actions/toolkit
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,783 Commits 271 Branches 19 Tags
danwkennedy/bump-http-client-github
Commit Graph
67 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Brian DeHamerandGitHub e1191599bb Merge pull request #2203 from actions/node-update-for-publish 
Use node24 for publishing
 2025-12-10 14:19:00 -08:00
Brian DeHamer c043714a35 use node24 for publishing 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-12-10 14:14:15 -08:00
Brian DeHamerandGitHub 3ac6e0fdf2 Merge pull request #2201 from actions/npm-trusted-publishing 
Enable npm trusted publishing
 2025-12-10 13:32:35 -08:00
Brian DeHamer d9f9074fee npm trusted publishing 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-12-10 13:27:16 -08:00
Brian DeHamerandGitHub f31c2921c1 Merge pull request #2058 from actions/dependabot/npm_and_yarn/packages/attest/undici-5.29.0 
Bump undici from 5.28.5 to 5.29.0 in /packages/attest
 2025-05-25 16:30:11 -07:00
Brian DeHamerandGitHub 36db4d62ad Merge pull request #2045 from actions/dependabot/npm_and_yarn/packages/attest/octokit/endpoint-9.0.6 
Bump @octokit/endpoint from 9.0.5 to 9.0.6 in /packages/attest
 2025-05-08 10:47:59 -07:00
Brian DeHamerandGitHub a25b686a45 Merge pull request #2044 from actions/dependabot/npm_and_yarn/packages/attest/octokit/request-error-5.1.1 
Bump @octokit/request-error from 5.1.0 to 5.1.1 in /packages/attest
 2025-05-08 10:47:20 -07:00
Brian DeHamerandGitHub ec9716b3cc Merge pull request #1969 from actions/bdehamer/workflow-ref 
set workflow.ref provenance field from ref claim
 2025-02-26 09:50:14 -08:00
Brian DeHamer 0bc338adab set workflow.ref provenance field from ref claim 
Updates the `buildSLSAProvenancePredicate` function to populate the
`workflow.ref` field from the `ref` claim in the OIDC token.

Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-02-26 08:47:27 -08:00
Brian DeHamerandGitHub b95b593ca5 Merge pull request #1957 from actions/bdehamer/update-undici 
Bump undici to v5.28.5
 2025-02-25 12:54:29 -08:00
Brian DeHamer 412108cd55 add undici to @actions/github dependencies 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-02-14 08:12:00 -08:00
Brian DeHamer 95e747361e bump undici to 5.28.5 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-02-14 08:02:10 -08:00
Brian DeHamerandGitHub 433f76091b Merge pull request #1908 from actions/bdehamer/artifact-2.2.0 
Prepare artifact release 2.2.0
 2024-12-17 10:24:18 -08:00
Brian DeHamer 4426b4ea91 Prepare artifact release 2.2.0 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-12-17 10:05:45 -08:00
Brian DeHamerandGitHub f522fdf89d Merge pull request #1896 from actions/bdehamer/artifact-digest 
return artifact digest on upload
 2024-12-17 10:01:16 -08:00
Brian DeHamer 1e0c16f0dc return artifact digest on upload 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-12-06 14:27:46 -08:00
Brian DeHamerandGitHub d13839fcf4 Merge pull request #1870 from actions/bdehamer/attest-1.5-release-notes 
`@actions/attest`: Release notes for v1.5.0 release
 2024-11-01 09:55:13 -07:00
Brian DeHamer 7e54468896 update release notes for @actions/attest v1.5.0 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-11-01 09:45:11 -07:00
Brian DeHamerandGitHub 339447c5d3 Merge pull request #1863 from meriadec/attest-provenance-tags 
Handle tags containing "@" character in `buildSLSAProvenancePredicate`
 2024-11-01 09:35:13 -07:00
Brian DeHamerandGitHub 43ce96d373 Merge pull request #1865 from actions/bdehamer/multi-subject 
`@actions/attest`: Support multi-subject attestations
 2024-11-01 09:33:11 -07:00
