Commit Graph

25 Commits (df96cfab11cf304bca2d418ab06595c0809c03a4)

Author SHA1 Message Date
Dimitrie Hoekstra 3df161c3bc
Add package-lock.json for reproducible dependency chains
- Remove package-lock.json from .gitignore
- Add validated package-lock.json (Node 20, 1003 packages)
- Update CI workflow to use npm ci instead of npm install
- Update README development instructions to use npm ci

This ensures all developers and CI get identical dependency trees,
protecting against npm supply chain attacks where compromised patch
versions could automatically propagate through semver ranges.

Closes #5424
2026-01-07 16:15:12 +01:00
Nick O'Leary 8430d6eb51
add 24 to test matrix 2025-07-04 15:01:30 +01:00
Nick O'Leary f7a43f83e5
Bump for 4.0.3 2024-09-17 14:23:43 +01:00
Nick O'Leary 97ee6c6745
Back off node 22.5 2024-07-18 17:17:50 +01:00
Rotzbua fd1a001a23
feat(ci): add new nodejs v22 2024-05-14 13:39:32 +02:00
Nick O'Leary a5223709ba
Bump minimum version to node 18 2024-02-19 16:38:06 +00:00
dependabot[bot] b54e9d8d55
Bump the github-actions group with 1 update
Bumps the github-actions group with 1 update: [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request).


Updates `peter-evans/create-pull-request` from 5 to 6
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v5...v6)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-01 07:29:17 +00:00
dependabot[bot] 60593fed4a
Bump the github-actions group with 2 updates
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request).


Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

Updates `peter-evans/create-pull-request` from 2 to 5
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v2...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 07:42:43 +00:00
Rotzbua 25120e44ce
Update outdated GH Actions 2023-09-05 14:56:14 +02:00
Rotzbua 5fcace8776
Add Node 20 to GH Action test matrix 2023-09-04 14:31:30 +02:00
Nick O'Leary 55a9a29f76
Merge branch 'master' into dev 2023-04-28 18:49:03 +01:00
Nick O'Leary 246409970d
Remove coveralls reporting as it is failing builds 2023-04-28 17:17:40 +01:00
Nick O'Leary 2d066307f4
Merge branch 'master' into dev 2023-03-06 16:17:02 +00:00
Nick O'Leary e7f650a9eb
Add node 18 and drop node 14 2023-03-02 15:20:48 +00:00
Dave Conway-Jones 95a7980ada
Update tests.yml 2022-11-30 22:28:52 +00:00
Ashish Kurmi 87e7f3a61c ci: add minimum GitHub token permissions for workflows
Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
2022-10-02 11:16:13 -07:00
Nick O'Leary f04d954882
Drop node 12 from test runs 2022-05-03 14:25:27 +01:00
Nick O'Leary 75c58093f1
Remove bye-travis branch trigger 2021-06-29 14:25:22 +01:00
Nick O'Leary cc708e9fb4
Move to GH Actions in place of Travis 2021-06-29 14:19:24 +01:00
Nick O'Leary 06ceb056f3
Update build.yml 2021-01-07 10:09:49 +00:00
Nick O'Leary 088419b38e
Fix unsecure command usage in GH Action 2020-11-18 11:02:09 +00:00
Nick O'Leary 98b639540b
Set ACTIONS_ALLOW_UNSECURE_COMMANDS in GH Action 2020-11-17 22:09:17 +00:00
Nick O'Leary 62c01b59b2
Extend release action to update website 2020-07-10 21:46:00 +01:00
Nick O'Leary c4b5bb22db
Tidy up commit msg on docker update action 2020-07-08 01:13:14 +01:00
Nick O'Leary 2b5a976f35
Add github action to auto-update docker repo version on release publish 2020-07-08 01:02:18 +01:00