ubot-7274[bot]
f27c96fefd
chore(deps): update zizmorcore/zizmor-action action to v0.8.1 ( #3137 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-11-03 04:47:21 +00:00
ubot-7274[bot]
a9fcc79966
chore(deps): update dependency sigstore/cosign to v3.1.4 ( #3111 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:59:21 +00:00
ubot-7274[bot]
cc0676b10b
chore(deps): update zizmorcore/zizmor-action action to v0.8.0 ( #3114 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:52:10 +00:00
ubot-7274[bot]
c38c174c6a
chore(deps): update oras-project/setup-oras action to v2.0.3 ( #3113 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-28 16:46:59 +00:00
ubot-7274[bot]
45a1f73c1c
chore(deps): update github/codeql-action action to v4.39.1 ( #3112 )
2026-10-28 18:25:09 +02:00
inffy
04f1bfe77f
fix(ci): fix blankiet installation permissions for backport action ( #3060 )
2026-10-19 16:26:08 +02:00
ubot-7274[bot]
37fde370b1
chore(deps): update zizmorcore/zizmor-action action to v0.7.1 ( #3045 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 06:31:00 +00:00
ubot-7274[bot]
e1e8e88f5c
chore(deps): update actions/create-github-app-token digest to 64ab729 ( #3041 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 06:28:55 +00:00
ubot-7274[bot]
905b5d868a
chore(deps): update ossf/scorecard-action action to v2.5.0 (main) ( #3044 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 09:29:56 +03:00
ubot-7274[bot]
4c4181720a
chore(deps): update github/codeql-action action to v4.39.0 (main) ( #3042 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-18 09:29:29 +03:00
ubot-7274[bot]
ecaac936ff
chore(deps): update actions/upload-artifact action to v7.0.2 ( #3005 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-11 05:50:46 +00:00
ubot-7274[bot]
1e63e4b836
chore(deps): update actions/setup-node action to v7.1.0 ( #3009 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-11 05:50:21 +00:00
ubot-7274[bot]
b298cef9ef
chore(deps): update github/codeql-action action to v4.38.3 (main) ( #3006 )
2026-10-11 08:51:19 +03:00
renner
93a0ae253d
fix(ci): mitigate code injection in build from repo_organization ( #2991 )
...
* fix(ci): mitigate code injection in build from repo_organization
https://docs.github.com/en/actions/concepts/security/script-injections
* make it global
is pretty reusable
2026-10-07 12:06:15 +00:00
renner
dfd216d50c
refactor: rewrite attach SBOM in just ( #2961 )
...
For consistency and debugability.
2026-10-04 20:36:41 +00:00
ubot-7274[bot]
176fe2479c
chore(deps): update anchore/sbom-action action to v0.24.3 ( #2966 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-04 05:01:15 +00:00
renner
71c3ca2a24
chore(ci): only run scheduled jobs in ublue-os/aurora ( #2972 )
...
This is quite annoying and unneeded in forks.
2026-10-04 04:30:41 +00:00
ubot-7274[bot]
b9ab984496
chore(deps): update korthout/backport-action action to v4.7.0 ( #2973 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-04 04:26:42 +00:00
ubot-7274[bot]
dbc58acc74
chore(deps): update oras-project/setup-oras action to v2.0.2 ( #2957 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-29 19:31:25 +00:00
renner
75188e997c
chore(ci): use new self-repository syntax for workflows ( #2956 )
...
See: https://docs.zizmor.sh/audits/#self-repository
2026-09-29 17:45:51 +00:00
inffy
a723f1eda8
chore: add autoclose of issues without requested info ( #2955 )
...
* chore: add autoclose of issues without requested info
Same as ba6f78b1afhttps://github.com/get-aurora-dev/common/issues/281
* concurrency and properly named job
* make zizmor happy
---------
Co-authored-by: renner <renner0@posteo.de>
2026-09-29 16:25:39 +02:00
ubot-7274[bot]
69d181f306
chore(deps): update github/codeql-action action to v4.38.2 (main) ( #2936 )
2026-09-27 08:32:59 +03:00
ubot-7274[bot]
bf9c82a69e
chore(deps): update korthout/backport-action action to v4.6.1 ( #2937 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-27 04:43:59 +00:00
renner
87024745ac
chore(ci): remove container-storage-action ( #2920 )
...
There is no /mnt anymore, this will no longer run and is useless.
Follow-up of 6ce2bb1d9a
2026-09-24 04:28:55 +00:00
ubot-7274[bot]
b5d26de23a
chore(deps): update actions/checkout action to v7.0.1 ( #2897 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-20 07:19:09 +00:00
ubot-7274[bot]
df015525dc
chore(deps): update zizmorcore/zizmor-action action to v0.6.4 ( #2900 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-09-20 07:17:28 +00:00
ubot-7274[bot]
0564b5ef4c
chore(deps): update github/codeql-action action to v4.38.1 (main) ( #2898 )
2026-09-20 07:43:29 +03:00
renner
1d7aceb03b
chore(ci): stop hardcoding stable-branch ( #2605 )
...
