37001efe5b
build(deps): bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0
...
Bumps [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases )
- [Commits](cb9bde2e25...e89d40939csupport@github.com >
2025-03-31 01:42:56 +00:00
f319391080
Merge pull request #163 from detsys-pr-bot/detsys-ts-update-07c7fc924119a8d9879c1c164ae593049d47f648
...
Update `detsys-ts`: Ignore hyphen-sep'd diags (#83 )
2025-03-28 13:50:47 -04:00
7f50ffb42b
Update detsys-ts for: Ignore hyphen-sep'd diags ( #83 ) (07c7fc924119a8d9879c1c164ae593049d47f648)
2025-03-28 17:47:57 +00:00
c6435de337
Merge pull request #162 from detsys-pr-bot/detsys-ts-update-03533d37dcd46f34d9e99385e665615b221a30d9
...
Update `detsys-ts`: Merge pull request #82 from DeterminateSystems/even-more-crashes
2025-03-28 10:19:29 -04:00
01b415ecee
Update detsys-ts for: Merge pull request #82 from DeterminateSystems/even-more-crashes (03533d37dcd46f34d9e99385e665615b221a30d9)
2025-03-28 14:10:22 +00:00
42aa906d7f
Merge pull request #161 from detsys-pr-bot/detsys-ts-update-8d9725c4856301321cd2508f5b8725cfb99366e2
...
Update `detsys-ts`: Merge pull request #81 from DeterminateSystems/dont-capture-some-crashes
2025-03-27 12:00:09 -04:00
8b0105d445
Update detsys-ts for: Merge pull request #81 from DeterminateSystems/dont-capture-some-crashes (8d9725c4856301321cd2508f5b8725cfb99366e2)
2025-03-27 15:57:16 +00:00
9e4b6cbbef
Merge pull request #160 from detsys-pr-bot/detsys-ts-update-38df301720b69972f084538dd44c181269f264b0
...
Update `detsys-ts`: Merge pull request #80 from DeterminateSystems/fixup-traces
2025-03-27 11:09:14 -03:00
43a3cfc807
Update detsys-ts for: Merge pull request #80 from DeterminateSystems/fixup-traces (38df301720b69972f084538dd44c181269f264b0)
2025-03-27 13:47:43 +00:00
97b24ed38a
Merge pull request #159 from DeterminateSystems/esbuild
...
pnpm update, vitest
2025-03-26 11:32:24 -04:00
c7af1d9132
pnpm update, vitest
2025-03-26 11:18:26 -04:00
ae207e3462
Merge pull request #158 from detsys-pr-bot/detsys-ts-update-cf33e9577ca7571bf9ebbfe298b4e3e457a58813
...
Update `detsys-ts`: Merge pull request #79 from DeterminateSystems/dependabot/npm_and_yarn/npm_and_yarn-14f44f5325
2025-03-26 09:59:58 -03:00
6b57c8dc27
Update detsys-ts for: Merge pull request #79 from DeterminateSystems/dependabot/npm_and_yarn/npm_and_yarn-14f44f5325 (cf33e9577ca7571bf9ebbfe298b4e3e457a58813)
2025-03-26 12:31:56 +00:00
e680567e78
Merge pull request #157 from DeterminateSystems/flakehub-cache-action
2025-03-24 15:51:20 -03:00
6981b122f5
Merge pull request #155 from DeterminateSystems/update_flake_lock_action
...
flake.lock: Update
2025-03-24 15:13:29 -03:00
1666ee39f3
Reformat and regenerate
2025-03-24 15:12:06 -03:00
6530cb6c3e
Merge remote-tracking branch 'origin/main' into update_flake_lock_action
2025-03-24 15:10:43 -03:00
3a90118afa
Switch to flakehub-cache-action
2025-03-24 00:52:44 -03:00
460b95a768
Merge pull request #156 from detsys-pr-bot/detsys-ts-update-9d2b0e4636787bba8b886ddc720f007850e541fb
...
Update `detsys-ts`: Merge pull request #78 from DeterminateSystems/dependabot/npm_and_yarn/npm-deps-0af3b8ec11
2025-03-24 00:50:40 -03:00
ae18c965c1
Update detsys-ts for: Merge pull request #78 from DeterminateSystems/dependabot/npm_and_yarn/npm-deps-0af3b8ec11 (9d2b0e4636787bba8b886ddc720f007850e541fb)
2025-03-24 01:42:29 +00:00
1d8d1b0210
flake.lock: Update
...
