Граф коммитов

9 Коммитов

Автор SHA1 Сообщение Дата
dependabot[bot] bc6e6e36a6
chore(deps): bump ruby/setup-ruby in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.190.0 to 1.191.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](a6e6f86333...52753b7da8)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-09 10:25:23 +00:00
dependabot[bot] 2880c2c6d1
chore(deps): bump the dependencies group across 1 directory with 2 updates
Bumps the dependencies group with 2 updates in the / directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `ruby/setup-ruby` from 1.180.0 to 1.190.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ff740bc00a...a6e6f86333)

Updates `actions/setup-python` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](82c7e631bb...f677139bbe)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-02 11:01:09 +00:00
jmeridth 1e2c039359
fix: add explicit permissions to ci github action
Fixing a code scanning alert

Signed-off-by: jmeridth <jmeridth@gmail.com>
2024-08-06 15:24:51 -05:00
jmeridth 2a0c8ddb79
chore: use sha instead of tag on stale workflow
didn't catch this in #1821

Using SHA instead of tag ensures secure supply chain.  Tags are mutable, SHAs are not

Signed-off-by: jmeridth <jmeridth@gmail.com>
2024-06-19 15:33:53 -05:00
Justin Kenyon 06e35c7cd3
Create stale.yml 2024-06-19 15:36:52 -04:00
jmeridth e6973dfdac
chore: add dependabot and update github actions
Closes #1756

- [x] update github actions to latest versions
- [x] use SHAs instead of tags for github actions, more secure supply chain
- [x] add dependabot file grouping minor/patch dependency updates to reduce PRs
- [x] remove Gemfile.lock from .gitignore and add it back to source control
  - this will allow dependabot to detect dependency updates

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
2024-06-17 11:00:52 -05:00
Justin Kenyon 5488510af8
Update nokogiri, nokogiri-diff, rdoc
This also removes support for Ruby versions < 3
Brings in changes from https://github.com/github/markup/pull/1808

co-authored-by: Tyler Dixon <tylerdixon@github.com>
2024-06-14 17:04:52 -04:00
Terence D. Honles bd03c94813 fix github action triggers 2021-04-01 22:05:37 -07:00
Terence D. Honles 681f5392ec convert to github actions 2021-03-31 12:40:20 -07:00