storytold/craft-common-actions
2
0
Fork 0
mirror of https://github.com/storytold/craft-common-actions.git synced 2026-11-02 18:06:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 23552e0010 ci(deps): bump taiki-e/install-action dependabot/github_actions/actions-b25ed438e6 dependabot[bot] 2026-11-02 11:16:45 +00:00
  • 44a7db40b1 Merge pull request #106 from dylanmtaylor/docs/no-caller-jobs main Dylan M. Taylor 2026-11-01 01:06:51 -04:00
  • 75fbd9b7b5 Merge pull request #96 from g1obalworlds/fix/supply-chain-gh-repo Dylan M. Taylor 2026-11-01 01:06:07 -04:00
  • 40191f5daf Merge pull request #112 from storytold/fix/flatpak-eu-strip Dylan M. Taylor 2026-11-01 01:05:04 -04:00
  • 7ee7f15d22 Merge branch 'main' into fix/flatpak-eu-strip fix/flatpak-eu-strip Dylan M. Taylor 2026-11-01 01:04:49 -04:00
  • 817ac1cb88 Merge pull request #99 from g1obalworlds/sonar-shard-exclude-tests Dylan M. Taylor 2026-11-01 01:03:24 -04:00
  • 09a83a41f5 Merge pull request #101 from ZIDAN44/fix/arch-xkbcommon-x11 Dylan M. Taylor 2026-11-01 01:02:40 -04:00
  • 925395fde6 Merge pull request #107 from storytold/dependabot/github_actions/actions-a6a2a90062 Dylan M. Taylor 2026-11-01 01:01:19 -04:00
  • 2ce6aa59c7 Merge pull request #110 from nanox333/codex/release-contributor-refresh Dylan M. Taylor 2026-11-01 01:00:55 -04:00
  • 841376d7a9 Merge pull request #119 from storytold/ci/gate-optional-packages Dylan M. Taylor 2026-11-01 00:59:32 -04:00
  • 7d24ca64b1 ci(deps): bump the actions group across 1 directory with 2 updates dependabot/github_actions/actions-a6a2a90062 dependabot[bot] 2026-11-01 04:35:59 +00:00
  • 52dc54c75e ci: pin install-action v2.87.33, the first that knows cargo-nextest 0.9.150 (#122) FredApps 2026-11-01 05:32:27 +01:00
  • c926ea426a fix: retry macOS release verification (#121) Dylan M. Taylor 2026-10-31 23:58:50 -04:00
  • 0c8d4353e7 fix: retry macOS release verification fix/macos-verification-retry Dylan M. Taylor 2026-10-31 23:58:35 -04:00
  • 37960c37b5 fix: pass Linux tarball to Flatpak OCI publishing (#120) Dylan M. Taylor 2026-10-31 23:50:07 -04:00
  • b4f482d0fd fix: pass Linux tarball to Flatpak OCI publishing fix/flatpak-oci-tarball Dylan M. Taylor 2026-10-31 23:49:24 -04:00
  • 0cb1ecf84c docs(gate): spell out os and targets in the second-call example ci/gate-optional-packages FredApps 2026-11-01 04:46:49 +01:00
  • c1f5c18c01 feat(gate): packages is optional; an empty list installs none FredApps 2026-11-01 04:26:35 +01:00
  • e031880d47 fix(install-apt-packages): time-limit and retry mirror downloads (#117) FredApps 2026-11-01 02:05:24 +01:00
  • 84ad881711 ci(windows-arm64): only main saves the packaging cache (#116) FredApps 2026-11-01 01:39:08 +01:00
  • 09f920c3f4 feat: add Flatpak OCI repository scaffolding script and tests (#115) Dylan M. Taylor 2026-10-31 15:43:24 -04:00
  • 5cd19d05cb ci(flatpak): publish Flatpak OCI layout to GHCR alongside Flatpak builds (#113) Dylan M. Taylor 2026-10-31 15:33:04 -04:00
  • 60110a62d4 ci: support qualification-only runs without release mutations test/launcher-release-qualification skylar taylor-barrick 2026-10-31 09:02:55 -06:00
  • 6ab410abfb ci: gate launcher candidates on native lifecycle qualification skylar taylor-barrick 2026-10-31 08:49:07 -06:00
  • 5d6a81953e fix(flatpak): install elfutils so flatpak-builder can eu-strip modules Brandon Thomas 2026-10-30 23:14:08 -04:00
