actions/publish-immutable-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
192 Commits 13 Branches 5 Tags
4bc8754ffc40f27910afb20287dbbbb675a4e978
Commit Graph
192 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Conor SloanandGitHub f58dd8f0ed Merge pull request #161 from actions/conorsloan/fix-self-publishing-workflow-permissions 
Update permissions on self-publishing workflow
 2024-08-12 09:56:01 +01:00
Conor Sloan a959dfafba replace contents: write with attestations: write in release 2024-08-12 09:53:52 +01:00
Conor SloanandGitHub a61106e002 Merge pull request #159 from actions/conorsloan/never-skip-attestation-write 
always set skipWrite to false when generating attestations
 2024-08-12 09:53:41 +01:00
Conor Sloan 90d59724e7 always set skipWrite to false when generating attestations 2024-08-12 09:51:04 +01:00
Conor SloanandGitHub 1a8d07a497 Merge pull request #94 from actions/dependabot/github_actions/super-linter/super-linter-6 
Bump super-linter/super-linter from 5 to 6
 2024-08-12 09:50:39 +01:00
Conor Sloan 50c672a353 dont ignore tests in eslint 2024-08-10 11:24:48 +01:00
Conor Sloan 0fd4266160 replace default style with validate env var 
See https://github.com/super-linter/super-linter/blob/main/docs/upgrade-guide.md#javascript_default_style-and-typescript_default_style
 2024-08-10 11:24:48 +01:00
Conor Sloan e58130f44d move permissions to top level 2024-08-10 11:24:48 +01:00
Conor Sloan 229ed04906 ignore tests in eslinter 2024-08-10 11:24:48 +01:00
Conor Sloan 766a6934c5 fix codeql permissions 2024-08-10 11:24:48 +01:00
Conor Sloan b40fcfc004 attempt 1 to fix linter issues 2024-08-10 11:24:48 +01:00
Sneha KripanandanandConor Sloan 67f4b7749e Set fetch-depth for checkout when using super-linter 2024-08-10 11:24:48 +01:00
dependabot[bot]andConor Sloan abf929b7e4 Bump super-linter/super-linter from 5 to 6 
Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 5 to 6.
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](https://github.com/super-linter/super-linter/compare/v5...v6)

---
updated-dependencies:
- dependency-name: super-linter/super-linter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-08-10 11:24:48 +01:00
Conor SloanandGitHub b8bd8fe389 Merge pull request #158 from actions/conorsloan/send-auth-to-ghcr-lookup-endpoint 
Send auth token to fetch container registry URL API endpoint
 2024-08-09 15:45:58 +01:00
Conor Sloan ffcb1087c4 send auth token to get container registry url endpoint 2024-08-09 14:49:07 +01:00
Conor SloanandGitHub f7d49cfdd1 Merge pull request #157 from actions/conorsloan/dump-response-body-on-unexpected-ghcr-response 
Include information from GHCR response bodies in error reporting
 2024-08-08 16:48:54 +01:00
Conor Sloan bebbbc6eee parse GHCR error format for errors 2024-08-08 14:07:54 +01:00
Conor Sloan 2bbf08d922 print response body when an http request to ghcr returns unexpected status 2024-08-08 11:45:25 +01:00
Conor SloanandGitHub 2bc8c192b1 Merge pull request #156 from actions/conorsloan/attest-before-publish 
Generate provenance attestation before performing upload to ghcr
 2024-08-07 21:48:38 +01:00
Conor Sloan c1f237b012 Generate provenance attestation before performing upload to ghcr 
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
 2024-08-07 17:13:39 +01:00
Sneha KripanandanandGitHub 8215ec2f64 Merge pull request #154 from actions/dependabot/npm_and_yarn/types/jest-29.5.12 
Bump @types/jest from 29.5.11 to 29.5.12
 2024-08-06 09:39:03 -04:00
dependabot[bot]andGitHub 5de4baf048 Bump @types/jest from 29.5.11 to 29.5.12 
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.11 to 29.5.12.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-08-05 22:25:35 +00:00
Sneha KripanandanandGitHub 9c2a630347 Merge pull request #152 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-28.6.0 
Bump eslint-plugin-jest from 27.6.3 to 28.6.0
 2024-08-05 15:16:15 -04:00
dependabot[bot]andGitHub 8e9002fe5a Bump eslint-plugin-jest from 27.6.3 to 28.6.0 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.6.3 to 28.6.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.6.3...v28.6.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-08-01 22:17:15 +00:00
Sneha KripanandanandGitHub e2e9fea210 Merge pull request #150 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.2.1 
Bump eslint-plugin-prettier from 5.1.3 to 5.2.1
 2024-08-01 09:07:01 -04:00
