Takuya Kato
43ff395294
fix typo ( #5411 )
2022-07-03 05:55:31 +02:00
dependabot[bot]
1e7ace608b
Bump actions/dependency-review-action from 1 to 2 ( #5399 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1 to 2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-21 06:29:08 +02:00
Sam
c76be23e90
Update contributing doc ( #5368 )
...
* Update contributing doc
* Use better command
2022-06-05 09:21:58 -07:00
dependabot[bot]
2d743d7a70
Bump actions/checkout from 2 to 3 ( #5366 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 19:32:18 -07:00
Naveen
85a76cb7d9
chore: Included githubactions in the dependabot config ( #5365 )
...
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-02 19:30:43 -07:00
Naveen
7f47daa6e4
chore(deps): Included dependency review ( #5364 )
...
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-02 19:28:25 -07:00
Naveen
3ed96004ad
chore: Set permissions for GitHub actions ( #5354 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-02 08:24:59 -07:00
Patrick Jones
2781be13ea
added beginner's guide to contributing and made RSS link target blank
2022-03-30 16:00:56 +02:00
Adam Niedzielski
38f4a9336c
Add better contributing guidelines ( #5166 )
...
Closes #5161
2022-02-01 12:51:52 -08:00
Mike Perham
d58a0a16ee
Update build for Ruby 3.1, fixes #5115
...
We need to remove Ruby 2.5 because the new net-smtp gem
is required for the mail gem on Ruby 3.1 but it does
not work on <=2.5.
https://github.com/mikel/mail/pull/1439
Also remove an anon struct test which now breaks with
safe YAML loading on 3.1.
2022-01-10 09:15:23 -08:00
Mike Perham
96816c3adb
fix ruby 3.0 build
2022-01-05 19:59:32 -08:00
Mike Perham
8fb370d47e
too unreliable, noisy
2021-11-02 10:04:43 -07:00
Mike Perham
717e7fdbef
Rename master branch to main
2021-10-12 07:49:36 -07:00
Igor Victor
5267e3b2d7
Update ci.yml ( #5015 )
2021-10-09 09:18:47 -07:00
Olle Jonsson
908c249265
CI: Avoid double bundle install ( #5012 )
2021-10-05 06:59:11 -07:00
John Mortlock
ed08a68eb5
Add ruby3 to build matrix ( #4912 )
...
Co-authored-by: John Mortlock <john.mortlock@sealink.com.au>
2021-05-28 21:47:54 -07:00
Mike Perham
6b862a1411
Remove old template
2020-08-28 13:41:17 -07:00
Mike Perham
370aee1e92
Update issue templates
2020-08-28 13:40:15 -07:00
Mike Perham
af193181d2
multi-ruby
2020-08-28 13:25:31 -07:00
Mike Perham
70e4a3d420
rename, add rubies
2020-08-28 13:20:51 -07:00
Mike Perham
eb78747d68
this is super dumb, should be the default
2020-08-28 13:11:13 -07:00
Mike Perham
cbb5dc3998
include redis
2020-08-28 13:04:42 -07:00
Mike Perham
f04dcff93c
Create ruby.yml
2020-08-28 12:50:42 -07:00
Mark McDonald
6ce47ef810
Add all changelogs to issue template
2017-12-14 13:37:22 -08:00
Mike Perham
13f746a7a7
tweak
2017-03-16 13:44:33 -07:00
Mike Perham
c2b4db5bdc
upgrade
2017-03-16 13:42:46 -07:00
Mike Perham
a499185e3d
massage
2016-06-29 09:10:24 -07:00
Mike Perham
66ba39b078
Add issue template
2016-06-29 09:08:27 -07:00
Mike Perham
d1c5f8cdf7
Use the .github directory
2016-02-22 20:28:46 -08:00
