Patrick Linnane
f1aa78993c
workflows/pkg-installer: drop Ventura runner
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-09-12 10:44:00 -07:00
Patrick Linnane
e63c885033
Support Tahoe, drop Mojave and older
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-09-12 10:40:19 -07:00
dependabot[bot]
cf4e534d51
build(deps): bump actions/attest-build-provenance in the all group
...
Bumps the all group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ).
Updates `actions/attest-build-provenance` from 2.4.0 to 3.0.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](e8998f9491...977bb373ed
)
build(deps): bump the all group across 1 directory with 7 updates
Bumps the all group with 4 updates in the /Library/Homebrew directory: [rubocop](https://github.com/rubocop/rubocop ), [simplecov-cobertura](https://github.com/jessebs/simplecov-cobertura ), [sorbet-static-and-runtime](https://github.com/sorbet/sorbet ) and [rexml](https://github.com/ruby/rexml ).
Updates `rubocop` from 1.80.0 to 1.80.1
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.80.0...v1.80.1 )
Updates `simplecov-cobertura` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/jessebs/simplecov-cobertura/releases )
- [Commits](https://github.com/jessebs/simplecov-cobertura/compare/v3.0.0...v3.1.0 )
Updates `sorbet-static-and-runtime` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `rexml` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/ruby/rexml/releases )
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md )
- [Commits](https://github.com/ruby/rexml/compare/v3.4.1...v3.4.2 )
Updates `sorbet-runtime` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-static` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
build(deps): bump typing-extensions
Bumps the all group with 1 update in the /Library/Homebrew/formula-analytics directory: [typing-extensions](https://github.com/python/typing_extensions ).
Updates `typing-extensions` from 4.14.1 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases )
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md )
- [Commits](https://github.com/python/typing_extensions/compare/4.14.1...4.15.0 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: rubocop
dependency-version: 1.80.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: simplecov-cobertura
dependency-version: 3.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet-static-and-runtime
dependency-version: 0.6.12466
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: rexml
dependency-version: 3.4.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-runtime
dependency-version: 0.6.12466
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet
dependency-version: 0.6.12466
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet-static
dependency-version: 0.6.12466
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: typing-extensions
dependency-version: 4.15.0
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-29 08:18:14 +00:00
dependabot[bot]
316b848d18
build(deps): bump the all group across 1 directory with 11 updates
...
Bumps the all group with 6 updates in the /Library/Homebrew directory:
| Package | From | To |
| --- | --- | --- |
| [rubocop](https://github.com/rubocop/rubocop ) | `1.78.0` | `1.79.2` |
| [parallel_tests](https://github.com/grosser/parallel_tests ) | `5.3.1` | `5.4.0` |
| [simplecov-cobertura](https://github.com/jessebs/simplecov-cobertura ) | `2.1.0` | `3.0.0` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet ) | `0.5.12357` | `0.5.12389` |
| [spoom](https://github.com/Shopify/spoom ) | `1.7.5` | `1.7.6` |
| [ruby-lsp](https://github.com/Shopify/ruby-lsp ) | `0.25.0` | `0.26.1` |
Updates `rubocop` from 1.78.0 to 1.79.2
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.78.0...v1.79.2 )
Updates `parallel_tests` from 5.3.1 to 5.4.0
- [Changelog](https://github.com/grosser/parallel_tests/blob/master/CHANGELOG.md )
- [Commits](https://github.com/grosser/parallel_tests/compare/v5.3.1...v5.4.0 )
Updates `simplecov-cobertura` from 2.1.0 to 3.0.0
- [Release notes](https://github.com/jessebs/simplecov-cobertura/releases )
- [Commits](https://github.com/jessebs/simplecov-cobertura/compare/v2.1.0...v3.0.0 )
Updates `sorbet-static-and-runtime` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `spoom` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/Shopify/spoom/releases )
- [Commits](https://github.com/Shopify/spoom/compare/v1.7.5...v1.7.6 )
Updates `ruby-lsp` from 0.25.0 to 0.26.1
- [Release notes](https://github.com/Shopify/ruby-lsp/releases )
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.25.0...v0.26.1 )
Updates `sorbet-runtime` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `json` from 2.13.0 to 2.13.2
- [Release notes](https://github.com/ruby/json/releases )
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md )
- [Commits](https://github.com/ruby/json/compare/v2.13.0...v2.13.2 )