Flake lock file updates:
• Updated input 'nixpkgs':
'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.614481%2Brev-5c24cf2f0a12ad855f444c30b2421d044120c66f/018efa00-a443-7f41-b371-ce568b5c7e9f/source.tar.gz?narHash=sha256-XtTSSIB2DA6tOv%2Bl0FhvfDMiyCmhoRbNB%2B0SeInZkbk%3D ' (2024-04-19)
→ 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.770807%2Brev-a84ebe20c6bc2ecbcfb000a50776219f48d134cc/0195b626-8c1d-7fb9-9282-563af3d37ab9/source.tar.gz?narHash=sha256-mNqIplmEohk5jRkqYqG19GA8MbQ/D4gQSK0Mu4LvfRQ%3D ' (2025-03-19)
2025-03-23 00:02:08 +00:00
d58eff8f1d
Merge pull request #152 from detsys-pr-bot/detsys-ts-update-4c7ff9706e6466d7c03c58a3479ed212d6ffb5ba
...
Update `detsys-ts`: Merge pull request #74 from DeterminateSystems/dependabot/npm_and_yarn/npm-deps-eb3d92718e
2025-03-19 17:26:39 -04:00
8d81dfe006
Update detsys-ts for: Merge pull request #74 from DeterminateSystems/dependabot/npm_and_yarn/npm-deps-eb3d92718e (4c7ff9706e6466d7c03c58a3479ed212d6ffb5ba)
2025-03-19 21:20:59 +00:00
f71609bc55
Merge pull request #138 from DeterminateSystems/dependabot/github_actions/crazy-max/ghaction-import-gpg-6.2.0
...
build(deps): bump crazy-max/ghaction-import-gpg from 6.1.0 to 6.2.0
2025-03-19 16:14:03 -04:00
a522afcccd
Merge pull request #149 from detsys-pr-bot/detsys-ts-update-c54767c24f0861de794605b03ed5604546d4a337
...
Update `detsys-ts`: Merge pull request #72 from DeterminateSystems/dependabot
2025-03-19 16:13:04 -04:00
8368f542ad
Update detsys-ts for: Merge pull request #72 from DeterminateSystems/dependabot (c54767c24f0861de794605b03ed5604546d4a337)
2025-03-19 20:11:07 +00:00
86cbeff68e
Merge pull request #148 from DeterminateSystems/simpler-instructions
...
Update the text with much simpler 'run ci' instructions.
2025-03-19 12:26:28 -04:00
e64717fb04
Update action.yml
...
Co-authored-by: Cole Helbling <cole.helbling@determinate.systems >
2025-03-19 12:25:15 -04:00
d99e45a16b
Update the text with much simpler 'run ci' instructions.
2025-03-19 12:13:08 -04:00
208d8b0fa4
Merge pull request #146 from detsys-pr-bot/detsys-ts-update-b3319a2c78c46d5ad6bc00d3453266d3d9fdde44
...
Update `detsys-ts`: Merge pull request #71 from DeterminateSystems/updates
2025-02-06 11:49:44 -05:00
183c83b4bc
Update detsys-ts for: Merge pull request #71 from DeterminateSystems/updates (b3319a2c78c46d5ad6bc00d3453266d3d9fdde44)
2025-02-06 16:47:41 +00:00
0ba1118664
Merge pull request #144 from detsys-pr-bot/detsys-ts-update-eb87094f35072ac911526ad052c3437c9e0c42d6
...
Update `detsys-ts`: Merge pull request #69 from DeterminateSystems/update-deps
2024-11-26 11:31:58 -05:00
236c0fa397
Update detsys-ts for: Merge pull request #69 from DeterminateSystems/update-deps (eb87094f35072ac911526ad052c3437c9e0c42d6)
2024-11-20 18:57:29 +00:00
8fa6d41e3f
Merge pull request #141 from DeterminateSystems/colemickens/pr-url
...
action.yml: expose pull-request-url from create-pr action
2024-11-08 14:50:46 -05:00
1360662aa3
action.yml: expose pull-request-url from create-pr action
2024-11-08 11:34:36 -08:00
531bd45244
Merge pull request #139 from detsys-pr-bot/detsys-ts-update-4280bc94c9545f31ccf08001cc16f20ccb91b770
...
