Skip to content

Commit beed389

Browse files
dependabot[bot]dependabot[bot]
authored
Bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent bc904e8 commit beed389

3 files changed

Lines changed: 128 additions & 128 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 44 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -1,44 +1,44 @@
1-
name: CI
2-
3-
on:
4-
push:
5-
branches: [main]
6-
pull_request:
7-
8-
# Least privilege: this workflow only needs to read the repo.
9-
permissions:
10-
contents: read
11-
12-
# Cancel superseded runs for the same ref to save CI minutes.
13-
concurrency:
14-
group: ci-${{ github.ref }}
15-
cancel-in-progress: true
16-
17-
jobs:
18-
check:
19-
runs-on: ubuntu-latest
20-
steps:
21-
# Actions are pinned to commit SHAs (supply-chain hardening); the
22-
# trailing comment records the human-readable version. v6 runs on the
23-
# Node 24 action runtime, clearing the Node 20 deprecation warning.
24-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
25-
26-
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
27-
with:
28-
node-version: 24
29-
cache: npm
30-
31-
- run: npm ci
32-
33-
- name: Validate manifest.json parses
34-
run: node -e "JSON.parse(require('fs').readFileSync('manifest.json','utf8'))"
35-
36-
- run: npm run lint
37-
38-
- run: npm run format:check
39-
40-
- run: npm run typecheck
41-
42-
- run: npm run coverage
43-
44-
- run: npm run build
1+
name: CI
2+
3+
on:
4+
push:
5+
branches: [main]
6+
pull_request:
7+
8+
# Least privilege: this workflow only needs to read the repo.
9+
permissions:
10+
contents: read
11+
12+
# Cancel superseded runs for the same ref to save CI minutes.
13+
concurrency:
14+
group: ci-${{ github.ref }}
15+
cancel-in-progress: true
16+
17+
jobs:
18+
check:
19+
runs-on: ubuntu-latest
20+
steps:
21+
# Actions are pinned to commit SHAs (supply-chain hardening); the
22+
# trailing comment records the human-readable version. v6 runs on the
23+
# Node 24 action runtime, clearing the Node 20 deprecation warning.
24+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
25+
26+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
27+
with:
28+
node-version: 24
29+
cache: npm
30+
31+
- run: npm ci
32+
33+
- name: Validate manifest.json parses
34+
run: node -e "JSON.parse(require('fs').readFileSync('manifest.json','utf8'))"
35+
36+
- run: npm run lint
37+
38+
- run: npm run format:check
39+
40+
- run: npm run typecheck
41+
42+
- run: npm run coverage
43+
44+
- run: npm run build

‎.github/workflows/codeql.yml‎

Lines changed: 41 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -1,41 +1,41 @@
1-
name: CodeQL
2-
3-
on:
4-
push:
5-
branches: [main]
6-
pull_request:
7-
branches: [main]
8-
schedule:
9-
# Weekly scan to catch advisories in code that hasn't changed.
10-
- cron: "27 4 * * 1"
11-
12-
permissions:
13-
contents: read
14-
15-
jobs:
16-
analyze:
17-
name: Analyze
18-
runs-on: ubuntu-latest
19-
permissions:
20-
# Required for CodeQL to upload results to code scanning.
21-
security-events: write
22-
actions: read
23-
contents: read
24-
strategy:
25-
fail-fast: false
26-
matrix:
27-
language: [javascript-typescript]
28-
steps:
29-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
30-
31-
- name: Initialize CodeQL
32-
uses: github/codeql-action/init@84498526a009a99c875e83ef4821a8ba52de7c22 # codeql-bundle-v2.25.5
33-
with:
34-
languages: ${{ matrix.language }}
35-
# Static assets only; no compiled languages to build.
36-
build-mode: none
37-
38-
- name: Perform CodeQL Analysis
39-
uses: github/codeql-action/analyze@84498526a009a99c875e83ef4821a8ba52de7c22 # codeql-bundle-v2.25.5
40-
with:
41-
category: "/language:${{ matrix.language }}"
1+
name: CodeQL
2+
3+
on:
4+
push:
5+
branches: [main]
6+
pull_request:
7+
branches: [main]
8+
schedule:
9+
# Weekly scan to catch advisories in code that hasn't changed.
10+
- cron: "27 4 * * 1"
11+
12+
permissions:
13+
contents: read
14+
15+
jobs:
16+
analyze:
17+
name: Analyze
18+
runs-on: ubuntu-latest
19+
permissions:
20+
# Required for CodeQL to upload results to code scanning.
21+
security-events: write
22+
actions: read
23+
contents: read
24+
strategy:
25+
fail-fast: false
26+
matrix:
27+
language: [javascript-typescript]
28+
steps:
29+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
30+
31+
- name: Initialize CodeQL
32+
uses: github/codeql-action/init@84498526a009a99c875e83ef4821a8ba52de7c22 # codeql-bundle-v2.25.5
33+
with:
34+
languages: ${{ matrix.language }}
35+
# Static assets only; no compiled languages to build.
36+
build-mode: none
37+
38+
- name: Perform CodeQL Analysis
39+
uses: github/codeql-action/analyze@84498526a009a99c875e83ef4821a8ba52de7c22 # codeql-bundle-v2.25.5
40+
with:
41+
category: "/language:${{ matrix.language }}"

