Commit Graph

39 Commits

Author SHA1 Message Date
Tim Schaub
765e3d798f Merge pull request #13617 from openlayers/dependabot/github_actions/actions/setup-node-3
Bump actions/setup-node from 2 to 3
2022-04-28 21:01:19 -06:00
Tim Schaub
2068dde85d Merge pull request #13615 from openlayers/dependabot/github_actions/actions/upload-artifact-3
Bump actions/upload-artifact from 2 to 3
2022-04-28 20:57:17 -06:00
dependabot[bot]
330260ea69 Bump actions/setup-node from 2 to 3
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-29 02:56:36 +00:00
Tim Schaub
874be4760f Merge pull request #13618 from openlayers/dependabot/github_actions/actions/checkout-3
Bump actions/checkout from 2 to 3
2022-04-28 20:55:35 -06:00
dependabot[bot]
45354b61b1 Bump actions/github-script from 5 to 6
Bumps [actions/github-script](https://github.com/actions/github-script) from 5 to 6.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-28 14:45:18 +00:00
dependabot[bot]
e403502fc9 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-28 14:45:15 +00:00
dependabot[bot]
caaa6993e9 Bump actions/upload-artifact from 2 to 3
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-28 14:45:07 +00:00
naveen
c6a7aa08c7 chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-04-27 01:37:20 +00:00
Tim Schaub
459cd51ae2 Quote 2022-02-05 20:58:09 -07:00
Tim Schaub
ccc78d731d Allow duplicate imports in the legacy build 2022-02-05 15:01:36 -07:00
Tim Schaub
6665b3325b Update the security scan task 2021-11-19 11:57:19 -07:00
Tim Schaub
f2023cda96 Revert "Remove the security scan workflow" 2021-11-19 11:54:54 -07:00
Tim Schaub
26d5b2163a Remove CodeQL workflow 2021-11-19 08:36:36 -07:00
Tim Schaub
6f2afe0088 Update the security scan task 2021-11-18 15:56:24 -07:00
Tim Schaub
aa2b55aefe Use registry URL when publishing 2021-11-16 08:58:06 -07:00
Tim Schaub
45c8ad37c8 Use workflow_run event to deploy pull request previews 2021-11-15 15:31:57 -07:00
Tim Schaub
c72101ff2e Add status context 2021-10-22 22:45:42 -10:00
Tim Schaub
2c757bc8fa Add commit status with preview URL 2021-10-22 22:31:50 -10:00
Tim Schaub
635a236ab8 Use SHA for pull request head 2021-10-22 22:08:07 -10:00
Tim Schaub
5ac9dbeb89 Use pull request head 2021-10-22 21:14:47 -10:00
Tim Schaub
ba6d6f3bb4 Build site preview as a GitHub action 2021-10-22 14:27:34 -10:00
Tim Schaub
b69222ecae Lint the index file after generating the legacy build 2021-05-05 10:00:49 -06:00
Tim Schaub
1ce7ef95fc Build legacy build in github workflows 2021-05-03 22:26:05 +02:00
Tim Schaub
7b934a06be Add node tests 2021-05-01 10:18:23 -06:00
Tim Schaub
19d8100049 Following the recommendation to run on a merge commit 2021-04-28 19:49:29 -07:00
Tim Schaub
490cfabe91 Organize tests 2021-04-28 09:23:33 -07:00
Tim Schaub
94017ff8ee Update the name of the build job 2021-04-26 20:07:41 -06:00
Tim Schaub
3ebaeee087 Avoid naming required checks with a changing version 2021-04-26 19:51:03 -06:00
Tim Schaub
11707b9f83 Build on Node 16 2021-04-26 09:14:40 -06:00
Tim Schaub
c01db37ff4 Add job to run the build script in CI 2021-04-26 09:11:37 -06:00
Tim Schaub
714e08761f Add security scan 2020-08-25 23:20:55 -06:00
Tim Schaub
9f6939cfd8 Publish dev releases for pushes to main 2020-06-20 13:18:57 -06:00
Tim Schaub
139b048197 Prepare for a new default branch name 2020-06-19 10:25:03 -06:00
Tim Schaub
cb1c25374b Only store actual.png from rendering tests 2020-05-17 11:17:08 -06:00
Tim Schaub
2352a9f545 Run rendering and spec tests in parallel 2020-05-17 10:46:06 -06:00
Tim Schaub
ef5ef1b0b2 Store rendering test output 2020-05-16 23:47:02 -06:00
Tim Schaub
2e6dd3b251 Run tests as a GitHub CI workflow 2020-05-16 23:37:25 -06:00
Tim Schaub
5290486e23 Dev version based on time 2019-09-23 19:48:30 +02:00
Tim Schaub
5dfa96d552 Workflow to publish a dev release 2019-09-12 12:40:28 -06:00