kotovalexarian-likes-github/middleman--middleman
1
0
Fork 0
mirror of https://github.com/middleman/middleman.git synced 2022-11-09 12:20:27 -05:00
Code Releases Activity
3537 commits 22 branches 292 tags 26 MiB
Commit graph

14 commits

Author SHA1 Message Date
neilnaveen
e7d4b3eb19
Set permissions for GitHub actions (#2546) 
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>

Co-authored-by: Thomas Reynolds <me@tdreyno.com>
 2022-07-16 21:17:38 +00:00
dependabot[bot]
5d95105ca3
Bump actions/checkout from 2 to 3 (#2545) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-04-04 23:16:29 -07:00
Thomas Reynolds
989ad41d62 bundle update and ruby 3.1+ 2022-01-30 17:59:48 +00:00
Alexey Vasiliev
f9f92dd52b
External pipeline manifest helpers (#2528) 
* Update middleman-core gemspec deps (allow activesupport 7 usage)

* update lock file

* fix yaml loading

* fix dump for yaml

* update bundler for ruby 3.1

* Array, Hash allowed in safe_load + use CLOCK_MONOTONIC

* Update test deps

* back contracts 0.16.0

* update mini_racer

* fix corrupted cache

* lock contracts gem (patch version break middleman)

* add x86_64-linux platform to lock

* add x86_64-linux and x86_64-darwin-20 platforms to lock

* revert fix corrupted cache

* disable check 3.1 - nokogiri issue

* Support ruby 3.0.0 (commented some contracts)

* Fix rubocop

* no success for 3.1 - mini_racer build error on CI

* be more specific about padrino-helpers

* trying to back 3.1

* try to disable platform fetch

* disable js runtime

* trying to fix https://github.com/simplecov-ruby/simplecov/issues/1003

* `Trying to back min_racer

* No success with min_racer

* remove comments, move in correct place openssl

* Support manifest json for external pipeline

* Support manifest json helpers for external pipeline

* Add tests for external pipeline helpers

* Add tests for external pipeline helpers, more cases

* Add tests for external pipeline helpers, more cases
 2022-01-30 09:44:54 -08:00
Patrik Ragnarsson
8da1947b0d
CI: Workaround YAML gotcha in Actions (#2431) 
To avoid unexpectedly stop testing Ruby 3.0 when Ruby 3.1 is released.

See https://github.com/actions/runner/issues/849

At https://github.com/middleman/middleman/runs/1631689419?check_suite_focus=true#step:3:3 we can see that the setup-ruby action ran with just 3 as the input:

```
Run ruby/setup-ruby@v1
  with:
    ruby-version: 3
```

If we quote the version it works as expected, example at https://github.com/ruby/setup-ruby/runs/1617122299?check_suite_focus=true#step:3:3

```
Run ./
  with:
    ruby-version: 3.0
```
 2021-01-02 19:28:08 -08:00
Patrik Ragnarsson
e77faa0af0
CI: No need to run bundle install (#2432) 
https://github.com/ruby/setup-ruby runs `bundle install`

We can see that the step takes 0 seconds at https://github.com/middleman/middleman/runs/1631653509?check_suite_focus=true
 2021-01-01 18:32:46 -08:00
Thomas Reynolds
8f5a34aeab Slimmer test set 2020-12-29 18:02:03 +00:00
Thomas Reynolds
02699d5ac7 Better ci naming 2020-12-29 17:58:08 +00:00
Thomas Reynolds
f2fd80cd61 Also test on last 2 macos and last 2 ubuntu 2020-12-29 17:45:48 +00:00
Thomas Reynolds
ac1a2d8426 Try to not require ruby head 2020-12-29 17:38:28 +00:00
Thomas Reynolds
014f2f8831
Update ci.yml 2020-12-29 09:23:11 -08:00
Thomas Reynolds
89511ef1c7
Update ci.yml 2020-12-28 21:57:01 -08:00
Thomas Reynolds
38d042e15c
Update ci.yml 2020-12-28 21:49:55 -08:00
Paul McMahon
b1e468d96e
Run tests using GitHub workflows (#2425) 
travis-ci.org now displays "Please be aware travis-ci.org will be
shutting down in several weeks, with all accounts migrating to
travis-ci.com. Please stay tuned here for more information."

As GitHub actions is free for public repositories, whereas it's unclear
to what travis-ci.com will be, and the switching cost is low, it seems
going with workflows is the prudent thing to do.
 2020-12-28 21:48:49 -08:00