This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-browser.git
The following commit(s) were added to refs/heads/master by this push:
new e94f4d9 chore: update workflows & asf config (#160)
e94f4d9 is described below
commit e94f4d9d6c4a24ee014af85104344ba4ca54f50c
Author: エリス <[email protected]>
AuthorDate: Mon Jun 8 12:15:11 2026 +0900
chore: update workflows & asf config (#160)
* chore: update .asf.yaml
* chore(workflow): update CI & bump action dependencies
* chore(workflow): update release-audit, bump action dependencies, &
cleanup .rat-excludes
---
.asf.yaml | 32 +++++++++++++++++++++++++++-----
.github/workflows/ci.yml | 17 +++++++++--------
.github/workflows/release-audit.yml | 15 +++++++++------
.ratignore => .rat-excludes | 1 -
4 files changed, 45 insertions(+), 20 deletions(-)
diff --git a/.asf.yaml b/.asf.yaml
index d81a520..b438d9d 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -15,12 +15,28 @@
# specific language governing permissions and limitations
# under the License.
-notifications:
- commits: [email protected]
- issues: [email protected]
- pullrequests_status: [email protected]
- pullrequests_comment: [email protected]
github:
+ description: Apache Cordova Browser
+ homepage: https://cordova.apache.org/
+
+ labels:
+ - cordova
+ - cordova-platform
+ - browser
+ - javascript
+ - nodejs
+ - hacktoberfest
+
+ features:
+ wiki: false
+ issues: true
+ projects: true
+
+ enabled_merge_buttons:
+ squash: true
+ merge: false
+ rebase: false
+
rulesets:
- name: "Default Branch Protection"
type: branch
@@ -34,3 +50,9 @@ github:
- root
restrict_deletion: true
restrict_force_push: true
+
+notifications:
+ commits: [email protected]
+ issues: [email protected]
+ pullrequests_status: [email protected]
+ pullrequests_comment: [email protected]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0028461..c32a5ed 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,13 +38,15 @@ jobs:
strategy:
matrix:
node-version: [20.x, 22.x, 24.x]
- os: [ubuntu-latest, windows-latest, macos-15]
+ os: [ubuntu-latest, windows-latest, macos-26]
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- - name: Use Node.js ${{ matrix.node-version }}
- uses: actions/setup-node@v4
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: ${{ matrix.node-version }}
@@ -57,7 +59,7 @@ jobs:
# It contains mixed content from the npm package "cordova-js" and
"./cordova-js-src".
# The report might not be resolvable because of the external package.
# If the report is related to this repository, it would be detected when
scanning "./cordova-js-src".
- - uses: github/codeql-action/init@v3
+ - uses:
github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
with:
languages: javascript
queries: security-and-quality
@@ -69,12 +71,11 @@ jobs:
- name: npm install and test
run: |
- npm i
- npm t
+ npm cit
env:
CI: true
- - uses: github/codeql-action/analyze@v3
+ - uses:
github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
# v4.6.0
- uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
diff --git a/.github/workflows/release-audit.yml
b/.github/workflows/release-audit.yml
index 52798d4..28a6b87 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,13 +34,16 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- # Check license headers (v2.0.0)
- - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
+ # Check license headers
+ - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd
# v3.0.0
# Setup environment with node
- - uses: actions/setup-node@v6
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: 24
@@ -48,8 +51,8 @@ jobs:
- name: npm install packages
run: npm ci
- # Check node package licenses (v2.0.1)
- - uses:
erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2
+ # Check node package licenses
+ - uses:
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
with:
license-config: 'licence_checker.yml'
include-asf-category-a: true
diff --git a/.ratignore b/.rat-excludes
similarity index 99%
rename from .ratignore
rename to .rat-excludes
index 7d21934..dc327fc 100644
--- a/.ratignore
+++ b/.rat-excludes
@@ -18,4 +18,3 @@
.git/
coverage/
node_modules/
-VERSION
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