Updates `regexp_parser` from 2.10.0 to 2.11.2
- [Changelog](https://github.com/ammar/regexp_parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ammar/regexp_parser/compare/v2.10.0...v2.11.2 )
Updates `sorbet` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-static` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
build(deps): bump the all group with 6 updates
Bumps the all group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.2.2` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `4.3.0` | `5.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.29.4` | `3.29.9` |
| [actions/cache](https://github.com/actions/cache ) | `4.2.3` | `4.2.4` |
| [docker/login-action](https://github.com/docker/login-action ) | `3.4.0` | `3.5.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) | `2.0.6` | `2.1.1` |
Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8
)
Updates `actions/download-artifact` from 4.3.0 to 5.0.0
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4.3.0...634f93cb2916e3fdff6788551b99b062d0335ce0 )
Updates `github/codeql-action` from 3.29.4 to 3.29.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.29.4...df559355d593797519d70b90fc8edd5db049e7a2 )
Updates `actions/cache` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](5a3ec84eff...0400d5f644
)
Updates `docker/login-action` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](74a5d14239...184bdaa072
)
Updates `actions/create-github-app-token` from 2.0.6 to 2.1.1
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](df432ceedc...a8d6161485
)
---
updated-dependencies:
- dependency-name: rubocop
dependency-version: 1.79.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: parallel_tests
dependency-version: 5.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: simplecov-cobertura
dependency-version: 3.0.0
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: all
- dependency-name: sorbet-static-and-runtime
dependency-version: 0.5.12389
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: spoom
dependency-version: 1.7.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: ruby-lsp
dependency-version: 0.26.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet-runtime
dependency-version: 0.5.12389
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: json
dependency-version: 2.13.2
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: regexp_parser
dependency-version: 2.11.2
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet
dependency-version: 0.5.12389
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-static
dependency-version: 0.5.12389
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: actions/download-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: github/codeql-action
dependency-version: 3.29.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: actions/cache
dependency-version: 4.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: docker/login-action
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: actions/create-github-app-token
dependency-version: 2.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-13 19:15:31 +00:00
Paulchen
b7b369270e
Replace github.token
by secrets.GITHUB_TOKEN
2025-07-10 17:01:29 +09:00
Mike McQuaid
d2269c5b30
Open issues for failed scheduled workflows
...
I noticed recently the SBOM workflow was failing and had been for a long
time and we'd not noticed. I've added issues for the other workflows
that run on a schedule and fixed the updating state.
I've also renamed the SBOM workflow to `sbom.yml` to match what it does.
Co-authored-by: Rylan Polster <rslpolster@gmail.com>
2025-06-13 18:43:52 +01:00
Mike McQuaid
be6cee3006
Use Homebrew/actions/*@main in Actions workflows
...
We've migrated Homebrew/actions to use the `main` branch now so let's
update these references.
2025-06-13 14:22:09 +01:00
dependabot[bot]
c8213558ef
build(deps): bump the github-actions group with 3 updates
...
Bumps the github-actions group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action ), [ruby/setup-ruby](https://github.com/ruby/setup-ruby ) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ).
Updates `github/codeql-action` from 3.28.19 to 3.29.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](fca7ace96b...ce28f5bb42
)
Updates `ruby/setup-ruby` from 1.244.0 to 1.245.0
- [Release notes](https://github.com/ruby/setup-ruby/releases )
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb )
- [Commits](13e7a03dc3...a4effe49ee
)
Updates `actions/attest-build-provenance` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](db473fddc0...e8998f9491
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: ruby/setup-ruby
dependency-version: 1.245.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
dependency-version: 2.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-13 08:22:08 +00:00
Mike McQuaid
2131d70265
workflows/pkg-installer: fix release upload.
