skills/angular__angular
1
0
Fork 0
mirror of https://github.com/angular/angular.git synced 2026-09-14 13:54:52 +08:00
Code Issues Packages Projects Releases Wiki Activity
37,892 Commits 107 Branches 1,322 Tags
22.0.x
Commit Graph

302 Commits

Author SHA1 Message Date
Angular Robot e00e2912af build: update all github actions 
See associated pull request for more information.
 2026-07-20 11:25:38 +02:00
XananasX7 3b82aea861 ci: harden workflow against expression injection 
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.

Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com>
(cherry picked from commit d43acaf80c)
 2026-07-15 17:44:48 -07:00
Angular Robot b7ab51d7ac build: update all github actions to v6.0.9 
See associated pull request for more information.
 2026-06-23 15:03:16 -04:00
Matthew Beck 96b6419d95 ci: run benchmark comparison in isolated worktree and harden security 
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.

(cherry picked from commit 547d85addf)
 2026-06-09 16:48:55 +00:00
Angular Robot d58ef64646 build: update all github actions 
See associated pull request for more information.
 2026-06-05 11:02:38 -07:00
Angular Robot c203b70c53 build: update all github actions 
See associated pull request for more information.
 2026-05-29 11:48:36 +02:00
Joey Perrott 54d7e0b4d3 ci: configure setup and use pnpm in benchmark comparison workflow 
The benchmark comparison workflow fails because it runs pnpm install
without setting up node and pnpm first. We configure the setup steps
manually so that checkouts from forks are supported.

Additionally, we update the benchmark comparison script (index.mts)
to use pnpm rather than hardcoded yarn commands to install
dependencies when checking out revisions.

(cherry picked from commit a648e8e914)
 2026-05-27 10:51:44 -07:00
Angular Robot fd8568f3c5 build: update alessbell/pull-request-comment-branch action to v2 
See associated pull request for more information.
 2026-05-01 15:57:44 -07:00
Angular Robot ebffd80ce4 build: update all github actions 
See associated pull request for more information.
 2026-04-30 15:55:07 -07:00
Joey Perrott e4f9781f28 build(dev-infra): update dev-infra actions to latest commit 
Updates all GitHub Actions that use actions from the angular/dev-infra repository to the latest commit SHA 442c2fcbf06a321b5196b4c5fc70e78a49242958.
 2026-04-28 10:32:20 -07:00
Herdiyan IT Dev f219e65841 refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow 
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
 2026-04-28 10:29:24 -07:00
Angular Robot c7518a4ed6 build: update cross-repo angular dependencies 
See associated pull request for more information.

Closes #67980 as a pr takeover
 2026-04-08 11:04:49 -07:00
Savio Dsouza 6e1e9766a5 ci: use immutable sha for checkout 
Change to immutable SHA for checkout reference.
 2026-04-06 11:47:02 -07:00
Angular Robot 1f3ac4a71b build: update cross-repo angular dependencies to 616a50d 
See associated pull request for more information.
 2026-04-01 13:23:04 +02:00
Angular Robot daa372421b build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-31 12:01:19 +02:00
Angular Robot 34e1d49b75 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-27 14:01:21 +01:00
Angular Robot 9192dfede1 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-24 15:12:28 -07:00
Angular Robot 621c9083de build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-20 15:22:17 -07:00
Angular Robot aa5717c2f4 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-19 16:07:26 -07:00
Angular Robot a63c956492 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-17 13:51:38 -06:00
Angular Robot 45641f297b build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-16 10:54:41 -06:00
Angular Robot ada150c693 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-13 16:26:41 -06:00
Angular Robot 9fe820d335 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-05 11:43:25 -08:00
Angular Robot 4422adeabf build: update cross-repo angular dependencies to c4344a4 
See associated pull request for more information.
 2026-03-04 10:24:21 -08:00
Angular Robot 2ffdebb292 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-04 08:02:13 -08:00
Angular Robot 779f02a5a9 build: update cross-repo angular dependencies to 7ed27f5 
See associated pull request for more information.
 2026-03-03 14:45:21 -08:00
Angular Robot d305a5ec2c build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-03 14:21:32 -08:00
Angular Robot db59e27e1d build: update cross-repo angular dependencies to b1b4bd0 
See associated pull request for more information.
 2026-03-03 10:36:25 -08:00
Angular Robot 2a11c69d52 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-03-03 09:54:32 -08:00
Angular Robot c90c8a1c70 build: update cross-repo angular dependencies to 2648276 
See associated pull request for more information.
 2026-03-02 12:22:23 -08:00
Angular Robot ab1c13fa1e build: update cross-repo angular dependencies to 90e509f 
See associated pull request for more information.
 2026-03-02 08:42:36 -08:00
Angular Robot 73b6135bf5 build: update cross-repo angular dependencies to 9cc4778 
See associated pull request for more information.
 2026-02-27 09:10:48 -08:00
Angular Robot cda3e8963a build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-26 14:33:24 -08:00
Angular Robot f022530df4 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-26 13:42:06 -08:00
Joey Perrott 385b9485c4 build: update to latest sha of dev-infra repo 
Update to the latest sha of the dev-infra repo
 2026-02-26 12:22:21 -08:00
Angular Robot 6585e4fc4c build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-26 10:33:01 -08:00
Angular Robot d0afeba2cb build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-26 09:43:28 -08:00
Angular Robot 0af53fbb12 build: update cross-repo angular dependencies 
See associated pull request for more information.

Closes #67274 as a pr takeover
 2026-02-25 10:17:51 -08:00
Angular Robot 8f5214e944 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-24 08:59:58 -08:00
Angular Robot c672f9211b build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-19 18:11:51 -08:00
Angular Robot 572945652a build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-19 13:30:45 -08:00
Angular Robot c9d5695d0e build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-19 11:22:19 -08:00
Angular Robot eaf72d456a build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-18 08:50:39 -08:00
Angular Robot 2931ca1fca build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-02-17 14:33:19 -08:00
Angular Robot 084f7dc08d build: update cross-repo angular dependencies 
See associated pull request for more information.

Closes #66795 as a pr takeover
 2026-02-17 12:40:20 -08:00
Angular Robot 960de629ed build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-01-27 20:11:06 +00:00
Angular Robot 3e7808b39f build: update cross-repo angular dependencies 
See associated pull request for more information.

Closes #66702 as a pr takeover
 2026-01-26 23:51:05 +00:00
Angular Robot aeb4b419af build: update all github actions 
See associated pull request for more information.
 2026-01-26 22:20:37 +00:00
Angular Robot 2c53243f00 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-01-21 12:44:18 -08:00
Angular Robot 4df3a8bb36 build: update cross-repo angular dependencies 
See associated pull request for more information.
 2026-01-21 10:22:12 -08:00