Commit Graph

289 Commits

Author SHA1 Message Date
dependabot[bot]
997d485124 Bump ossf/scorecard-action from 2.4.1 to 2.4.2
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](f49aabe0b5...05b42c6244)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-02 13:42:58 -05:00
saso badovinac
273156472c Update codeql.yml 2025-06-02 11:22:38 -05:00
dependabot[bot]
0a3c940d08 Bump github/issue-metrics from 3.20.0 to 3.20.1
Bumps [github/issue-metrics](https://github.com/github/issue-metrics) from 3.20.0 to 3.20.1.
- [Release notes](https://github.com/github/issue-metrics/releases)
- [Commits](6a0f49b4e1...119b5237f4)

---
updated-dependencies:
- dependency-name: github/issue-metrics
  dependency-version: 3.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-28 21:01:12 +02:00
saso badovinac
a969f31573 Update codeql.yml
disable cpp scan on pull requests and enable actions scan
2025-05-23 15:10:01 +02:00
saso badovinac
b43b3e9096 Update codeql.yml
Testing cpp scan on pull requests (will probably run for too long)
2025-05-22 22:40:21 +02:00
saso badovinac
2f463ff005 Update codeql.yml
Split the cpp scan to a new job and activate running it on weekly schedule (runs for about 5 hours)
2025-05-19 18:04:40 +02:00
dependabot[bot]
1ca108f8d5 Bump github/codeql-action from 3.28.16 to 3.28.18
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.16 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3.28.16...ff0a06e83cb2de871e5a09832bc6a81e7276941f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-16 12:15:43 -05:00
saso badovinac
fc4203fbf8 Update codeql.yml 2025-05-16 09:52:44 -05:00
saso badovinac
2b29d6b51c Update codeql.yml 2025-05-16 09:52:44 -05:00
saso badovinac
25e9ca6571 Update codeql.yml 2025-05-16 09:52:44 -05:00
saso badovinac
0e01ab6f6d Update codeql.yml
Change the cpp dependencies install to ./package/ubuntu/install-apt-packages.sh (cpp scan is still disabled) and activate the extended security queries
2025-05-16 09:52:44 -05:00
saso badovinac
a81fcc9d5e CI: Create codeql.yml (#21300)
Adding CodeQL, starting with a minimal configuration, default queries and python only
2025-05-15 08:14:54 -05:00
dependabot[bot]
9fb2fbf0f7 Bump actions/dependency-review-action
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 8805179dc9a63c54224914839d370dd93bd37b2e to da24556b548a50705dd671f47852072ea4c105d9.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](8805179dc9...da24556b54)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: da24556b548a50705dd671f47852072ea4c105d9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-14 08:05:56 -05:00
Jacob Oursland
2b099f8416 CI: fix weekly builds. 2025-05-13 08:38:29 +02:00
Jacob Oursland
305ef46e2c CI: checkout source prior to installing pixi on weekly builds. 2025-05-12 23:12:47 -05:00
Jackson Oursland
23fb262150 Update sub_weeklyBuild.yml
Fix `sub_weeklyBuild.yml`
2025-05-12 22:20:43 -05:00
saso badovinac
72a173e36d Update sub_weeklyBuild.yml (#21249)
Run harden-runner first
2025-05-12 11:03:39 -05:00
Jacob Oursland
2380f9153d CI: use the exact same source for weekly builds. 2025-05-12 11:21:12 +02:00
dependabot[bot]
ce368cb7a0 Bump actions/dependency-review-action
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 67d4f4bd7a9b17a0db54d2a7519187c65e339de8 to 8805179dc9a63c54224914839d370dd93bd37b2e.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](67d4f4bd7a...8805179dc9)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 8805179dc9a63c54224914839d370dd93bd37b2e
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-09 14:27:21 -05:00
dependabot[bot]
187d615c37 Bump github/issue-metrics from 3.19.0 to 3.20.0
Bumps [github/issue-metrics](https://github.com/github/issue-metrics) from 3.19.0 to 3.20.0.
- [Release notes](https://github.com/github/issue-metrics/releases)
- [Commits](0bac475850...6a0f49b4e1)

---
updated-dependencies:
- dependency-name: github/issue-metrics
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-09 14:26:12 -05:00
saso badovinac
f90f102efe Update sub_weeklyBuild.yml
Pin Actions to a full length commit SHA
2025-05-09 14:25:57 -05:00
saso badovinac
1ca01d80bd Update sub_lint.yml
Pin Actions to a full length commit SHA
2025-05-09 14:25:42 -05:00
dependabot[bot]
412cea78f9 Bump github/issue-metrics from 3.18.5 to 3.19.0
Bumps [github/issue-metrics](https://github.com/github/issue-metrics) from 3.18.5 to 3.19.0.
- [Release notes](https://github.com/github/issue-metrics/releases)
- [Commits](bf0268ff2e...0bac475850)

---
updated-dependencies:
- dependency-name: github/issue-metrics
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-08 07:38:10 -05:00
Max Wilfinger
caf7530865 Update weekly-build-notes.md 2025-05-06 20:44:41 +02:00
dependabot[bot]
7b90b12f0c Bump github/issue-metrics from 3.18.4 to 3.18.5
Bumps [github/issue-metrics](https://github.com/github/issue-metrics) from 3.18.4 to 3.18.5.
- [Release notes](https://github.com/github/issue-metrics/releases)
- [Commits](ed6e4b2b46...bf0268ff2e)

---
updated-dependencies:
- dependency-name: github/issue-metrics
  dependency-version: 3.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-06 11:48:54 -05:00
Jacob Oursland
a1c5950d9a CI: add missing token to fix weekly build. 2025-05-05 23:43:03 +02:00
Jackson Oursland
2070dc9633 CI: add missing command line args to codespell.py. (#21127)
* CI: add missing command line args to codespell.py.

