This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-eslint.git
The following commit(s) were added to refs/heads/master by this push:
new 205c89e chore(workflow): sync latest changes & action dependencies
(#72)
205c89e is described below
commit 205c89e66b7240c5770606e31ae0d3c5bba2dc05
Author: エリス <[email protected]>
AuthorDate: Thu Jul 23 16:38:56 2026 +0900
chore(workflow): sync latest changes & action dependencies (#72)
* chore(workflow): sync latest changes & action dependencies
* chore: rename .ratignore to .rat-excludes
---
.github/workflows/ci.yml | 25 ++++++++++++++++---------
.github/workflows/draft-release.yml | 20 +++++++++++++-------
.github/workflows/release-audit.yml | 15 +++++++++------
.ratignore => .rat-excludes | 0
4 files changed, 38 insertions(+), 22 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9cbbbfa..57375ea 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,12 +35,16 @@ jobs:
security-events: write
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
- node-version: 24.x
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ with:
+ node-version: 24
- - uses: github/codeql-action/init@v4
+ - uses:
github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
with:
languages: javascript
queries: security-and-quality
@@ -53,7 +57,7 @@ jobs:
env:
CI: true
- - uses: github/codeql-action/analyze@v4
+ - uses:
github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
lint:
name: Lint
@@ -95,8 +99,12 @@ jobs:
options: --test-coverage-exclude="test/**/*.js"
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: ${{ matrix.node.version }}
@@ -106,8 +114,7 @@ jobs:
CI: true
NODE_OPTIONS: ${{ matrix.node.options }}
- # v4.6.0
- - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
+ - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f
# v7.0.0
if: success()
with:
name: ${{ runner.os }} node.js ${{ matrix.node-version }}
diff --git a/.github/workflows/draft-release.yml
b/.github/workflows/draft-release.yml
index 98ecf5a..a7a572e 100644
--- a/.github/workflows/draft-release.yml
+++ b/.github/workflows/draft-release.yml
@@ -31,10 +31,16 @@ jobs:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
+ package-manager-cache: false
+ cache: ''
- name: Setup environment variables
run: |
@@ -68,14 +74,14 @@ jobs:
- name: Verify Target Release Version
run: |
PACKAGE_VERSION=$(jq -r '.version' package.json)
- if [ $PACKAGE_VERSION != "$TARGET_RELEASE_VERSION" ]; then
+ if [ "$PACKAGE_VERSION" != "$TARGET_RELEASE_VERSION" ]; then
echo "Mismatch version detected between tag version
($TARGET_RELEASE_VERSION) and package version ($PACKAGE_VERSION)"
exit 1
fi
if [ -f "plugin.xml" ]; then
- PLUGIN_VERSION=$(yq -p=xml -o=json '.plugin.+@version' plugin.xml)
- if [ $PLUGIN_VERSION != "$TARGET_RELEASE_VERSION" ]; then
+ PLUGIN_VERSION=$(yq -p=xml -o=json '.plugin.+@version' plugin.xml
| jq -r .)
+ if [ "$PLUGIN_VERSION" != "$TARGET_RELEASE_VERSION" ]; then
echo "Mismatch version detected between tag version
($TARGET_RELEASE_VERSION) and plugin version ($PLUGIN_VERSION)"
exit 1
fi
@@ -83,7 +89,7 @@ jobs:
- name: Generate "tgz" npm convenience package
run: |-
- npm install
+ npm ci
NPM_PKG_NAME=$(npm pack --json | jq -r '.[0].filename')
mv ./.asf-release/$NPM_PKG_NAME
./.asf-release/${NPM_PACKAGE_NAME}.tgz
env:
@@ -142,7 +148,7 @@ jobs:
CORDOVA_GPG_SECRET_KEY: ${{ secrets.CORDOVA_GPG_SECRET_KEY }}
- name: Upload to Apache Trusted Release (ATR)
- uses:
apache/tooling-actions/upload-to-atr@b7e972c11790ee16eca101900af1b3c7fd1b106e
+ uses:
apache/tooling-actions/upload-to-atr@f5f4c0e7ddfbde6b1f8288cef36324c6def68051
with:
project: ${{ env.REPO_NAME }}
version: ${{ env.TARGET_RELEASE_VERSION }}
diff --git a/.github/workflows/release-audit.yml
b/.github/workflows/release-audit.yml
index 52798d4..6bceca2 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,13 +34,16 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@v6
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- # Check license headers (v2.0.0)
- - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
+ # Check license headers
+ - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd
# v3.0.0
# Setup environment with node
- - uses: actions/setup-node@v6
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
@@ -48,8 +51,8 @@ jobs:
- name: npm install packages
run: npm ci
- # Check node package licenses (v2.0.1)
- - uses:
erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2
+ # Check node package licenses
+ - uses:
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
with:
license-config: 'licence_checker.yml'
include-asf-category-a: true
diff --git a/.ratignore b/.rat-excludes
similarity index 100%
rename from .ratignore
rename to .rat-excludes
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
