Commit Graph

30 Commits

Author SHA1 Message Date
dependabot[bot] af73c870cb
Build(deps): Bump the github-actions group with 2 updates (#41744)
Bumps the github-actions group with 2 updates: [calibreapp/image-actions](https://github.com/calibreapp/image-actions) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `calibreapp/image-actions` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/calibreapp/image-actions/releases)
- [Commits](f72c7c4a23...f32575787d)

Updates `github/codeql-action` from 3.30.2 to 3.30.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](d3678e237b...192325c861)

---
updated-dependencies:
- dependency-name: calibreapp/image-actions
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-17 18:28:26 +02:00
dependabot[bot] 6f2f7dd37f
Build(deps): Bump the github-actions group with 2 updates (#41730)
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/setup-node` from 4.4.0 to 5.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](49933ea528...a0853c2454)

Updates `github/codeql-action` from 3.30.0 to 3.30.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2d92b76c45...f1f6e5f6af)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-09 20:35:19 +02:00
dependabot[bot] 2eff466b63
Build(deps): Bump the github-actions group with 2 updates (#41721)
Bumps the github-actions group with 2 updates: [calibreapp/image-actions](https://github.com/calibreapp/image-actions) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `calibreapp/image-actions` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/calibreapp/image-actions/releases)
- [Commits](51921e25c9...f72c7c4a23)

Updates `github/codeql-action` from 3.29.11 to 3.30.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3c3833e0f8...2d92b76c45)

---
updated-dependencies:
- dependency-name: calibreapp/image-actions
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-03 14:34:53 +02:00
dependabot[bot] 2b44684f5d
Build(deps): Bump github/codeql-action from 3.29.10 to 3.29.11 (#41678)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.10 to 3.29.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](96f518a34f...3c3833e0f8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-27 22:12:21 +03:00
dependabot[bot] 26c86ba875
Build(deps): Bump github/codeql-action from 3.29.8 to 3.29.10 (#41664)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.8 to 3.29.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](76621b61de...96f518a34f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Julien Déramond <juderamond@gmail.com>
2025-08-20 10:06:24 +02:00
dependabot[bot] ae069ffb35
Build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 (#41655)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...08c6903cd8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-15 08:25:43 +02:00
dependabot[bot] 934beb1b66
Build(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 (#41657)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.7 to 3.29.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](51f77329af...76621b61de)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-15 08:22:25 +02:00
dependabot[bot] 89fbf03410
Build(deps): Bump github/codeql-action from 3.29.4 to 3.29.5 (#41640)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.4 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4e828ff8d4...51f77329af)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-05 21:06:21 +02:00
dependabot[bot] e8fdc4f614
Build(deps): Bump github/codeql-action from 3.29.3 to 3.29.4 (#41624)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.3 to 3.29.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](d6bbdef45e...4e828ff8d4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-29 18:36:04 +02:00
dependabot[bot] 45439923aa
Build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 (#41611)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.2 to 3.29.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](181d5eefc2...d6bbdef45e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-28 20:00:18 +02:00
Julien Déramond 117a248faa
Workflows: Use SHA-1 precise references for third-party actions (#41595)
BrowserStack / browserstack (push) Has been cancelled Details
Bundlewatch / bundlewatch (push) Has been cancelled Details
cspell / cspell (push) Has been cancelled Details
CSS / css (push) Has been cancelled Details
Docs / docs (push) Has been cancelled Details
JS Tests / JS Tests (push) Has been cancelled Details
Lint / lint (push) Has been cancelled Details
CSS (node-sass) / css (push) Has been cancelled Details
Release notes / update_release_draft (push) Has been cancelled Details
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled Details
CodeQL / Analyze (push) Has been cancelled Details
2025-07-16 09:11:53 -07:00
dependabot[bot] 056a0e0d75
Build(deps): Bump github/codeql-action from 2 to 3 (#39502)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-17 10:41:14 +02:00
dependabot[bot] 52edf180c5
Build(deps): Bump actions/checkout from 3 to 4 (#39148)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 12:47:26 +03:00
XhmikosR 898cfc740d
Update codeql.yml (#38225) 2023-03-14 09:10:31 +02:00
XhmikosR 9aff4cdc90
CodeQL: ignore dist folder (#37486) 2022-11-14 18:40:09 +02:00
XhmikosR 8387827c13
Update CodeQL Action (#37481) 2022-11-12 13:09:35 +02:00
XhmikosR 11f5d28db6
CI: remove git credentials after checkout (#37459) 2022-11-09 09:21:55 +02:00
dependabot[bot] 314a9dd949
Bump github/codeql-action from 1 to 2 (#36230)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-10 09:33:45 +03:00
dependabot[bot] c766904aa2
Bump actions/checkout from 2 to 3 (#35933)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: XhmikosR <xhmikosr@gmail.com>
2022-03-02 16:51:46 +02:00
XhmikosR 6eef480e1e
CI: add `workflow_dispatch` (#35454) 2021-12-02 23:02:11 +02:00
XhmikosR 8b0b34e92e
Update CodeQL workflow (#34961) 2021-09-14 09:07:59 +03:00
XhmikosR 205e2cae70
CodeQL: skip dependabot PRs too (#33130) 2021-03-02 16:09:49 +02:00
XhmikosR c3e8a0ef2a
Update CodeQL Action (#32452) 2020-12-15 09:14:03 +02:00
XhmikosR d61f506a5f
Update codeql.yml (#32125)
Specify the branches and clean up the comments
2020-11-24 08:35:33 +02:00
XhmikosR e993ca76e0
CI: Skip dependabot PR branches. (#32006)
Also, reword Node.js setup step
2020-10-29 19:26:15 +02:00
XhmikosR 646a706764
Update CodeQL action (#31930)
Should run on PRs too.
2020-10-26 18:56:16 +02:00
XhmikosR a22e2900f9
Update codeql.yml (#30777)
Remove moot fail-fast option
2020-05-11 21:04:27 +03:00
XhmikosR 9e8d6ba3f8
Update codeql.yml (#30719)
Remove `pull_request` event since it's not supported.
2020-05-04 19:24:26 +03:00
XhmikosR ad75ee191f
Update codeql.yml (#30679)
* run the action on PRs too
* specify `javascript` language
* remove comments
* reindent
2020-04-29 16:57:10 +03:00
XhmikosR 6d7cb22728
Move codeql.yml one dir up (#30677) 2020-04-29 15:01:48 +03:00