319 Commits

Author SHA1 Message Date
Angular Robot 85090453c3 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-09-11 15:41:50 -07:00
Joey Perrott 66d6e81db2 ci: stop passing preview gating inputs to adev preview build
The Googler check moved out of `pack-and-upload-artifact` and into the
pull request labeling action, which runs in a privileged
`pull_request_target` context where secrets are available. The build job
runs on `pull_request` and never receives secrets, so it no longer needs
`angular-robot-key` or `triggering-label`, and the `bypassed_for_forks`
placeholder can go away. Bumps the dev-infra pins to pick up that change.

(cherry picked from commit 1b7dcc854a)
2026-09-11 20:12:04 +00:00
Angular Robot 0194634a3a build: update pnpm/action-setup action to v6.1.0
See associated pull request for more information.
2026-09-10 16:20:24 -07:00
Angular Robot 05a05f5965 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-09-09 16:29:41 +02:00
Angular Robot 18d5da9c1a build: update cross-repo angular dependencies
See associated pull request for more information.
2026-09-04 07:44:53 -07:00
Angular Robot b0f778260d build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-28 18:04:06 -07:00
Angular Robot 9bf711393d build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-26 15:38:09 -07:00
Angular Robot ba3bc47b20 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-24 10:51:49 -07:00
Angular Robot efbe456748 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-14 08:21:58 -07:00
Angular Robot eaa0d0b3d6 build: update all github actions
See associated pull request for more information.
2026-08-07 16:04:54 -07:00
Angular Robot 31bbf31e11 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-07 16:01:31 -07:00
Angular Robot 5e1d535868 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-03 08:56:14 -07:00
Angular Robot 115abc2191 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-07-31 08:30:24 -07:00
Angular Robot d107bcad3c build: update cross-repo angular dependencies
See associated pull request for more information.

Closes #69911 as a pr takeover
2026-07-30 10:04:35 -07:00
Alan Agius 6d51b99950 ci: add branch tracking comments to dev-infra GitHub actions
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.

(cherry picked from commit 32815d5472)
2026-07-30 15:16:38 +00:00
Angular Robot da08a8fa59 build: update all github actions
See associated pull request for more information.
2026-07-24 13:44:01 -07:00
Angular Robot 79c81b62b9 build: update actions/setup-node action to v7
See associated pull request for more information.
2026-07-20 11:13:50 +02:00
XananasX7 d43acaf80c ci: harden workflow against expression injection
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.

Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com>
2026-07-15 17:44:44 -07:00
Angular Robot 9d6966800f build: update all github actions to v7
See associated pull request for more information.
2026-06-26 10:36:11 -07:00
Angular Robot 7e1fcd4ce6 build: update all github actions to v6.0.9
See associated pull request for more information.
2026-06-18 14:22:31 -04:00
Matthew Beck 547d85addf ci: run benchmark comparison in isolated worktree and harden security
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.
2026-06-09 09:48:50 -07:00
Angular Robot f759f273dd build: update all github actions
See associated pull request for more information.
2026-06-05 10:53:52 -07:00
Angular Robot 4f79cfb2f5 build: update all github actions
See associated pull request for more information.
2026-05-28 16:09:16 +02:00
Joey Perrott a648e8e914 ci: configure setup and use pnpm in benchmark comparison workflow
The benchmark comparison workflow fails because it runs pnpm install
without setting up node and pnpm first. We configure the setup steps
manually so that checkouts from forks are supported.

Additionally, we update the benchmark comparison script (index.mts)
to use pnpm rather than hardcoded yarn commands to install
dependencies when checking out revisions.
2026-05-27 10:51:37 -07:00
Angular Robot fd8568f3c5 build: update alessbell/pull-request-comment-branch action to v2
See associated pull request for more information.
2026-05-01 15:57:44 -07:00
Angular Robot ebffd80ce4 build: update all github actions
See associated pull request for more information.
2026-04-30 15:55:07 -07:00
Joey Perrott e4f9781f28 build(dev-infra): update dev-infra actions to latest commit
Updates all GitHub Actions that use actions from the angular/dev-infra repository to the latest commit SHA 442c2fcbf06a321b5196b4c5fc70e78a49242958.
2026-04-28 10:32:20 -07:00
Herdiyan IT Dev f219e65841 refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
2026-04-28 10:29:24 -07:00
Angular Robot c7518a4ed6 build: update cross-repo angular dependencies
See associated pull request for more information.

Closes #67980 as a pr takeover
2026-04-08 11:04:49 -07:00
Savio Dsouza 6e1e9766a5 ci: use immutable sha for checkout
Change to immutable SHA for checkout reference.
2026-04-06 11:47:02 -07:00
Angular Robot 1f3ac4a71b build: update cross-repo angular dependencies to 616a50d
See associated pull request for more information.
2026-04-01 13:23:04 +02:00
Angular Robot daa372421b build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-31 12:01:19 +02:00
Angular Robot 34e1d49b75 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-27 14:01:21 +01:00
Angular Robot 9192dfede1 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-24 15:12:28 -07:00
Angular Robot 621c9083de build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-20 15:22:17 -07:00
Angular Robot aa5717c2f4 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-19 16:07:26 -07:00
Angular Robot a63c956492 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-17 13:51:38 -06:00
Angular Robot 45641f297b build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-16 10:54:41 -06:00
Angular Robot ada150c693 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-13 16:26:41 -06:00
Angular Robot 9fe820d335 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-05 11:43:25 -08:00
Angular Robot 4422adeabf build: update cross-repo angular dependencies to c4344a4
See associated pull request for more information.
2026-03-04 10:24:21 -08:00
Angular Robot 2ffdebb292 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-04 08:02:13 -08:00
Angular Robot 779f02a5a9 build: update cross-repo angular dependencies to 7ed27f5
See associated pull request for more information.
2026-03-03 14:45:21 -08:00
Angular Robot d305a5ec2c build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-03 14:21:32 -08:00
Angular Robot db59e27e1d build: update cross-repo angular dependencies to b1b4bd0
See associated pull request for more information.
2026-03-03 10:36:25 -08:00
Angular Robot 2a11c69d52 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-03 09:54:32 -08:00
Angular Robot c90c8a1c70 build: update cross-repo angular dependencies to 2648276
See associated pull request for more information.
2026-03-02 12:22:23 -08:00
Angular Robot ab1c13fa1e build: update cross-repo angular dependencies to 90e509f
See associated pull request for more information.
2026-03-02 08:42:36 -08:00
Angular Robot 73b6135bf5 build: update cross-repo angular dependencies to 9cc4778
See associated pull request for more information.
2026-02-27 09:10:48 -08:00
Angular Robot cda3e8963a build: update cross-repo angular dependencies
See associated pull request for more information.
2026-02-26 14:33:24 -08:00