| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Merge pull request #7711 from DependencyTrack/dependabot/github_actions/actions/upload-artifact-7.0.2 Bump actions/upload-artifact from 7.0.1 to 7.0.2 | 1 天前 | |
Address zizmor findings Signed-off-by: nscuro <nscuro@protonmail.com> | 1 个月前 | |
Bump the codeql group with 2 updates Bumps the codeql group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com> | 1 天前 | |
Update repository docs * Removes `copilot-instructions.md` as Copilot is no longer used for code reviews. * Removes `PROJECT_STRUCTURE.md` as it provides little value and already drifted from reality. * Updates commit and PR requirements in `CONTRIBUTING.md`, as well as some outdated instructions related to logs and snapshot images. * Splits database migration instructions from `DEVELOPING.md`. * Documents interruptibility and nullability constraints in `DEVELOPING.md`. * Updates linting, commit message, and PR instructions in `AGENTS.md`. Trying to find a balance where information gets seen by humans and agents alike, without duplicating information too much. Work in progress, I guess. Signed-off-by: nscuro <nscuro@protonmail.com> | 1 个月前 | |
Bump oasdiff/oasdiff-action/breaking from 0.1.17 to 0.1.18 Bumps [oasdiff/oasdiff-action/breaking](https://github.com/oasdiff/oasdiff-action) from 0.1.17 to 0.1.18. - [Release notes](https://github.com/oasdiff/oasdiff-action/releases) - [Commits](https://github.com/oasdiff/oasdiff-action/compare/5e81b5c380accc6b523f9d32a637ca630e33620b...b9325c9e0a27ab65b0da3b766522cedec6be81dc) --- updated-dependencies: - dependency-name: oasdiff/oasdiff-action/breaking dependency-version: 0.1.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> | 12 天前 | |
Update GHA job names to be more practical for status check enforcement GitHub branch rulesets assert status checks based on the job names, not on the workflow names. Unifies the names and ensure there are no conflicts to be able to configure the ruleset correctly. Signed-off-by: nscuro <nscuro@protonmail.com> | 4 个月前 | |
Bump actions/download-artifact from 8.0.1 to 8.0.2 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> | 1 天前 | |
Improve effectiveness of caching in CI * Only saves the Maven repository cache in the test workflow, as it resolves the most complete set of dependencies. * Previously, lint, build, *and* test would all save to the same cache key. * Because lint requires the fewest dependencies and completes first, it populated a small cache, and build and test had to resolve most of their dependencies themselves. * Only saves repository and build caches for push events, to avoid PRs from saving cache data that can't ever be reused. By saving to the cache even for PRs we maxed out our cache storage quota. * Skips cache restore when building tags (i.e. releases) to prevent cache poisoning for deliverables. * Removes `glob` setting from build cache config to ensure module changes are detected correctly, i.e. even when changing resource files. * Skips build cache saving in `dist` profile, which is used in CI. The `apiserver` module can't ever get cache hits in CI because it's affected by all other modules. Saving its cache merely bloats cache sizes. Signed-off-by: nscuro <nscuro@protonmail.com> | 24 天前 | |
Improve effectiveness of caching in CI * Only saves the Maven repository cache in the test workflow, as it resolves the most complete set of dependencies. * Previously, lint, build, *and* test would all save to the same cache key. * Because lint requires the fewest dependencies and completes first, it populated a small cache, and build and test had to resolve most of their dependencies themselves. * Only saves repository and build caches for push events, to avoid PRs from saving cache data that can't ever be reused. By saving to the cache even for PRs we maxed out our cache storage quota. * Skips cache restore when building tags (i.e. releases) to prevent cache poisoning for deliverables. * Removes `glob` setting from build cache config to ensure module changes are detected correctly, i.e. even when changing resource files. * Skips build cache saving in `dist` profile, which is used in CI. The `apiserver` module can't ever get cache hits in CI because it's affected by all other modules. Saving its cache merely bloats cache sizes. Signed-off-by: nscuro <nscuro@protonmail.com> | 24 天前 | |
Bump actions/download-artifact from 8.0.1 to 8.0.2 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> | 1 天前 | |
Bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> | 1 天前 | |
Trigger workflows in docs repo instead of hyades We're moving the documentation to a dedicated repository. As part of this, workflows to update generated documentation must be triggered in the new repo. Also remove dependency-review and lock workflows since they are not really needed. Signed-off-by: nscuro <nscuro@protonmail.com> | 5 个月前 | |
chore(deps): Bump docker/login-action from 4.5.2 to 4.6.0 Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/371161bbe7024a29a25c5e19bfcbc0804fe9ad2c...dbcb813823bdd20940b903addbd779551569679f) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> | 2 个月前 | |
Address zizmor findings Signed-off-by: nscuro <nscuro@protonmail.com> | 1 个月前 | |
Trigger workflows in docs repo instead of hyades We're moving the documentation to a dedicated repository. As part of this, workflows to update generated documentation must be triggered in the new repo. Also remove dependency-review and lock workflows since they are not really needed. Signed-off-by: nscuro <nscuro@protonmail.com> | 5 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 1 天前 | ||
| 1 个月前 | ||
| 1 天前 | ||
| 1 个月前 | ||
| 12 天前 | ||
| 4 个月前 | ||
| 1 天前 | ||
| 24 天前 | ||
| 24 天前 | ||
| 1 天前 | ||
| 1 天前 | ||
| 5 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 5 个月前 |