‎.github/workflows/release.yml‎

Lines changed: 43 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -1,43 +1,43 @@
1-
name: Release
2-
3-
# Cut a release by pushing a tag like `v1.1.0` (must match manifest.json).
4-
on:
5-
push:
6-
tags:
7-
- "v*"
8-
9-
permissions:
10-
contents: write # create the GitHub Release and upload assets
11-
12-
jobs:
13-
release:
14-
runs-on: ubuntu-latest
15-
steps:
16-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
17-
18-
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
19-
with:
20-
node-version: 24
21-
cache: npm
22-
23-
- run: npm ci
24-
25-
- name: Verify tag matches manifest version
26-
run: |
27-
manifest_version="v$(node -p "require('./manifest.json').version")"
28-
if [ "$manifest_version" != "$GITHUB_REF_NAME" ]; then
29-
echo "Tag $GITHUB_REF_NAME does not match manifest version $manifest_version" >&2
30-
exit 1
31-
fi
32-
33-
- run: npm run build
34-
35-
- name: Create GitHub Release with build artifacts
36-
env:
37-
GH_TOKEN: ${{ github.token }}
38-
run: |
39-
gh release create "$GITHUB_REF_NAME" \
40-
github-pr-reverse-comments.zip \
41-
github-pr-reverse-comments-*.xpi \
42-
--title "$GITHUB_REF_NAME" \
43-
--generate-notes
1+
name: Release
2+
3+
# Cut a release by pushing a tag like `v1.1.0` (must match manifest.json).
4+
on:
5+
push:
6+
tags:
7+
- "v*"
8+
9+
permissions:
10+
contents: write # create the GitHub Release and upload assets
11+
12+
jobs:
13+
release:
14+
runs-on: ubuntu-latest
15+
steps:
16+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
17+
18+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
19+
with:
20+
node-version: 24
21+
cache: npm
22+
23+
- run: npm ci
24+
25+
- name: Verify tag matches manifest version
26+
run: |
27+
manifest_version="v$(node -p "require('./manifest.json').version")"
28+
if [ "$manifest_version" != "$GITHUB_REF_NAME" ]; then
29+
echo "Tag $GITHUB_REF_NAME does not match manifest version $manifest_version" >&2
30+
exit 1
31+
fi
32+
33+
- run: npm run build
34+
35+
- name: Create GitHub Release with build artifacts
36+
env:
37+
GH_TOKEN: ${{ github.token }}
38+
run: |
39+
gh release create "$GITHUB_REF_NAME" \
40+
github-pr-reverse-comments.zip \
41+
github-pr-reverse-comments-*.xpi \
42+
--title "$GITHUB_REF_NAME" \
43+
--generate-notes

0 commit comments

Comments
 (0)