dependabot[bot]andGitHub b757396339 Bump eslint-plugin-prettier from 5.1.3 to 5.2.1 
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 5.1.3 to 5.2.1.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.1.3...v5.2.1)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-08-01 12:59:46 +00:00
Sneha KripanandanandGitHub ef67e6d74f Merge pull request #149 from actions/dependabot/npm_and_yarn/prettier-3.3.3 
Bump prettier from 3.2.4 to 3.3.3
 2024-08-01 08:58:29 -04:00
dependabot[bot]andGitHub cd067bec7f Bump prettier from 3.2.4 to 3.3.3 
Bumps [prettier](https://github.com/prettier/prettier) from 3.2.4 to 3.3.3.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.2.4...3.3.3)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 22:23:15 +00:00
Sneha KripanandanandGitHub 36524bea42 Merge pull request #87 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0 
Bump @typescript-eslint/parser from 6.19.0 to 6.21.0
 2024-07-31 13:55:44 -04:00
Sneha KripanandanandGitHub d623812b29 Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0 2024-07-31 13:50:29 -04:00
Sneha KripanandanandGitHub 1354f92349 Merge pull request #147 from actions/dependabot/npm_and_yarn/ts-jest-29.2.3 
Bump ts-jest from 29.1.1 to 29.2.3
 2024-07-31 13:45:56 -04:00
dependabot[bot]andGitHub 23baf08c4c Bump ts-jest from 29.1.1 to 29.2.3 
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.1 to 29.2.3.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.1...v29.2.3)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 17:09:35 +00:00
Sneha KripanandanandGitHub 7fee9b1717 Merge pull request #146 from actions/dependabot/npm_and_yarn/types/node-22.0.0 
Bump @types/node from 20.11.13 to 22.0.0
 2024-07-31 13:08:10 -04:00
dependabot[bot]andGitHub 6f395ba687 Bump @types/node from 20.11.13 to 22.0.0 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.13 to 22.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 17:02:46 +00:00
Sneha KripanandanandGitHub e7734cb142 Merge pull request #145 from actions/dependabot/npm_and_yarn/braces-3.0.3 
Bump braces from 3.0.2 to 3.0.3
 2024-07-31 13:01:30 -04:00
dependabot[bot]andGitHub d669870b09 Bump braces from 3.0.2 to 3.0.3 
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 16:50:48 +00:00
Sneha KripanandanandGitHub 81207d4b2c Merge pull request #117 from actions/dependabot/npm_and_yarn/follow-redirects-1.15.6 
Bump follow-redirects from 1.15.3 to 1.15.6
 2024-07-31 12:49:22 -04:00
dependabot[bot]andGitHub 011940d503 Bump follow-redirects from 1.15.3 to 1.15.6 
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.3 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.3...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 16:29:22 +00:00
Sneha KripanandanandGitHub 5d5043a13c Merge pull request #97 from actions/dependabot/npm_and_yarn/eslint-8.57.0 
Bump eslint from 8.54.0 to 8.57.0
 2024-07-31 12:26:52 -04:00
dependabot[bot]andGitHub 37578f447e Bump eslint from 8.54.0 to 8.57.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.54.0 to 8.57.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.54.0...v8.57.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 16:12:09 +00:00
Sneha KripanandanandGitHub b7462ded63 Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0 2024-07-31 11:59:15 -04:00
Sneha KripanandanandGitHub de2db00ca6 Merge pull request #92 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.21.0 
Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0
 2024-07-31 11:57:51 -04:00
dependabot[bot]andConor Sloan 1660fcacaa Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.20.0 to 6.21.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.21.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-31 16:50:25 +01:00
Conor SloanandGitHub cf36a13357 Merge pull request #144 from actions/conorsloan/minor-readme-update 
Update README.md
 2024-07-30 17:56:27 +01:00
Conor SloanandGitHub d0e1c8dd23 Update README.md 2024-07-30 17:48:02 +01:00
Conor SloanandGitHub a67b4b908a Merge pull request #143 from actions/conorsloan/add-readme-disclaimer 
add disclaimer to readme
 2024-07-30 17:39:05 +01:00
Conor SloanandGitHub 3a114e3b75 Update README.md 2024-07-30 17:25:31 +01:00
Conor SloanandGitHub 287eff5a0a Update README.md 2024-07-30 17:20:03 +01:00
Conor SloanandGitHub b54ac768df Update README.md 2024-07-30 17:12:06 +01:00
Conor SloanandGitHub 9bd8f2e9c0 Update README.md 2024-07-30 17:03:18 +01:00