...
- Get the release tag from the installer path.
- Remove unnecessary `gh` installation.
- Remove failing test that I can't fix.
2025-05-27 11:47:00 +01:00
Patrick Linnane
1049f56135
Merge pull request #19850 from Homebrew/dependabot/github_actions/artifacts-beb19bfee9
...
build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 in the artifacts group
2025-04-28 22:21:19 +00:00
dependabot[bot]
64e3e990c4
build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.2.3 to 2.3.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](c074443f1a...db473fddc0
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 2.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-28 20:18:51 +00:00
dependabot[bot]
0fb9db6a40
build(deps): bump actions/download-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/download-artifact` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](95815c38cf...d3f86a106a
)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-28 20:09:54 +00:00
Patrick Linnane
d2f56e461d
workflows/pkg-installer: set default permissions
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-04-17 19:29:38 -07:00
dependabot[bot]
b35a796469
build(deps): bump the artifacts group with 2 updates
...
Bumps the artifacts group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/upload-artifact` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](4cec3d8aa0...ea165f8d65
)
Updates `actions/download-artifact` from 4.1.9 to 4.2.1
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](cc20338598...95815c38cf
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 19:03:52 +00:00
dependabot[bot]
63b87e2a37
build(deps): bump actions/attest-build-provenance from 2.2.2 to 2.2.3
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](bd77c07785...c074443f1a
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-10 18:29:42 +00:00
dependabot[bot]
927e41c1cc
build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.2
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.2.0 to 2.2.2.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](520d128f16...bd77c07785
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-03 18:35:01 +00:00
dependabot[bot]
c3c6a90b44
build(deps): bump actions/download-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/download-artifact` from 4.1.8 to 4.1.9
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fa0a91b85d...cc20338598
)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-03 18:04:41 +00:00
dependabot[bot]
3bc228ecbf
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](65c4c4a1dd...4cec3d8aa0
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 18:45:05 +00:00
dependabot[bot]
3c1ee7b62f
build(deps): bump actions/attest-build-provenance from 2.1.0 to 2.2.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](7668571508...520d128f16
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 18:14:16 +00:00
dependabot[bot]
45674081c2
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](6f51ac03b9...65c4c4a1dd
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-01-13 18:30:59 +00:00
dependabot[bot]
ce8b62d562
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.4.3 to 4.5.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b4b15b8c7c...6f51ac03b9
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-18 18:47:13 +00:00
Patrick Linnane
56e41319f2
workflows: use full version numbers
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-12-12 21:26:46 -08:00
dependabot[bot]
84f0617309
build(deps): bump actions/attest-build-provenance from 2.0.1 to 2.1.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.0.1 to 2.1.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](c4fbc64884...7668571508
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-10 16:39:21 +00:00
dependabot[bot]
4a1e0324bc
build(deps): bump actions/attest-build-provenance from 2.0.0 to 2.0.1
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](619dbb2e03...c4fbc64884
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-06 18:02:58 +00:00
dependabot[bot]
88b6a8266b
build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.0.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.4.4 to 2.0.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](ef244123eb...619dbb2e03
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-04 16:38:51 +00:00
dependabot[bot]
9864f1b521
build(deps): bump actions/attest-build-provenance from 1.4.3 to 1.4.4
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](1c608d11d6...ef244123eb
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-11-06 14:47:48 +00:00
Carlo Cabrera
fbfbc8df29
workflows/pkg-installer: fix template-injection
warnings
...