  • b97dadbcbe docs(release): clarify contributor refresh caller permissions Kristian Myram 2026-10-30 21:28:16 +01:00
  • 215a7f48c1 fix(release): exclude contributor snapshots from release assets Kristian Myram 2026-10-30 18:00:34 +01:00
  • 3cb27117d0 Release: support automatic contributor snapshot refresh Kristian Myram 2026-10-30 14:36:32 +00:00
  • 2b3fb9dc05 ci: preserve dependency cache reuse across root manifest updates (#108) FredApps 2026-10-30 12:47:08 +01:00
  • 2959c0cdc8 docs: app workflows only call these shared workflows; app-specific checks move here Dylan M. Taylor 2026-10-29 20:25:40 -04:00
  • fa5ef18780 Build FreeBSD aarch64 release archives by default (#104) Dylan M. Taylor 2026-10-28 15:49:07 -04:00
  • 41e0b4e097 fix(freebsd): install cmake-core, which the quarterly package set still has (#103) aiongg 2026-10-28 14:10:16 -04:00
  • 230d71cc34 test(arch-package): a docstring for the libxkbcommon-x11 test Zinadin Zidan 2026-10-28 03:53:01 +06:00
  • d5a8872113 fix(arch-package): depend on libxkbcommon-x11, without which the window can't open Zinadin Zidan 2026-10-28 03:37:59 +06:00
  • 8bb4e5ab95 fix(ci): separate ARM64 install paths and scope (#100) Jeremy 2026-10-27 19:45:39 +00:00
  • 0e8822f295 sonarcloud: leave test code out of sharded coverage, as cargo llvm-cov does g1obalworlds 2026-10-26 17:16:25 -07:00
  • 03a637cbc0 supply-chain: name the repository for the SBOM upload g1obalworlds 2026-10-26 17:00:22 -07:00
  • 86bc2ce420 Merge pull request #95 from storytold/fix/nextest-0.9.150 skylar taylor-barrick 2026-10-26 16:37:11 -06:00
  • b97d27ffa3 test: cover nextest installer aliases fix/nextest-0.9.150 skylar 2026-10-26 16:20:05 -06:00
  • d07589f3fe ci: pin nextest to 0.9.150 skylar 2026-10-26 14:13:00 -06:00
  • eb37231cfb packaging: share Flatpak Cargo source generation codex/shared-flatpak-generator-20261026 skylar taylor-barrick 2026-10-26 04:45:45 +01:00
  • be6bbf3ca5 Provision fonts and optional Python coverage for Sonar (#88) skylar taylor-barrick 2026-10-25 21:37:12 -06:00
  • d0a11726cb ci: share Python coverage configuration with XML reporting codex/egui-037-coverage-fonts-20261026 skylar taylor-barrick 2026-10-26 04:34:35 +01:00
  • aa4e4ff91f ci: restore craft-common-actions tracking main skylar taylor-barrick 2026-10-26 04:27:36 +01:00
  • 452c0b419f sonarcloud: exclude i18n tables from duplication checks (#91) Dylan M. Taylor 2026-10-25 21:20:17 -04:00
  • 07683e249a sonarcloud: unpack the coverage archive outside the workspace (#90) Dylan M. Taylor 2026-10-25 21:17:09 -04:00
  • ab9a4203a3 sonarcloud: exclude i18n tables from duplication checks sonar-cpd-i18n Dylan M. Taylor 2026-10-25 21:16:58 -04:00
  • 04bae7b5a9 sonarcloud: unpack the coverage archive outside the workspace sonar-extract-outside-workspace Dylan M. Taylor 2026-10-25 21:12:13 -04:00
  • e620115697 Measure optional Python tooling coverage in Sonar skylar taylor-barrick 2026-10-26 01:55:03 +01:00
  • e3814b3ec2 sonarcloud: fail a shard that cannot run its tests instead of scanning empty coverage (#89) Dylan M. Taylor 2026-10-25 19:49:55 -04:00
  • dd60e08fef sonarcloud: fail a shard that cannot run its tests instead of scanning empty coverage sonar-shard-fix Dylan M. Taylor 2026-10-25 19:47:23 -04:00
