1b7dcc854a
ci: stop passing preview gating inputs to adev preview build
...
The Googler check moved out of `pack-and-upload-artifact` and into the
pull request labeling action, which runs in a privileged
`pull_request_target` context where secrets are available. The build job
runs on `pull_request` and never receives secrets, so it no longer needs
`angular-robot-key` or `triggering-label`, and the `bypassed_for_forks`
placeholder can go away. Bumps the dev-infra pins to pick up that change.
2026-09-11 13:11:59 -07:00
ceba448475
build: update pnpm/action-setup action to v6.1.0
...
See associated pull request for more information.
2026-09-10 14:29:47 -07:00
8414f90a6f
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-09-09 16:30:15 +02:00
9a58353b1b
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-09-04 07:52:21 -07:00
1b0d861fe5
build: lock file maintenance
...
See associated pull request for more information.
2026-09-01 09:22:54 -07:00
9cf7b44f7c
build: remove explicit strict options
...
Those options are enabled by default, they don't need to be explicit.
2026-08-31 13:17:00 -07:00
444b4652a9
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-28 18:01:05 -07:00
bcc0e9206f
build: update cypress-io/github-action action to v7.4.3
...
See associated pull request for more information.
2026-08-27 07:55:41 -07:00
8c26fc74e5
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-26 15:37:41 -07:00
3be5facf04
ci: pass required inputs for adev preview artifact upload
...
The `pack-and-upload-artifact` action from `dev-infra` recently added conditional steps that require `triggering-label` and `angular-robot-key` to be passed. Without these inputs, the internal action steps were silently skipped, resulting in no artifact being uploaded. This caused the subsequent deploy workflow to fail when it couldn't find the `adev-preview` artifact.
2026-08-25 09:57:22 -07:00
1426f5ecf5
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-24 15:53:22 -07:00
42f6641120
build: remove scorecard workflow
...
The scorecard workflow has been replaced at the org level so these changes remove it from our workflows.
2026-08-24 10:24:05 -07:00
48831fc5fe
build: lock file maintenance
...
See associated pull request for more information.
2026-08-18 08:54:49 -07:00
6c6141b0ad
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-14 08:20:48 -07:00
e6be990f77
build: update all github actions
...
See associated pull request for more information.
2026-08-13 08:36:30 -07:00
b95f9e2691
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-10 08:57:16 -07:00
0f0058900c
build: update all github actions
...
See associated pull request for more information.
2026-08-07 16:02:04 -07:00
f68291515a
build: lock file maintenance
...
See associated pull request for more information.
2026-08-04 08:25:59 -07:00
4aacaecb96
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-03 08:55:37 -07:00
245e6f37ea
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-31 08:23:37 -07:00
9e5dc74b67
build: update cross-repo angular dependencies
...
See associated pull request for more information.
Closes #69910 as a pr takeover
2026-07-30 09:41:50 -07:00
88a9621c30
build: update github/codeql-action action to v4.37.4
...
See associated pull request for more information.
2026-07-30 08:23:12 -07:00
32815d5472
ci: add branch tracking comments to dev-infra GitHub actions
...
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
2026-07-30 08:16:34 -07:00
4eb0ed077c
build: lock file maintenance
...
See associated pull request for more information.
2026-07-29 08:46:37 -07:00
7cbf5e3c2b
build: update all github actions
...
See associated pull request for more information.
2026-07-24 13:43:29 -07:00
9bf8b8ca56
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-21 17:20:55 +02:00
22aecf5ed9
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-21 13:28:27 +02:00
e27d67f3ec
build: update github/codeql-action action to v4.37.1
...
See associated pull request for more information.
2026-07-20 14:23:57 +02:00
79c81b62b9
build: update actions/setup-node action to v7
...
See associated pull request for more information.
2026-07-20 11:13:50 +02:00
d43acaf80c
ci: harden workflow against expression injection
...
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.
Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com >
2026-07-15 17:44:44 -07:00
2732c5f63c
build: lock file maintenance
...
See associated pull request for more information.
2026-07-14 07:59:16 -07:00
a8264df6c5
build: update github/codeql-action action to v4.37.0
...
See associated pull request for more information.
2026-07-10 10:55:03 -07:00
b178e83307
ci: fix workflows broken by renamed command
...
This command was renamed in
https://github.com/angular/dev-infra/commit/ff4046900c623801d13f764a1ee59ce7d2b49599 .
2026-07-09 16:04:43 -07:00
4cf5135743
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-09 16:04:43 -07:00
d60b59a7e9
build: update all github actions
...
See associated pull request for more information.
2026-07-06 13:54:52 -07:00
785d254433
ci: setup Node.js in adev-preview-deploy workflow using .nvmrc
...
Ensures that the correct Node.js version is used.
2026-06-30 17:45:19 -07:00
9d6966800f
build: update all github actions to v7
...
See associated pull request for more information.
2026-06-26 10:36:11 -07:00
295dad7389
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-24 10:48:36 -04:00
681148c674
build: lock file maintenance
...
See associated pull request for more information.
2026-06-23 15:00:31 -04:00
7e1fcd4ce6
build: update all github actions to v6.0.9
...
See associated pull request for more information.
2026-06-18 14:22:31 -04:00
ebe92fe291
ci: update dev-infra release workflow SHA
...
Updates the reusable release workflow reference to point to the latest merged commit in dev-infra containing the resilient publish fixes.
2026-06-18 14:05:30 -04:00
45192ba749
ci: update dev-infra reference to new commit SHA
...
Updates the reusable release workflow reference to use the new commit SHA 1ce5d6899a2634fccf021a84656026bed0acbe16 from angular/dev-infra PR 3796.
2026-06-17 13:10:43 -07:00
ea18ab24dd
ci: add id-token: write permission to release workflow
...
Adds id-token: write permission to the release workflow to allow the called reusable workflow to generate NPM provenance metadata during publishing.
2026-06-17 10:32:27 -07:00
a7d142913f
ci: update reusable release workflow target SHA, pass robot key, and downgrade permissions
...
Updates the reusable workflow reference to target the merged dev-infra commit e9faacd5b4df391f59989b6fb448b2c24115d592. Passes the ANGULAR_ROBOT_PRIVATE_KEY secret as angular-robot-key. Downgrades default contents permission to read as write access is handled by the App token in the custom action.
2026-06-17 08:10:59 -07:00
182fbb8476
ci: introduce GHA release publish workflow
...
Introduce the caller GitHub Actions workflow for release publishing, which delegates the build and publish steps to the centralized reusable workflow in dev-infra. This targets the merged reusable workflow in dev-infra by SHA.
2026-06-17 08:10:59 -07:00
958c198aa3
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-15 09:18:49 -07:00
547d85addf
ci: run benchmark comparison in isolated worktree and harden security
...
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.
2026-06-09 09:48:50 -07:00
e6ae250802
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-08 15:40:04 -07:00
f759f273dd
build: update all github actions
...
See associated pull request for more information.
2026-06-05 10:53:52 -07:00
8da119857f
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-04 11:24:00 -07:00
Joey Perrott