317 Commits

Author SHA1 Message Date
Angular Robot ceba448475 build: update pnpm/action-setup action to v6.1.0
See associated pull request for more information.
2026-09-10 14:29:47 -07:00
Angular Robot 8414f90a6f build: update cross-repo angular dependencies
See associated pull request for more information.
2026-09-09 16:30:15 +02:00
Angular Robot 9a58353b1b build: update cross-repo angular dependencies
See associated pull request for more information.
2026-09-04 07:52:21 -07:00
Angular Robot 444b4652a9 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-28 18:01:05 -07:00
Angular Robot 8c26fc74e5 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-26 15:37:41 -07:00
Angular Robot 1426f5ecf5 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-24 15:53:22 -07:00
Angular Robot 6c6141b0ad build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-14 08:20:48 -07:00
Angular Robot b95f9e2691 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-10 08:57:16 -07:00
Angular Robot 0f0058900c build: update all github actions
See associated pull request for more information.
2026-08-07 16:02:04 -07:00
Angular Robot 4aacaecb96 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-08-03 08:55:37 -07:00
Angular Robot 245e6f37ea build: update cross-repo angular dependencies
See associated pull request for more information.
2026-07-31 08:23:37 -07:00
Angular Robot 9e5dc74b67 build: update cross-repo angular dependencies
See associated pull request for more information.

Closes #69910 as a pr takeover
2026-07-30 09:41:50 -07:00
Alan Agius 32815d5472 ci: add branch tracking comments to dev-infra GitHub actions
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
2026-07-30 08:16:34 -07:00
Angular Robot 7cbf5e3c2b build: update all github actions
See associated pull request for more information.
2026-07-24 13:43:29 -07:00
Angular Robot 79c81b62b9 build: update actions/setup-node action to v7
See associated pull request for more information.
2026-07-20 11:13:50 +02:00
XananasX7 d43acaf80c ci: harden workflow against expression injection
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.

Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com>
2026-07-15 17:44:44 -07:00
Angular Robot 9d6966800f build: update all github actions to v7
See associated pull request for more information.
2026-06-26 10:36:11 -07:00
Angular Robot 7e1fcd4ce6 build: update all github actions to v6.0.9
See associated pull request for more information.
2026-06-18 14:22:31 -04:00
Matthew Beck 547d85addf ci: run benchmark comparison in isolated worktree and harden security
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.
2026-06-09 09:48:50 -07:00
Angular Robot f759f273dd build: update all github actions
See associated pull request for more information.
2026-06-05 10:53:52 -07:00
Angular Robot 4f79cfb2f5 build: update all github actions
See associated pull request for more information.
2026-05-28 16:09:16 +02:00
Joey Perrott a648e8e914 ci: configure setup and use pnpm in benchmark comparison workflow
The benchmark comparison workflow fails because it runs pnpm install
without setting up node and pnpm first. We configure the setup steps
manually so that checkouts from forks are supported.

Additionally, we update the benchmark comparison script (index.mts)
to use pnpm rather than hardcoded yarn commands to install
dependencies when checking out revisions.
2026-05-27 10:51:37 -07:00
Angular Robot fd8568f3c5 build: update alessbell/pull-request-comment-branch action to v2
See associated pull request for more information.
2026-05-01 15:57:44 -07:00
Angular Robot ebffd80ce4 build: update all github actions
See associated pull request for more information.
2026-04-30 15:55:07 -07:00
Joey Perrott e4f9781f28 build(dev-infra): update dev-infra actions to latest commit
Updates all GitHub Actions that use actions from the angular/dev-infra repository to the latest commit SHA 442c2fcbf06a321b5196b4c5fc70e78a49242958.
2026-04-28 10:32:20 -07:00
Herdiyan IT Dev f219e65841 refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
2026-04-28 10:29:24 -07:00
Angular Robot c7518a4ed6 build: update cross-repo angular dependencies
See associated pull request for more information.

Closes #67980 as a pr takeover
2026-04-08 11:04:49 -07:00
Savio Dsouza 6e1e9766a5 ci: use immutable sha for checkout
Change to immutable SHA for checkout reference.
2026-04-06 11:47:02 -07:00
Angular Robot 1f3ac4a71b build: update cross-repo angular dependencies to 616a50d
See associated pull request for more information.
2026-04-01 13:23:04 +02:00
Angular Robot daa372421b build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-31 12:01:19 +02:00
Angular Robot 34e1d49b75 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-27 14:01:21 +01:00
Angular Robot 9192dfede1 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-24 15:12:28 -07:00
Angular Robot 621c9083de build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-20 15:22:17 -07:00
Angular Robot aa5717c2f4 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-19 16:07:26 -07:00
Angular Robot a63c956492 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-17 13:51:38 -06:00
Angular Robot 45641f297b build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-16 10:54:41 -06:00
Angular Robot ada150c693 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-13 16:26:41 -06:00
Angular Robot 9fe820d335 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-05 11:43:25 -08:00
Angular Robot 4422adeabf build: update cross-repo angular dependencies to c4344a4
See associated pull request for more information.
2026-03-04 10:24:21 -08:00
Angular Robot 2ffdebb292 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-04 08:02:13 -08:00
Angular Robot 779f02a5a9 build: update cross-repo angular dependencies to 7ed27f5
See associated pull request for more information.
2026-03-03 14:45:21 -08:00
Angular Robot d305a5ec2c build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-03 14:21:32 -08:00
Angular Robot db59e27e1d build: update cross-repo angular dependencies to b1b4bd0
See associated pull request for more information.
2026-03-03 10:36:25 -08:00
Angular Robot 2a11c69d52 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-03 09:54:32 -08:00
Angular Robot c90c8a1c70 build: update cross-repo angular dependencies to 2648276
See associated pull request for more information.
2026-03-02 12:22:23 -08:00
Angular Robot ab1c13fa1e build: update cross-repo angular dependencies to 90e509f
See associated pull request for more information.
2026-03-02 08:42:36 -08:00
Angular Robot 73b6135bf5 build: update cross-repo angular dependencies to 9cc4778
See associated pull request for more information.
2026-02-27 09:10:48 -08:00
Angular Robot cda3e8963a build: update cross-repo angular dependencies
See associated pull request for more information.
2026-02-26 14:33:24 -08:00
Angular Robot f022530df4 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-02-26 13:42:06 -08:00
Joey Perrott 385b9485c4 build: update to latest sha of dev-infra repo
Update to the latest sha of the dev-infra repo
2026-02-26 12:22:21 -08:00