Fixes https://github.com/Homebrew/brew/security/code-scanning/34
Fixes https://github.com/Homebrew/brew/security/code-scanning/35
Fixes https://github.com/Homebrew/brew/security/code-scanning/36
Fixes https://github.com/Homebrew/brew/security/code-scanning/37
Fixes https://github.com/Homebrew/brew/security/code-scanning/38
Fixes https://github.com/Homebrew/brew/security/code-scanning/39
2024-10-30 22:25:23 +08:00
dependabot[bot]
9ccd3e1de1
build(deps): bump actions/checkout from 4.2.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](eef61447b9...11bd71901b
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-23 18:19:06 +00:00
dependabot[bot]
0361188c1a
build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.3
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.3.3 to 1.4.3.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](5e9cb68e95...1c608d11d6
)
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 19:19:34 +00:00
Sean Molenaar
78573231af
fix: only scope permissions to build job
2024-10-13 15:49:59 +02:00
Sean Molenaar
8eae9ee730
feat: add attestation to the pkg installer
2024-10-12 12:24:14 +02:00
dependabot[bot]
1c24322ff0
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.4.2 to 4.4.3
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](84480863f2...b4b15b8c7c
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-09 18:40:51 +00:00
dependabot[bot]
f2149eede8
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.4.1 to 4.4.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](604373da63...84480863f2
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-08 19:19:53 +00:00
Ruoyu Zhong
94ac16e1cd
Merge pull request #18523 from Homebrew/dependabot/github_actions/artifacts-6e3919dcd2
...
build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.1 in the artifacts group
2024-10-08 02:58:14 +08:00
dependabot[bot]
b212bb496b
build(deps): bump actions/checkout from 4.2.0 to 4.2.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](d632683dd7...eef61447b9
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-07 18:20:29 +00:00
dependabot[bot]
30fb09d82e
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.4.0 to 4.4.1
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](50769540e7...604373da63
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-07 18:20:26 +00:00
Mike McQuaid
8dc9e117f3
github/workflows: use macos-15 GitHub Actions runners.
...
- Let's use this instead of macOS 14/latest when possible.
- Keep around macOS 13 to ensure we're still testing x86_64.
2024-09-30 09:02:23 +01:00
dependabot[bot]
2ba8f93bbe
build(deps): bump actions/checkout from 4.1.7 to 4.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](692973e3d9...d632683dd7
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-25 18:11:59 +00:00
Carlo Cabrera
b6783204e8
Merge pull request #18369 from Homebrew/strict-workflows
2024-09-24 19:21:50 +08:00
Ruoyu Zhong
2865080a8f
workflows/pkg-installer: create an issue when publish fails
...
This uses the `Homebrew/actions/create-or-update-issue` action added in
Homebrew/actions#588 to create an issue when the publish fails for a
release. It also automatically updates the issue on repeated failures,
and closes the issue when the latest workflow run succeeds.
2024-09-24 11:14:44 +08:00
Carlo Cabrera
40567115a3
workflows: use set -xeuo pipefail
globally
...
This makes it easier to avoid subtle shell script bugs.
2024-09-22 19:56:20 +08:00
Douglas Eichelberger
4e5fe6751d
Remove macos-12 from test matrix
2024-09-13 12:31:48 -07:00
Francois-Xavier Coudert
4ab19e09da
Make Sequoia supported
2024-09-11 09:00:37 +01:00
dependabot[bot]
521953835b
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.3.6 to 4.4.0
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](834a144ee9...50769540e7
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-31 15:16:59 +00:00
Carlo Cabrera
c0b72dd501
Revert "feat: add attestation to installer"
2024-08-20 01:26:27 +08:00
Sean Molenaar
2a5eb025f1
Merge pull request #17827 from Homebrew/SMillerDev-patch-1
...
feat: add attestation to installer
2024-08-19 11:25:42 -04:00
Mike McQuaid
90a90b3076
Merge pull request #17976 from Homebrew/update-pkg-build
2024-08-07 09:07:03 +01:00
Patrick Linnane
f66aa5e0e0
pkg-installer: don't build on Dependabot PR's
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-08-06 12:31:54 -07:00
dependabot[bot]
8dce095be3
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](89ef406dd8...834a144ee9
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-06 18:38:29 +00:00
dependabot[bot]
4ab05da964
build(deps): bump actions/upload-artifact in the artifacts group
...
Bumps the artifacts group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/upload-artifact` from 4.3.4 to 4.3.5
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](0b2256b8c0...89ef406dd8
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifacts
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-08-02 22:42:19 +08:00