Brian DeHamer 265a5be8bc support multi-subject attestations 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-11-01 09:08:19 -07:00
Brian DeHamerandGitHub 65ee4d33af use macos-latest-large in test/release workflows (#1869) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-11-01 11:59:55 -04:00
Brian DeHamerandGitHub 29d342f176 Merge pull request #1848 from actions/bdehamer/attest-prep-1-5 
`@actions/attest`: prep release of @actions/attest v1.5.0
 2024-10-14 12:49:33 -07:00
Brian DeHamerandGitHub 72113fe791 Merge pull request #1847 from actions/bdehamer/attest-update-core 
`@actions/attest`: bump @actions/core from 1.10.1 to 1.11.1
 2024-10-14 12:49:15 -07:00
Brian DeHamerandGitHub 7b4d9763cc Merge pull request #1846 from actions/bdehamer/sigstore-3-0-0 
`@actions/attest`: bump @sigstore/sign from 2.3.2 to 3.0.0
 2024-10-14 12:48:55 -07:00
Brian DeHamer 26c752f562 prep release of @actions/attest v1.5.0 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-10-14 12:33:10 -07:00
Brian DeHamer ac1332a8e2 bump @actions/core from 1.10.1 to 1.11.1 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-10-14 12:16:09 -07:00
Brian DeHamer c6c5ef6b8e bump @sigstore/sign from 2.3.2 to 3.0.0 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-10-14 12:06:26 -07:00
Brian DeHamerandGitHub 6dd369c0e6 Merge pull request #1823 from actions/bdehamer/enterprise-issuer 
[@actions/attest] Fix bug with customized OIDC issuer
 2024-09-05 09:17:37 -07:00
Brian DeHamer 2a07de1333 fix bug with customized oidc issuer 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-09-04 10:24:28 -07:00
Brian DeHamerandGitHub 6c4e082c18 Merge pull request #1805 from actions/bdehamer/update-http-client 
bump @actions/http-client from 2.2.1 to 2.2.3
 2024-08-22 08:39:26 -07:00
Brian DeHamer 1e69bffbba bump @actions/http-client from 2.2.1 to 2.2.3 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-08-22 07:52:03 -07:00
Brian DeHamerandGitHub 7298ff3219 Merge pull request #1799 from actions/bdehamer/http-client-proxy-auth 
fix encoding for proxy auth token
 2024-08-21 06:41:49 -07:00
Brian DeHamerandGitHub 571d782946 Merge pull request #1797 from actions/bdehamer/attester-release-notes 
improve release notes for @actions/attest
 2024-08-19 07:38:36 -07:00
Brian DeHamer ada9e00cda fix encoding for proxy auth token 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-08-16 15:03:40 -07:00
Brian DeHamer ac3a063583 improve release notes for @actions/attest 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-08-16 12:43:39 -07:00
Brian DeHamerandGitHub 7cc96bb976 Merge pull request #1796 from actions/bdehamer/attest-issuer 
derive default OIDC issuer from current tenant
 2024-08-16 12:21:00 -07:00
Brian DeHamer fa6cc53297 derive default OIDC issuer from current tenant 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-08-16 12:07:23 -07:00
Brian DeHamerandGitHub 279e891118 Merge pull request #1790 from actions/bdehamer/attest-headers 
support for headers param in attest functions
 2024-08-16 07:21:46 -07:00
Brian DeHamer 340a1033a5 support for headers param in attest functions 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-08-15 15:35:32 -07:00
Brian DeHamerandGitHub 90d9783552 Merge pull request #1776 from actions/bdehamer/jwks-proxy-fix 
fix proxy support for jwks retrieval
 2024-07-29 16:31:41 -07:00
Brian DeHamer b28406bd1f fix proxy support for jwks retrieval 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-07-26 15:03:40 -07:00
Brian DeHamerandGitHub 361a115e53 Merge pull request #1759 from actions/bdehamer/rekor-409 
config rekor to fetch on conflict
 2024-06-12 12:25:06 -07:00
