dependabot[bot]
3ca45cf8c7
meta: bump actions/checkout from 3.5.2 to 3.5.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/8e5e7e5ab8b370d6c329ec480221332ada57f0ab...c85c95e3d7251135ab7dc9ce3241c5835cc595a9 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48625
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-07-05 05:50:56 +00:00
dependabot[bot]
f870bbcf1a
meta: bump step-security/harden-runner from 2.4.0 to 2.4.1
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/128a63446a954579617e875aaab7d2978154e969...55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48626
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-07-03 19:27:51 +00:00
dependabot[bot]
329813d04a
meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/80e868c13c90f172d68d1f4501dee99e2479f7af...08b4669551908b1024bb425080c797723083c031 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48628
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
2023-07-03 18:33:57 +00:00
dependabot[bot]
080d536c1e
meta: bump github/codeql-action from 2.3.6 to 2.20.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.6 to 2.20.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/83f0fe6c4988d98a455712a27f0255212bba9bd4...f6e388ebf0efc915c6c5b165b019ee61a6746a38 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48627
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
2023-07-03 18:33:47 +00:00
Marco Ippolito
51ca71cb51
tools: automate update openssl v16
...
PR-URL: https://github.com/nodejs/node/pull/48377
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
2023-06-19 12:53:09 +00:00
Richard Lau
6a3403cded
tools: update create-or-update-pull-request-action
...
Use the same commit SHA for this action as used in our other workflows.
Refs: https://github.com/nodejs/node/pull/46169
Refs: https://github.com/nodejs/node/pull/45022#issuecomment-1290397901
PR-URL: https://github.com/nodejs/node/pull/48398
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Tobias Nießen <tniessen@tnie.de >
2023-06-09 11:54:02 +00:00
Michael Dawson
41f8abc6b5
build: update action to close stale PRs
...
My original plan of adding a lable to limit those initially
process as outlined in https://github.com/nodejs/node/pull/48051
does not work I think because adding a lable updates the last
update time.
- Removing the need for the lable
- Remove the cron scheduling so that it only runs when I run it manually
- Fix the display name for the action as I missed updating that after
cut and paste from existing action
The plan will be to find stop dates that should only affect a reasonable
number of PRs at a time and then run in batches using that instead.
Signed-off-by: Michael Dawson <mdawson@devrus.com >
PR-URL: https://github.com/nodejs/node/pull/48196
Reviewed-By: Mestery <mestery@protonmail.com >
2023-06-05 14:54:00 -04:00
dependabot[bot]
4bb06dbd0a
meta: bump github/codeql-action from 2.3.3 to 2.3.6
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.3 to 2.3.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/29b1f65c5e92e24fe6b6647da1eaabe529cec70f...83f0fe6c4988d98a455712a27f0255212bba9bd4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48287
Reviewed-By: Rich Trott <rtrott@gmail.com >
Reviewed-By: Mestery <mestery@protonmail.com >
2023-06-03 19:09:31 +00:00
dependabot[bot]
cd82d42051
meta: bump actions/setup-python from 4.6.0 to 4.6.1
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/57ded4d7d5e986d7296eab16560982c6dd7c923b...bd6b4b6205c4dbad673328db7b31b7fab9e241c0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48286
Reviewed-By: Rich Trott <rtrott@gmail.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-06-03 19:09:20 +00:00
dependabot[bot]
2482535e24
meta: bump codecov/codecov-action from 3.1.3 to 3.1.4
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/894ff025c7b54547a9a2a1e9f228beae737ad3c2...eaaf4bedf32dbdc6b720b63067d99c4d77d6047d )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/48285
Reviewed-By: Rich Trott <rtrott@gmail.com >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-06-03 19:09:09 +00:00
Marco Ippolito
fdf8ecde9e
Revert "tools: open issue when update workflow fails"
...
This reverts commit c488558c15 .
