5d6599237d
Bump the github-actions-updates group across 1 directory with 7 updates ( #2034 )
...
Bumps the github-actions-updates group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) | `3` | `4` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup ) | `4.2.0` | `5.0.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action ) | `5` | `6` |
| [docker/login-action](https://github.com/docker/login-action ) | `3` | `4` |
| [docker/build-push-action](https://github.com/docker/build-push-action ) | `6` | `7` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `6` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `7` | `8` |
Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4 )
Updates `pnpm/action-setup` from 4.2.0 to 5.0.0
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v4.2.0...v5.0.0 )
Updates `codecov/codecov-action` from 5 to 6
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v5...v6 )
Updates `docker/login-action` from 3 to 4
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v3...v4 )
Updates `docker/build-push-action` from 6 to 7
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v6...v7 )
Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: pnpm/action-setup
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: codecov/codecov-action
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: docker/login-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: docker/build-push-action
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-21 19:29:38 -05:00
Dmitry Verkhoturov and Umputun
0105bc2314
Drop GitHub token permissions on deploy jobs
...
Deploy jobs only curl an external updater URL and need no GitHub API
access. Without an explicit permissions block they inherit the workflow
default, which may include contents:write, packages:write, etc.
Setting permissions to {} limits the blast radius if a job is
compromised.
2026-02-21 20:16:00 -06:00
Umputun and GitHub
1320b1f055
Merge pull request #1984 from umputun/dependabot/github_actions/github-actions-updates-35b2a8182b
...
Bump the github-actions-updates group with 3 updates
2026-02-10 22:40:25 -06:00
Dmitry Verkhoturov and Umputun
b7a13a6636
Fix site rebuild on release
...
The paths filter was applied to tag events, preventing site rebuilds
when releases don't include site changes. Switch to release event
trigger which always fires on new releases, ensuring the site fetches
the latest version from GitHub API.
Closes #1992
2026-02-05 11:06:58 -06:00
dependabot[bot] and GitHub
4c9a791d6d
Bump the github-actions-updates group with 3 updates
...
Bumps the github-actions-updates group with 3 updates: [actions/cache](https://github.com/actions/cache ), [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
Updates `actions/download-artifact` from 6 to 7
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-01 11:09:55 +00:00
Dmitry Verkhoturov and GitHub
41b75eba08
Merge pull request #1977 from umputun/docker-native-arm64-runners
...
Improve GitHub Actions workflows security and performance
2025-12-08 14:46:13 -06:00
dependabot[bot] and Umputun
a311ff7b38
Bump the github-actions-updates group across 1 directory with 6 updates
...
Bumps the github-actions-updates group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4` | `5` |
| [actions/setup-go](https://github.com/actions/setup-go ) | `5` | `6` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) | `6` | `8` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `4` | `6` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup ) | `4.1.0` | `4.2.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `4` | `5` |
Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v5...v6 )
Updates `golangci/golangci-lint-action` from 6 to 8
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v6...v8 )
Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v6 )
Updates `pnpm/action-setup` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v4.1.0...v4.2.0 )
Updates `actions/upload-artifact` from 4 to 5
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: actions/setup-go
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: golangci/golangci-lint-action
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: pnpm/action-setup
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-03 11:43:50 -06:00
Dmitry Verkhoturov and Umputun
3646c4a871
Drop linux/arm/v7 docker image from site as it doesn't build well
2024-11-10 17:25:16 -06:00
Dmitry Verkhoturov and Umputun
29fc63f116
Clarify steps names for site deployment
2024-11-10 17:25:16 -06:00
Dmitry Verkhoturov and Umputun
884b5685eb
update docker images and github CI actions
2024-01-11 01:26:30 -06:00
Dmitry Verkhoturov and Umputun
f1b5469b83
bump github actions versions
...
Old ones produce warnings due to deprecation of NodeJS 12
2022-11-03 15:20:30 -05:00
Dmitry Verkhoturov and Umputun
4777f4059f
hardcode dockerhub username and ghcr.io repo for site docker push
...
Currently, such a build most likely has access to secrets but
fails due to the wrong username logging with DockerHub when
rebase is done by anyone but @umputun.
I've missed that last case in 5e5b3e0 and ad5d555 .
2022-07-27 22:08:10 -05:00
Dmitry Verkhoturov
ad5d555ac8
hardcode dockerhub username and ghcr.io repo for site docker push
...
Currently, such a build most likely has access to secrets but
fails due to the wrong username logging with DockerHub when
rebase is done by anyone but @umputun.
2022-07-28 01:34:21 +02:00
Paul Mineev and Umputun
3d1a3fd7cf
update ci workflows
2022-07-21 19:52:48 -05:00
Dmitry Verkhoturov and Umputun
2d2f2ab02a
return docker build for frontend and backend code outside in CI
...
Previously we built a Docker image just for the test,
but the introduction of multi-arch build in 9fbf0952
build also meant the push of the image, so it was
restricted only to the master branch.
This change re-introduces the Docker image build
outside the master branch, which is helpful
in pull requests.
We recently had a few frontend PRs which broke
the Docker image build silently, and that change
prevents it from happening.
2022-07-19 19:25:54 -05:00
Umputun
0521c7024c
attempt to fix ci
...
another fix for ci
fix build tagged images
2022-01-12 12:16:37 -06:00
Umputun
198759ca1b
rename jobs to avoid confusions
2021-09-21 03:52:31 -05:00
Umputun
193b107590
add remote site deployment from master
2021-08-11 01:45:39 -05:00
Umputun
3f7fbb4b31
rename site build
2021-08-09 19:45:43 -05:00
Umputun
cc686557ef
typo
2021-08-08 15:16:12 -05:00
Umputun
a752f14ecb
no-cache for site ci
2021-08-08 15:14:47 -05:00
Umputun
8729ff81cd
missing working directory
2021-08-08 14:59:46 -05:00
Umputun
f7d099d8fc
typo
2021-08-08 14:48:54 -05:00
Umputun
94f6ff0aef
add ci build for site
2021-08-08 14:48:13 -05:00