  • cd0afc6752 Export the font path only after a requested checkout skylar taylor-barrick 2026-10-26 00:46:27 +01:00
  • 37915418af Pin nested actions used by coverage jobs skylar taylor-barrick 2026-10-26 00:31:46 +01:00
  • 68edd37a04 Keep coverage fonts optional unless a pin is requested skylar taylor-barrick 2026-10-26 00:20:32 +01:00
  • 6789f40242 Provision coverage fonts for archive builds and test runners skylartaylor 2026-10-26 00:13:27 +01:00
  • 395270d2c0 sonarcloud: optionally shard Rust coverage across parallel nextest partitions (#87) Dylan M. Taylor 2026-10-25 18:54:59 -04:00
  • 249a47be20 sonarcloud: validate shard count, pin the archive's toolchain, merge only test binaries sonar-coverage-shards Dylan M. Taylor 2026-10-25 18:54:17 -04:00
  • 4ce7b5eee8 sonarcloud: skip sharded scan steps when the plan job produces no shards Dylan M. Taylor 2026-10-25 18:39:10 -04:00
  • f043d79388 sonarcloud: build the instrumented archive once and shard tests from it Dylan M. Taylor 2026-10-25 18:30:40 -04:00
  • b22dd9c0d5 sonarcloud: default coverage to four shards Dylan M. Taylor 2026-10-25 18:26:58 -04:00
  • a70dc8966e sonarcloud: optionally shard Rust coverage across parallel nextest partitions Dylan M. Taylor 2026-10-25 18:25:32 -04:00
  • 6182ccebfd Raise the default SonarCloud job timeout to 90 minutes (#86) Dylan M. Taylor 2026-10-25 17:05:09 -04:00
  • d4d0d33284 Merge pull request #85 from storytold/codex/egui037-sonar-timeout-20261025 Dylan M. Taylor 2026-10-25 16:48:56 -04:00
  • d74cca0665 Allow callers to budget longer Sonar coverage jobs codex/egui037-sonar-timeout-20261025 skylartaylor 2026-10-25 21:45:03 +01:00
  • 2b4eb2c6d9 Merge pull request #83 from dylanmtaylor/security/workflows-hardening Dylan M. Taylor 2026-10-24 22:48:54 -04:00
  • e84f24ac6b Merge pull request #82 from dylanmtaylor/security/action-inputs-validation Dylan M. Taylor 2026-10-24 22:48:50 -04:00
  • ef752f1e72 Merge pull request #81 from dylanmtaylor/security/arch-package-hardening Dylan M. Taylor 2026-10-24 22:48:47 -04:00
  • 7b38cb1f31 test(resolve-version): add test for CRLF sanitization in app-title Dylan M. Taylor 2026-10-24 22:46:59 -04:00
  • 85f7365b1c fix(arch-package): preserve SPDX license expression and copy licenses with --remove-destination Dylan M. Taylor 2026-10-24 22:45:48 -04:00
  • 58e2894843 security(workflows): strengthen SonarCloud project-key and FreeBSD architecture input validation (F-005, F-006, F-007, F-009, F-010) Dylan M. Taylor 2026-10-24 22:44:09 -04:00
  • 80908a10c8 security(actions): harden apt package and resolve-version input handling (F-003, F-004) Dylan M. Taylor 2026-10-24 22:42:14 -04:00
  • 55fde55771 security(arch-package): harden metadata serialization and license path validation (F-001, F-002, F-008) Dylan M. Taylor 2026-10-24 22:39:25 -04:00
  • 13491f8120 ast-grep: a reusable structural-lint workflow driven by the app's sgconfig.yml (#80) Ivan 2026-10-25 02:29:21 +03:00
  • 9e42334399 fix(release): drop the i18n gate; missing translations never block (storytold/craft-i18n#20) (#79) Martin Ball 2026-10-23 22:06:45 +01:00
  • 93c11f0cbf release: run the storytold git-sources gate once, in the shared workflow (#78) Dylan M. Taylor 2026-10-23 14:34:51 -04:00
  • 637d2b64c1 release: run the storytold git-sources gate once, in the shared workflow release/shared-git-sources Dylan M. Taylor 2026-10-23 14:33:42 -04:00