Instead we can define an environment variable for github actions.
For things where we can't, globs/regex is probably good enough.
When we branch/stabilize "stable-f45" then we will delete the old one
anyway, so we shouldn't be in a situation where we'll get spammed with
like 3 PRs.
The only remaining things where it's hardcoded is the pull config and
docs.
2026-09-19 03:09:54 +00:00
inffy
6ce2bb1d9a
chore(ci): move to newer free-disk-space action ( #2884 )
2026-09-17 06:02:15 +00:00
renner
69178efe4a
chore(ci): add zizmor ( #2529 )
...
Thanks Secureblue!
xref: https://github.com/ublue-os/aurora/issues/2528
2026-09-17 03:26:42 +00:00
inffy
c4bd716f80
fix(backport-action): keep credentials so backport action works ( #2877 )
2026-09-15 15:16:04 +00:00
ubot-7274[bot]
a0b25b998b
chore(deps): update github/codeql-action action to v4.38.0 (main) ( #2857 )
2026-09-13 09:21:28 +03:00
ubot-7274[bot]
401ac56b89
chore(deps): update github/codeql-action action to v4.37.9 (main) ( #2796 )
2026-08-30 09:06:19 +03:00
ubot-7274[bot]
2396ec06e0
chore(deps): update anchore/sbom-action action to v0.24.2 ( #2790 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-29 05:32:28 +00:00
ubot-7274[bot]
cf4db1509a
chore(deps): update anchore/sbom-action action to v0.24.1 ( #2783 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-28 04:15:55 +00:00
ubot-7274[bot]
bc8c3f6563
chore(deps): update github/codeql-action action to v4.37.8 (main) ( #2752 )
2026-08-23 07:17:28 +03:00
renner
d9a646af97
chore: remove retired ai moderator ( #2747 )
2026-08-21 16:11:35 +03:00
renner
d85c9c22e7
feat: generate changelogs for testing ( #2741 )
...
Currently if we make changes to the changelogs we would only notice them
once they reach the stable branch. This is also consistent what we are
doing with stable and latest.
2026-08-19 19:03:01 +00:00
renner
a05b95d732
chore(ci): remove aurora brand name ( #2728 )
2026-08-17 06:48:39 +03:00
ubot-7274[bot]
9a3968312d
chore(deps): update github/codeql-action action to v4.37.7 (main) ( #2723 )
2026-08-16 08:38:05 +03:00
ubot-7274[bot]
552c0bf31b
chore(deps): update dependency sigstore/cosign to v3.1.3 ( #2693 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-09 13:49:58 +00:00
ubot-7274[bot]
f8b97ecdfc
chore(deps): update actions/attest action to v4.2.2 ( #2692 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-09 06:25:41 +00:00
ubot-7274[bot]
7a7ae21a92
chore(deps): update github/codeql-action action to v4.37.6 ( #2696 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-09 09:26:05 +03:00
ubot-7274[bot]
8fd730e0b6
chore(deps): update github/codeql-action action to v4.37.4 (main) ( #2662 )
2026-08-03 08:35:18 +03:00
ubot-7274[bot]
50d424512e
chore(deps): update actions/attest action to v4.2.1 ( #2660 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-02 18:26:54 +00:00
renner
e6a718f2e1
chore(ci): pin cosign ( #2640 )
...
This is a ticking time bomb, so we don't accidentally use cosign v4 when
it comes out and so on, renovate should pick this up.
2026-07-28 19:34:58 +00:00
ubot-7274[bot]
aad2d52fd4
chore(deps): update ossf/scorecard-action action to v2.4.4 (main) ( #2610 )
2026-07-24 10:36:47 +03:00
ubot-7274[bot]
2753e11968
chore(deps): update github/codeql-action digest to e064762 (main) ( #2595 )
...
* chore(deps): update github/codeql-action digest to e064762
* set proper version
---------
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
2026-07-22 11:02:59 +03:00
inffy
4d9908e3d1
chore(ci): add gh token to release generator ( #2591 )
...
* chore(ci): add gh token to release generator
Seems we need to pass the token to gh cli in workflows too
https://github.com/ublue-os/aurora/actions/runs/29793388914/job/88563341082#step:7:13
* consistency
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-21 11:25:02 +00:00
ubot-7274[bot]
17717edb54
chore(deps): update actions/checkout digest to 3d3c42e (main) ( #2585 )
...
* chore(deps): update actions/checkout digest to 3d3c42e
* chore: use full tags for actions/checkout
---------
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
2026-07-20 16:54:34 +00:00
