:17:40 +01:00
Nick O'Leary
2d066307f4
Merge branch 'master' into dev
2023-03-06 16:17:02 +00:00
Nick O'Leary
e7f650a9eb
Add node 18 and drop node 14
2023-03-02 15:20:48 +00:00
Dave Conway-Jones
95a7980ada
Update tests.yml
2022-11-30 22:28:52 +00:00
Ashish Kurmi
87e7f3a61c
ci: add minimum GitHub token permissions for workflows
...
Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
2022-10-02 11:16:13 -07:00
Nick O'Leary
f04d954882
Drop node 12 from test runs
2022-05-03 14:25:27 +01:00
Nick O'Leary
6cc611b3f1
Merge branch 'master' into dev
2021-07-20 11:04:25 +01:00
Nick O'Leary
bcb3371acc
Fix another typo in issue template
2021-07-16 12:34:54 +01:00
Nick O'Leary
d14ce7e476
Fix typo in issue template
2021-07-16 12:30:21 +01:00
Nick O'Leary
47f7b43bcc
Update bug_report.yml
2021-07-16 10:21:51 +01:00
Nick O'Leary
77fd8c120c
Update bug_report.yml
2021-07-16 10:20:23 +01:00
Nick O'Leary
a1a6f40158
Update issue templates to use GH forms
2021-07-16 10:16:09 +01:00
Nick O'Leary
75c58093f1
Remove bye-travis branch trigger
2021-06-29 14:25:22 +01:00
Nick O'Leary
cc708e9fb4
Move to GH Actions in place of Travis
2021-06-29 14:19:24 +01:00
Nick O'Leary
06ceb056f3
Update build.yml
2021-01-07 10:09:49 +00:00
Nick O'Leary
088419b38e
Fix unsecure command usage in GH Action
2020-11-18 11:02:09 +00:00
Nick O'Leary
98b639540b
Set ACTIONS_ALLOW_UNSECURE_COMMANDS in GH Action
2020-11-17 22:09:17 +00:00
Nick O'Leary
62c01b59b2
Extend release action to update website
2020-07-10 21:46:00 +01:00
Nick O'Leary
c4b5bb22db
Tidy up commit msg on docker update action
2020-07-08 01:13:14 +01:00
Nick O'Leary
2b5a976f35
Add github action to auto-update docker repo version on release publish
2020-07-08 01:02:18 +01:00
Dave Conway-Jones
89a048e5fa
add docker to environment list
2020-05-11 09:01:35 +01:00
Nick O'Leary
43970b404e
Update github templates
2020-02-25 23:06:14 +00:00
Kazuhito Yokoi
fe91295704
Replace node.js with Node.js
2019-08-06 19:27:46 +09:00
Nick O'Leary
ccc3809daa
Make 'anything else' template more explicit
2019-06-09 17:32:14 +01:00
Nick O'Leary
d8b4c1e209
Rename issue templates to fix their order
2019-02-26 21:14:25 +00:00
Nick O'Leary
eac853c7dd
Update issue templates
2019-02-26 21:12:42 +00:00
Nick O'Leary
4edb1f80b0
Update mailing list references to new forum
2018-05-17 12:17:55 +01:00
Nick O'Leary
2f6ac42efe
Add comment blocks to GitHub templates to reduce clutter
2018-02-08 14:39:58 +00:00
Nick O'Leary
9134d8841d
Update ISSUE_TEMPLATE.md
2017-10-08 14:04:35 +01:00
Nick O'Leary
e9a026c131
Add issue/pr templates
2017-10-08 14:02:05 +01:00