PR-URL: https://github.com/nodejs/node/pull/48312
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2023-06-03 11:28:46 +00:00
Marco Ippolito
3e071584dc
tools: automate histogram update
...
PR-URL: https://github.com/nodejs/node/pull/48171
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
2023-05-30 08:32:27 +00:00
Luca
607c8f4eac
tools: order dependency jobs alphabetically
...
Refs: https://github.com/nodejs/security-wg/issues/973
PR-URL: https://github.com/nodejs/node/pull/48184
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Debadree Chatterjee <debadree333@gmail.com >
2023-05-29 04:53:28 +00:00
Andrea Fassina
242362440d
doc: fix broken link to new folder doc/contributing/maintaining
...
PR-URL: https://github.com/nodejs/node/pull/48205
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Deokjin Kim <deokjin81.kim@gmail.com >
Reviewed-By: Tobias Nießen <tniessen@tnie.de >
2023-05-28 21:28:19 +02:00
Michael Dawson
65be8901c3
build: add action to close stale PRs
...
Add action to close PRs that are over 1 year old and
have had no comments or updates in the last 6 months.
Fixes: https://github.com/nodejs/node/issues/42981
Signed-off-by: Michael Dawson <mdawson@devrus.com >
PR-URL: https://github.com/nodejs/node/pull/48051
Reviewed-By: Matteo Collina <matteo.collina@gmail.com >
2023-05-26 14:25:06 -04:00
Marco Ippolito
c488558c15
tools: open issue when update workflow fails
...
PR-URL: https://github.com/nodejs/node/pull/48018
Refs: https://github.com/nodejs/security-wg/issues/973
Reviewed-By: Richard Lau <rlau@redhat.com >
2023-05-25 08:25:34 +00:00
Rich Trott
a7c16b2917
meta: bump step-security/harden-runner from 2.3.1 to 2.4.0
...
PR-URL: https://github.com/nodejs/node/pull/47980
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
2023-05-14 16:35:01 +00:00
Rich Trott
2c0e3d87da
meta: bump github/codeql-action from 2.3.2 to 2.3.3
...
PR-URL: https://github.com/nodejs/node/pull/47979
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-05-14 16:34:52 +00:00
Rich Trott
a845f21dc4
meta: bump actions/setup-python from 4.5.0 to 4.6.0
...
Sync with other files updated in dca352a9b6 .
PR-URL: https://github.com/nodejs/node/pull/47968
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Darshan Sen <raisinten@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-05-13 22:12:04 +00:00
Marco Ippolito
1b177932a1
tools: automate icu-small update
...
PR-URL: https://github.com/nodejs/node/pull/47727
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Steven R Loomis <srl295@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2023-05-09 21:01:08 +00:00
dependabot[bot]
41fb40c7ff
meta: bump step-security/harden-runner from 2.2.1 to 2.3.1
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.2.1 to 2.3.1.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/1f99358870fe1c846a3ccba386cc2b2246836776...6b3083af2869dc3314a0257a42f4af696cc79ba3 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/47808
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Mestery <mestery@protonmail.com >
2023-05-07 11:21:14 +00:00
dependabot[bot]
dca352a9b6
meta: bump actions/setup-python from 4.5.0 to 4.6.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435...57ded4d7d5e986d7296eab16560982c6dd7c923b )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/47806
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Mestery <mestery@protonmail.com >
2023-05-07 11:21:06 +00:00
dependabot[bot]
3e95f266d1
meta: bump actions/checkout from 3.3.0 to 3.5.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.3.0 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.3.0...8e5e7e5ab8b370d6c329ec480221332ada57f0ab )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
PR-URL: https://github.com/nodejs/node/pull/47805
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2023-05-07 11:20:57 +00:00
Mestery
419e4fb77f
meta: remove extra space in scorecard workflow
...
This extra space is preventing dependabot from replacing the old version
by the new one, on dependencies/actions update.
