Angular Robot
ceba448475
build: update pnpm/action-setup action to v6.1.0
...
See associated pull request for more information.
2026-09-10 14:29:47 -07:00
Angular Robot
8414f90a6f
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-09-09 16:30:15 +02:00
Angular Robot
9a58353b1b
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-09-04 07:52:21 -07:00
Angular Robot
444b4652a9
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-28 18:01:05 -07:00
Angular Robot
8c26fc74e5
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-26 15:37:41 -07:00
Angular Robot
1426f5ecf5
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-24 15:53:22 -07:00
Angular Robot
6c6141b0ad
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-14 08:20:48 -07:00
Angular Robot
b95f9e2691
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-10 08:57:16 -07:00
Angular Robot
0f0058900c
build: update all github actions
...
See associated pull request for more information.
2026-08-07 16:02:04 -07:00
Angular Robot
4aacaecb96
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-03 08:55:37 -07:00
Angular Robot
245e6f37ea
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-31 08:23:37 -07:00
Angular Robot
9e5dc74b67
build: update cross-repo angular dependencies
...
See associated pull request for more information.
Closes #69910 as a pr takeover
2026-07-30 09:41:50 -07:00
Alan Agius
32815d5472
ci: add branch tracking comments to dev-infra GitHub actions
...
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
2026-07-30 08:16:34 -07:00
Angular Robot
7cbf5e3c2b
build: update all github actions
...
See associated pull request for more information.
2026-07-24 13:43:29 -07:00
Angular Robot
79c81b62b9
build: update actions/setup-node action to v7
...
See associated pull request for more information.
2026-07-20 11:13:50 +02:00
XananasX7
d43acaf80c
ci: harden workflow against expression injection
...
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.
Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com >
2026-07-15 17:44:44 -07:00
Angular Robot
9d6966800f
build: update all github actions to v7
...
See associated pull request for more information.
2026-06-26 10:36:11 -07:00
Angular Robot
7e1fcd4ce6
build: update all github actions to v6.0.9
...
See associated pull request for more information.
2026-06-18 14:22:31 -04:00
Matthew Beck
547d85addf
ci: run benchmark comparison in isolated worktree and harden security
...
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.
2026-06-09 09:48:50 -07:00
Angular Robot
f759f273dd
build: update all github actions
...
See associated pull request for more information.
2026-06-05 10:53:52 -07:00
Angular Robot
4f79cfb2f5
build: update all github actions
...
See associated pull request for more information.
2026-05-28 16:09:16 +02:00
Joey Perrott
a648e8e914
ci: configure setup and use pnpm in benchmark comparison workflow
...
The benchmark comparison workflow fails because it runs pnpm install
without setting up node and pnpm first. We configure the setup steps
manually so that checkouts from forks are supported.
Additionally, we update the benchmark comparison script (index.mts)
to use pnpm rather than hardcoded yarn commands to install
dependencies when checking out revisions.
2026-05-27 10:51:37 -07:00
Angular Robot
fd8568f3c5
build: update alessbell/pull-request-comment-branch action to v2
...
See associated pull request for more information.
2026-05-01 15:57:44 -07:00
Angular Robot
ebffd80ce4
build: update all github actions
...
See associated pull request for more information.
2026-04-30 15:55:07 -07:00
Joey Perrott
e4f9781f28
build(dev-infra): update dev-infra actions to latest commit
...
Updates all GitHub Actions that use actions from the angular/dev-infra repository to the latest commit SHA 442c2fcbf06a321b5196b4c5fc70e78a49242958.
2026-04-28 10:32:20 -07:00
Herdiyan IT Dev
f219e65841
refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow
...
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
2026-04-28 10:29:24 -07:00
Angular Robot
c7518a4ed6
build: update cross-repo angular dependencies
...
See associated pull request for more information.
Closes #67980 as a pr takeover
2026-04-08 11:04:49 -07:00
Savio Dsouza
6e1e9766a5
ci: use immutable sha for checkout
...
Change to immutable SHA for checkout reference.
2026-04-06 11:47:02 -07:00
Angular Robot
1f3ac4a71b
build: update cross-repo angular dependencies to 616a50d
...
See associated pull request for more information.
2026-04-01 13:23:04 +02:00
Angular Robot
daa372421b
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-31 12:01:19 +02:00
Angular Robot
34e1d49b75
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-27 14:01:21 +01:00
Angular Robot
9192dfede1
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-24 15:12:28 -07:00
Angular Robot
621c9083de
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-20 15:22:17 -07:00
Angular Robot
aa5717c2f4
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-19 16:07:26 -07:00
Angular Robot
a63c956492
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-17 13:51:38 -06:00
Angular Robot
45641f297b
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-16 10:54:41 -06:00
Angular Robot
ada150c693
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-13 16:26:41 -06:00
Angular Robot
9fe820d335
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-05 11:43:25 -08:00
Angular Robot
4422adeabf
build: update cross-repo angular dependencies to c4344a4
...
See associated pull request for more information.
2026-03-04 10:24:21 -08:00
Angular Robot
2ffdebb292
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-04 08:02:13 -08:00
Angular Robot
779f02a5a9
build: update cross-repo angular dependencies to 7ed27f5
...
See associated pull request for more information.
2026-03-03 14:45:21 -08:00
Angular Robot
d305a5ec2c
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-03 14:21:32 -08:00
Angular Robot
db59e27e1d
build: update cross-repo angular dependencies to b1b4bd0
...
See associated pull request for more information.
2026-03-03 10:36:25 -08:00
Angular Robot
2a11c69d52
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-03 09:54:32 -08:00
Angular Robot
c90c8a1c70
build: update cross-repo angular dependencies to 2648276
...
See associated pull request for more information.
2026-03-02 12:22:23 -08:00
Angular Robot
ab1c13fa1e
build: update cross-repo angular dependencies to 90e509f
...
See associated pull request for more information.
2026-03-02 08:42:36 -08:00
Angular Robot
73b6135bf5
build: update cross-repo angular dependencies to 9cc4778
...
See associated pull request for more information.
2026-02-27 09:10:48 -08:00
Angular Robot
cda3e8963a
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-02-26 14:33:24 -08:00
Angular Robot
f022530df4
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-02-26 13:42:06 -08:00
Joey Perrott
385b9485c4
build: update to latest sha of dev-infra repo
...
Update to the latest sha of the dev-infra repo
2026-02-26 12:22:21 -08:00