Update `detsys-ts`: Merge pull request #67 from DeterminateSystems/allow-obliterating-id-token-privs
2024-11-06 14:56:02 -05:00
1afac295f9
Update detsys-ts for: Merge pull request #67 from DeterminateSystems/allow-obliterating-id-token-privs (4280bc94c9545f31ccf08001cc16f20ccb91b770)
2024-11-06 19:43:49 +00:00
1cc1733537
build(deps): bump crazy-max/ghaction-import-gpg from 6.1.0 to 6.2.0
...
Bumps [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases )
- [Commits](01dd5d3ca4...cb9bde2e25support@github.com >
2024-10-28 01:50:01 +00:00
965531f332
build(deps-dev): bump vite from 5.2.12 to 5.4.6 ( #131 )
...
* build(deps-dev): bump vite from 5.2.12 to 5.4.6
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 5.2.12 to 5.4.6.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v5.4.6/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* pnpm i
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Cole Helbling <cole.helbling@determinate.systems >
2024-09-19 16:42:07 +00:00
a2bbe0274e
Merge pull request #128 from detsys-pr-bot/detsys-ts-update-65dd73c562ac60a068340f8e0c040bdcf2c59afe
...
Update `detsys-ts`: Merge pull request #63 from DeterminateSystems/retry-streams
2024-09-04 14:14:50 -04:00
802501548e
Update detsys-ts for: Merge pull request #63 from DeterminateSystems/retry-streams (65dd73c562ac60a068340f8e0c040bdcf2c59afe)
2024-09-04 18:05:28 +00:00
7d80c329b4
Merge pull request #126 from detsys-pr-bot/detsys-ts-update-817e4d4123b6fb4eae5aa557658f25f8539e7240
...
Update `detsys-ts`: Merge pull request #62 from DeterminateSystems/dont-pull-microstackshots
2024-08-26 19:46:57 -04:00
7bc6ec59cc
Update detsys-ts for: Merge pull request #62 from DeterminateSystems/dont-pull-microstackshots (817e4d4123b6fb4eae5aa557658f25f8539e7240)
2024-08-26 15:26:03 +00:00
4cf6b19203
Merge pull request #125 from detsys-pr-bot/detsys-ts-update-e8f6e8f54d85aa0fd3d0b694dd3279a21497a33b
...
Update `detsys-ts`: Merge pull request #61 from DeterminateSystems/use-coalesce-for-array
2024-08-26 10:09:12 -04:00
73ba0ca899
Update detsys-ts for: Merge pull request #61 from DeterminateSystems/use-coalesce-for-array (e8f6e8f54d85aa0fd3d0b694dd3279a21497a33b)
2024-08-26 14:05:27 +00:00
24f53daa86
Merge pull request #124 from detsys-pr-bot/detsys-ts-update-cf1897a891edc164a8240f469cd56d14364e6be1
...
Update `detsys-ts`: Merge pull request #58 from DeterminateSystems/collect-crash-logs
2024-08-26 09:41:53 -04:00
420fb2aaf7
Update detsys-ts for: Merge pull request #58 from DeterminateSystems/collect-crash-logs (cf1897a891edc164a8240f469cd56d14364e6be1)
2024-08-26 13:31:25 +00:00
db4ee38117
Fixup support for Nix 2.23.0 and later
2024-06-28 14:11:30 -07:00
b0723e0fae
Add instructions for new fine grained GitHub PAT
2024-06-18 09:23:51 -07:00
af9a980c7d
Lock third-party actions
...
A caller of this action can lock this action to a specific commit. However because the action itself does not lock its dependent actions to a specific commit this opens the end-user up to possible supply-chain attacks if the dependent actions rewrite their tags.
This PR changes all third party actions to be explicitly locked.
Dependabot will still work and update these hashes for you
I also suggest installing https://github.com/ossf/scorecard in this repo. It will report about these kind of issues.
Note that you should in turn have to audit all the third party deps of the actions that your action depends on. In general this is all a bit of a mess and GitHub's security model is very meh
e.g. see https://github.com/ossf/scorecard/issues/2189
2024-06-18 09:17:15 -07:00