PR-URL: https://github.com/nodejs/node/pull/47805
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2023-05-07 11:20:56 +00:00
dependabot[bot]
1c73407ffd
meta: bump github/codeql-action from 2.2.9 to 2.3.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.9 to 2.3.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/04df1262e6247151b5ac09cd2c303ac36ad3f62b...f3feb00acb00f31a6f60280e6ace9ca31d91c76a )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/47809
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
2023-05-03 19:06:18 +00:00
dependabot[bot]
6ce376df98
meta: bump codecov/codecov-action from 3.1.1 to 3.1.3
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 3.1.1 to 3.1.3.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70...894ff025c7b54547a9a2a1e9f228beae737ad3c2 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/47807
Reviewed-By: Mestery <mestery@protonmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2023-05-03 19:06:07 +00:00
Marco Ippolito
ad5a0d1366
tools: fix update-v8-patch cache
...
PR-URL: https://github.com/nodejs/node/pull/47725
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2023-04-26 13:43:16 +00:00
Marco Ippolito
71a776b928
tools: automate v8 patch update
...
PR-URL: https://github.com/nodejs/node/pull/47594
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2023-04-26 08:20:23 +00:00
Tobias Nießen
86a8335a06
tools: keep PR titles/description up-to-date
...
Set the `update-pull-request-title-and-body` option when potentially
updating an existing PR with a dynamic title and/or description.
PR-URL: https://github.com/nodejs/node/pull/47621
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
2023-04-21 14:38:48 +00:00
Moshe Atlow
f536bb04ce
deps: add minimatch as a dependency
...
PR-URL: https://github.com/nodejs/node/pull/47499
Refs: https://github.com/nodejs/node/pull/47490
Refs: https://github.com/nodejs/node/pull/47486
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Robert Nagy <ronagy@icloud.com >
2023-04-21 03:01:52 +03:00
Tobias Nießen
4956271c93
tools: add update script for googletest
...
GoogleTest follows the Abseil Live at Head philosophy, and rarely
creates tags or GitHub releases, so instead, follow Google's
recommendation and update to the upstream HEAD every once in a while.
The tricky bit is properly updating googletest.gyp, and this script
might fail doing so in the future.
Refs: https://github.com/nodejs/security-wg/issues/828
PR-URL: https://github.com/nodejs/node/pull/47482
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2023-04-19 15:07:01 +00:00
Michaël Zasso
4f0e1925ad
tools: add option to run workflow with specific tool id
...
PR-URL: https://github.com/nodejs/node/pull/47591
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Tobias Nießen <tniessen@tnie.de >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Tierney Cyren <hello@bnb.im >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-19 09:29:11 +00:00
Marco Ippolito
8f879ded4e
tools: automate zlib update
...
PR-URL: https://github.com/nodejs/node/pull/47417
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Michael Dawson <midawson@redhat.com >
2023-04-19 08:25:54 +00:00
dependabot[bot]
49994f3960
build: bump ossf/scorecard-action from 2.1.2 to 2.1.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.2 to 2.1.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/e38b1902ae4f44df626f11ba0734b14fb91f8f86...80e868c13c90f172d68d1f4501dee99e2479f7af )
PR-URL: https://github.com/nodejs/node/pull/47367
Reviewed-By: Rich Trott <rtrott@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-15 18:50:58 +00:00
Christian Clauss
4c2241400a
build: replace Python linter flake8 with ruff
...
PR-URL: https://github.com/nodejs/node/pull/47519
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Jiawen Geng <technicalcute@gmail.com >
2023-04-14 16:49:01 +00:00
Ranieri Innocenti Spada
5fa84e8866
tools: automate uvwasi dependency update
...
Refs: https://github.com/nodejs/security-wg/issues/828
PR-URL: https://github.com/nodejs/node/pull/47509
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Michael Dawson <midawson@redhat.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2023-04-13 16:29:29 +00:00
Mateo Nunez
bae4420c03
tools: add missing pinned dependencies
...