* CI: alter files parameters to codespell.py.

* CI: update verbose flag in codespell to be boolean.
2025-05-04 16:56:42 -05:00
dependabot[bot]
d427162d97 Bump github/codeql-action from 3.28.16 to 3.28.17
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.16 to 3.28.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](28deaeda66...60168efe1c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-02 17:58:22 -05:00
Jacob Oursland
bcea78a451 CI: unify the location of GitHub release creation. 2025-05-02 20:28:24 +02:00
Jacob Oursland
a881bddbe6 CI: Add weekly build notes. 2025-04-30 13:30:56 -05:00
Jacob Oursland
14d276b120 CI: rename Weekly Build weekly-<date> to Development Build weekly-<date>. 2025-04-29 22:56:09 -05:00
Jackson Oursland
fe9ac47c6b CI: Check file name case sensitivity in lint workflow. (#20903) 2025-04-28 11:01:21 -05:00
dependabot[bot]
ca5bfb17c0 Bump actions/download-artifact from 4.2.1 to 4.3.0
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.2.1 to 4.3.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](95815c38cf...d3f86a106a)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-28 10:50:43 -05:00
Kacper Donat
7f69ca2803 github: Remove description header
If PR consists of one commit with long description, github does put it
as the first lines of PR so above our header, it can result in inconsistencies.
The header is also needlessly duplicated in every PR preview.
2025-04-24 21:07:08 -05:00
sliptonic
aec251427e move PR template to ./github 2025-04-24 18:30:44 +02:00
dependabot[bot]
fe1eb66803 Bump github/codeql-action from 3.28.15 to 3.28.16
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.15 to 3.28.16.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](45775bd823...28deaeda66)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-24 09:51:51 -05:00
Chris Hennes
fa8bab60ca CI: Update to LibPack 3.1.1.3 2025-04-24 08:36:05 +02:00
dependabot[bot]
286b4d6cc0 Bump step-security/harden-runner from 2.11.1 to 2.12.0
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.11.1 to 2.12.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](c6295a65d1...0634a2670c)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-23 16:49:34 -05:00
Chris Hennes
42cd4d76f2 Start: Refactor f3d to use worker threads 2025-04-21 21:21:52 +02:00
dependabot[bot]
682f9bce5b Bump github/issue-metrics from 3.1.1 to 3.18.4
Bumps [github/issue-metrics](https://github.com/github/issue-metrics) from 3.1.1 to 3.18.4.
- [Release notes](https://github.com/github/issue-metrics/releases)
- [Commits](4f29f34d9d...ed6e4b2b46)

---
updated-dependencies:
- dependency-name: github/issue-metrics
  dependency-version: 3.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-21 11:04:34 -05:00
dependabot[bot]
0924225aa4 Bump peter-evans/create-issue-from-file from 4.0.1 to 5.0.1
Bumps [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file) from 4.0.1 to 5.0.1.
- [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)
- [Commits](433e51abf7...e8ef132d6d)

---
updated-dependencies:
- dependency-name: peter-evans/create-issue-from-file
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-21 11:04:08 -05:00
mosfet80
f5ef245eb2 Update sub_lint.yml
removing non-existent folders
2025-04-21 10:12:17 -05:00
Chris Hennes
2883b53e2f CI: Update to LibPack 3.1.1.2 2025-04-20 12:51:55 -05:00
dependabot[bot]
8af66be018 Bump ossf/scorecard-action from 2.4.0 to 2.4.1
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](62b2cac7ed...f49aabe0b5)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-18 17:13:37 -05:00
Jackson Oursland
5fd17d8dd1 Merge branch 'main' into weekly-build-dependencies 2025-04-17 23:12:20 -07:00
dependabot[bot]
336df3dc1c Bump prefix-dev/setup-pixi from 0.8.3 to 0.8.8
Bumps [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) from 0.8.3 to 0.8.8.
- [Release notes](https://github.com/prefix-dev/setup-pixi/releases)
- [Commits](https://github.com/prefix-dev/setup-pixi/compare/v0.8.3...19eac09b398e3d0c747adc7921926a6d802df4da)

---
updated-dependencies:
- dependency-name: prefix-dev/setup-pixi
  dependency-version: 0.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-17 22:32:49 +02:00
Jacob Oursland
6da501282c CI: reduce disk usage on Ubuntu weekly build. 2025-04-17 11:22:01 -07:00
StepSecurity Bot
f65896d403 [StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2025-04-17 11:58:01 +02:00
Max Wilfinger
5384fc5e76 Adding pull request GitHub template 2025-04-16 16:56:15 -05:00
Chris Hennes
4c09e6c3d9 CI: Update to LibPack 3.1.1 2025-04-15 22:39:14 -05:00