hippoz/cinny
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
876 commits 1 branch 0 tags 9.1 MiB
Commit graph

15 commits

Author SHA1 Message Date
dependabot[bot]
f7ff1ef2bd
Bump actions/github-script from 6.1.1 to 6.2.0 (#794) 
Bumps [actions/github-script](https://github.com/actions/github-script) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v6.1.1...v6.2.0)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ajay Bura <32841439+ajbura@users.noreply.github.com>
 2022-09-02 19:15:03 +05:30
dependabot[bot]
984fad811c
Bump actions/github-script from 6.1.0 to 6.1.1 (#755) 
Bumps [actions/github-script](https://github.com/actions/github-script) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v6.1.0...v6.1.1)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-20 21:09:36 +05:30
Matt Corallo
95b814b751
Reduce third-party build script dependencies and reduce GITHUB_TOKEN perms in CI (#541) 
* Reduce dependence on third-party build scripts in release pipeline

This removes one third-party build script from the release
pipeline for the release tar.gz, though one is still used in the
now-separate netlify deploy.

* Reduce GITHUB_TOKEN perms in actions when using 3rd party scripts

This avoids allowing third parties to arbitrarily overwrite the
repository.

* Replace PGP signing action with the bash script from the same

The PGP signing action ultimately just calls gpg with arguments
set in
https://github.com/actionhippie/gpgsign/blob/v1/overlay/usr/local/bin/entrypoint
so its rather trivial to simply take the required arguments and
put them directly in CI.

This is substantially safer than the PGP signing action used as the
action currently downloads, unverified and un-pinned, a docker
image in order to access PGP.
 2022-05-26 20:17:41 +05:30
dependabot[bot]
fda71166df
Bump actions/github-script from 6.0.0 to 6.1.0 (#562) 
Bumps [actions/github-script](https://github.com/actions/github-script) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v6.0.0...v6.1.0)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-05-20 09:16:55 +05:30
Ajay Bura
e5bb386dd2
Use SHA instead of tag for 3rd party actions (#498) 2022-05-01 13:23:42 +05:30
Krishan
3b1b3387e7
Replace forked action with original one (#496) 
The reason to replace is that previous action fails when pull request content is empty and Beakyn/gha-comment-pull-request@v1.0.2 fixed this.
 2022-04-20 08:58:47 +05:30
Krishan
3a3a830706
Reverting .yaml as some things doesn't work (#451) 2022-03-30 15:01:41 +05:30
Krishan
1a6e3e73c5
String update and file extension name consistency (#436) 
* Fixes #434

* Fixes #433

* Prtially fixes #432

* Disable auto labelling of issues

* Use yaml instead of yml as recommended by yaml.org

* shortened the strings

* simplified option description
 2022-03-30 13:42:52 +05:30
Krishan
05eaa8d3e0
General fix and consistency changes (#428) 2022-03-23 19:40:39 +05:30
Krishan
6e9cd02b2b
Fix workflow name (#389) 2022-03-15 17:19:18 +05:30
Krishan
38773e89ff
Simplify GitHub actions (#387) 
* Simplify production build actions 

This merges both the netlify-prod and docker action and also automatically add tarball to releases.

* Delete docker.yaml

* Delete netlify-prod.yaml

* Cosmetic changes and add dockerhub check

* Cosmetic changes

* Fix check runs on Tuesdays only
 2022-03-15 17:04:14 +05:30
dependabot[bot]
2eee3736df
Bump actions/github-script from 3.1.0 to 6.0.0 (#314) 
* Bump actions/github-script from 3.1.0 to 6

Bumps [actions/github-script](https://github.com/actions/github-script) from 3.1.0 to 6.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v3.1.0...v6)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update build-pull-request.yml

* Update deploy-pull-request.yml

* reference rest method by github.rest

this broke in v5 see https://github.com/actions/github-script#breaking-changes-in-v5

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ajay Bura <32841439+ajbura@users.noreply.github.com>
Co-authored-by: Krishan <33421343+kfiven@users.noreply.github.com>
 2022-02-24 08:19:14 +05:30
Ajay Bura
e4571bf668 Remove unused deps, restore github-script to 3.1.0 2022-01-31 22:29:18 +05:30
Ajay Bura
56de33c821 Use specific and latest version in actions 2022-01-31 09:59:36 +05:30
Krishan
a4b27fdeab
Fixed pull request preview deploys (#166) 
* Update and rename pull-request.yml to build-pull-request.yml

* Create deploy-pull-request.yml
 2021-11-14 12:54:17 +05:30