  • 52677fa55b sonarcloud: free runner disk and drop debuginfo so the llvm-cov build fits (#76) Dylan M. Taylor 2026-10-23 13:53:45 -04:00
  • 1b000f0b86 sonarcloud: free runner disk and drop debuginfo so the llvm-cov build fits ci/sonar-free-disk Dylan M. Taylor 2026-10-23 13:52:32 -04:00
  • 1c51ea7025 ci(deps): bump the actions group across 1 directory with 2 updates (#75) dependabot[bot] 2026-10-23 12:29:26 -04:00
  • f63d4a783a security(freebsd): keep custom test command and architecture out of guest shell source (#73) Dylan M. Taylor 2026-10-23 12:29:17 -04:00
  • 9587bf235d Shared quality-gate workflow for the craft apps (gate.yml) (#69) aiongg 2026-10-23 12:15:49 -04:00
  • 5d4336931c sonarcloud: measure Rust coverage with cargo-llvm-cov and import the LCOV report (#74) Dylan M. Taylor 2026-10-23 12:06:24 -04:00
  • 6a2db80412 security: validate apt package names and require a whole-string semver (#72) Dylan M. Taylor 2026-10-23 11:53:52 -04:00
  • 3c26b20be5 security(arch-package): validate version, license and arch; reject symlinked license dirs (#71) Dylan M. Taylor 2026-10-23 11:53:48 -04:00
  • bfec7e2a70 security: fetch amd64 security updates over HTTPS (SonarCloud S5332) (#68) Dylan M. Taylor 2026-10-22 22:46:49 -04:00
  • 13f14e1788 install-apt-packages: cache downloaded .deb files between runs (#67) aiongg 2026-10-22 22:46:37 -04:00
  • ffe9bd01ad Revert "Install target libdbus headers for Linux portal builds (#57)" (#65) Martin Ball 2026-10-22 22:48:22 +01:00
  • b86cdd3d0e Install target libdbus headers for Linux portal builds (#57) Mocky Digital 2026-10-23 00:10:28 +03:00
  • 879a6a1684 fix(release): give riscv64 packages the glibc floor of their runner (#62) Martin Ball 2026-10-22 22:10:08 +01:00
  • 67a331f56f fix(ci): keep release artifacts separate until names are checked (#31) ihsan mokhlisse 2026-10-22 23:09:19 +02:00
  • cfdd61fda0 riscv64 cross: read amd64 security updates from the primary archive (#61) Brandon Thomas 2026-10-22 16:21:49 -04:00
  • 9a3fb24c6b riscv64 cross: read amd64 security updates from the primary archive fix/riscv64-security-mirror-skew Brandon Thomas 2026-10-22 15:51:34 -04:00
  • ea8c0f57af security(windows-arm64): prevent PowerShell injection through installer inputs (#58) coderabbitai[bot] 2026-10-22 15:23:56 -04:00
  • 391ba8156a security(windows-arm64): prevent PowerShell injection through installer inputs coderabbit/secure-windows-workflow-inputs/4221cda6 coderabbitai[bot] 2026-10-22 19:17:39 +00:00
  • 82b63dea97 security(freebsd): prevent shell injection through Cargo extra arguments (#56) coderabbitai[bot] 2026-10-22 15:10:38 -04:00
  • ad4ce82fda security(freebsd): prevent shell injection through Cargo extra arguments coderabbit/secure-freebsd-cargo-args/71735762 coderabbitai[bot] 2026-10-22 19:08:29 +00:00
  • 11013609b1 fix(freebsd-cache): fall back to a compatible cache when manifests move (#41) Saadi 2026-10-22 20:00:48 +01:00
  • 50a6bc4968 ci(release): cross-compile FreeBSD aarch64 in the x86_64 VM (#50) Zuujis 2026-10-22 13:58:24 -05:00
  • b4bfe83b30 feat(release): build with the app's craft-i18n pin and gate packaging on it (#51) Martin Ball 2026-10-22 19:54:21 +01:00
  • d6d11df79e security(release): prevent app-name shell injection in FreeBSD and server jobs (#55) coderabbitai[bot] 2026-10-22 14:47:14 -04:00