Brian DeHamer dddc440d56 config rekor to fetch on conflict 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-06-12 11:57:18 -07:00
Brian DeHamerandGitHub 08d6f14ea8 Merge pull request #1745 from actions/bdehamer/attest-provenance 
(@actions/attest) New GHA provenance build type
 2024-06-12 11:45:37 -07:00
Brian DeHamer 73100a7f85 new GHA build provenance 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-06-05 14:54:34 -07:00
Brian DeHamerandGitHub c6b487124a Merge pull request #1738 from actions/bdehamer/attest-1.3.0 
(@actions/attest) prepare 1.3.0 release
 2024-06-05 14:53:11 -07:00
Brian DeHamer 8735a7e2da prep 1.3.0 release of @actions/attest 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-21 13:11:37 -07:00
Brian DeHamerandGitHub ae38557bb0 Merge pull request #1730 from actions/bdehamer/attest-readme 
Update @actions/attest README
 2024-05-01 11:48:55 -07:00
Brian DeHamer abb586d71e add doc link in @actions/attest readme 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-01 11:30:45 -07:00
Brian DeHamerandGitHub 81a73aba8b Merge pull request #1725 from actions/bdehamer/attest-retry-persist 
(@actions/attest) retry request on failure to save attestation
 2024-04-24 19:59:43 -07:00
Brian DeHamer 0e8fe8af62 retry request on failure to save attestation 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-04-24 15:07:39 -07:00
Brian DeHamerandGitHub d82fd09f99 Merge pull request #1714 from actions/bdehamer/attest-no-make-fetch-happen 
(@actions/attest) remove dep on make-fetch-happen
 2024-04-23 10:39:57 -07:00
Brian DeHamer 2961d73391 remove dep on make-fetch-happen 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-04-23 09:39:17 -07:00
Brian DeHamerandGitHub 9ddf153e00 Merge pull request #1701 from actions/bdehamer/attest-v03-bundle 
(@actions/attest) generate attestations using v0.3 bundle format
 2024-04-03 13:51:26 -07:00
Brian DeHamer f8d95a85df generate v0.3 bundles in attest package 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-04-03 12:12:26 -07:00
Brian DeHamerandGitHub 59e9d284e9 Merge pull request #1693 from actions/bdehamer/oidc-provenance 
(@actions/attest) build provenance statement from OIDC claims
 2024-03-28 13:44:22 -07:00
Brian DeHamer 4ce4c767e2 npm audit fix 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-03-22 12:44:24 -07:00
Brian DeHamer a0e6af1e53 build provenance stmt from OIDC claims 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-03-22 12:34:42 -07:00
Brian DeHamerandGitHub 29bf378d97 Merge pull request #1675 from actions/provenance-permissions 
fix permissions for release workflow
 2024-02-26 11:40:12 -08:00
Brian DeHamer 68b042febd fix permissions for release workflow 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-02-26 11:32:45 -08:00
Brian DeHamerandGitHub c366a07d62 Merge pull request #1672 from actions/attest-v1.0.0 
bump @actions/attest to 1.0.0
 2024-02-26 11:13:48 -08:00
Brian DeHamerandGitHub 9e5eb95517 Merge pull request #1674 from actions/npm-provenance 
publish npm packages with build provenance
 2024-02-26 11:13:32 -08:00
Brian DeHamer 7f96bd610d publish npm packages with build provenance 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-02-26 10:42:33 -08:00
Brian DeHamer 37a562b194 bump @actions/attest to 1.0.0 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-02-26 10:21:47 -08:00
Brian DeHamerandGitHub ad1f156c7c Merge pull request #1667 from actions/bdehamer/attest 
add new @actions/attest package
 2024-02-26 10:15:14 -08:00
Brian DeHamer 6079dea4c4 add new @actions/attest package 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-02-26 08:52:20 -08:00