PR-URL: https://github.com/nodejs/node/pull/47346
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Michael Dawson <midawson@redhat.com >
2023-04-13 15:47:57 +00:00
Marco Ippolito
6dcbf8b616
tools: automate ngtcp2 and nghttp3 update
...
PR-URL: https://github.com/nodejs/node/pull/47402
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-12 13:18:02 +00:00
Marco Ippolito
4899998d0d
tools: move update-undici.sh to dep_updaters and create maintain md
...
PR-URL: https://github.com/nodejs/node/pull/47380
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-11 13:19:14 +00:00
Marco Ippolito
c2b54fb900
tools: move update-acorn.sh to dep_updaters and create maintaining md
...
PR-URL: https://github.com/nodejs/node/pull/47382
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-10 19:38:08 +00:00
Marco Ippolito
cfb654cc31
tools: automate cjs-module-lexer dependency update
...
PR-URL: https://github.com/nodejs/node/pull/47446
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Debadree Chatterjee <debadree333@gmail.com >
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Guy Bedford <guybedford@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-09 18:23:04 +00:00
Antoine du Hamel
57caf13562
tools: fix notify-on-push Slack messages
...
PR-URL: https://github.com/nodejs/node/pull/47453
Refs: https://api.slack.com/reference/surfaces/formatting#special-mentions
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Debadree Chatterjee <debadree333@gmail.com >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
2023-04-08 15:17:50 +00:00
Richard Lau
a75871a36e
tools: add root certificate update script
...
Automates the steps from `doc/contributing/maintaining-root-certs.md`.
Extend "Tools and deps update" workflow to use the new script to update
the root certificates.
PR-URL: https://github.com/nodejs/node/pull/47425
Reviewed-By: Michael Dawson <midawson@redhat.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Tobias Nießen <tniessen@tnie.de >
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-07 19:10:56 +00:00
Marco Ippolito
069365c5bd
tools: fix update-openssl.yml compare version
...
PR-URL: https://github.com/nodejs/node/pull/47384
Refs: https://github.com/nodejs/node/pull/46957
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2023-04-05 13:55:28 +00:00
dependabot[bot]
e7bab6c500
build: bump github/codeql-action from 2.2.6 to 2.2.9
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.6 to 2.2.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/16964e90ba004cdf0cd845b866b5df21038b7723...04df1262e6247151b5ac09cd2c303ac36ad3f62b )
PR-URL: https://github.com/nodejs/node/pull/47366
Reviewed-By: Rich Trott <rtrott@gmail.com >
Reviewed-By: Feng Yu <F3n67u@outlook.com >
2023-04-04 19:28:25 +00:00
Debadree Chatterjee
81bb1b053b
tools: use ref_name to get branch pushed on
...
PR-URL: https://github.com/nodejs/node/pull/47358
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Rich Trott <rtrott@gmail.com >
2023-04-03 07:19:20 +00:00
Debadree Chatterjee
1265eae09b
tools: add a at here tag for slack messages
...
PR-URL: https://github.com/nodejs/node/pull/47358
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Rich Trott <rtrott@gmail.com >
2023-04-03 07:19:19 +00:00
Rich Trott
eef13046b1
build: update stale action from v7 to v8
...
PR-URL: https://github.com/nodejs/node/pull/47357
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Debadree Chatterjee <debadree333@gmail.com >
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
2023-04-03 05:17:22 +00:00
Filip Skokan
21f0620a7a
meta: fix notable-change comment label url
...
PR-URL: https://github.com/nodejs/node/pull/47300
Reviewed-By: Tierney Cyren <hello@bnb.im >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2023-03-31 17:49:09 +00:00
Marco Ippolito
da8c099f10
tools: automate brotli update
...
PR-URL: https://github.com/nodejs/node/pull/47205
Refs: https://github.com/nodejs/security-wg/issues/828
Reviewed-By: Matteo Collina <matteo.collina@gmail.com >
Reviewed-By: Adrian Estrada <edsadr@gmail.com >
2023-03-31 08:31:01 +00:00