6c6f3d346f
build: lock file maintenance
...
See associated pull request for more information.
2026-08-04 08:26:26 -07:00
5e1d535868
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-03 08:56:14 -07:00
115abc2191
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-31 08:30:24 -07:00
d107bcad3c
build: update cross-repo angular dependencies
...
See associated pull request for more information.
Closes #69911 as a pr takeover
2026-07-30 10:04:35 -07:00
6d51b99950
ci: add branch tracking comments to dev-infra GitHub actions
...
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
(cherry picked from commit 32815d5472
2026-07-30 15:16:38 +00:00
77c5815faf
build: lock file maintenance
...
See associated pull request for more information.
2026-07-29 08:47:16 -07:00
da08a8fa59
build: update all github actions
...
See associated pull request for more information.
2026-07-24 13:44:01 -07:00
9bf8b8ca56
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-21 17:20:55 +02:00
22aecf5ed9
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-21 13:28:27 +02:00
e27d67f3ec
build: update github/codeql-action action to v4.37.1
...
See associated pull request for more information.
2026-07-20 14:23:57 +02:00
79c81b62b9
build: update actions/setup-node action to v7
...
See associated pull request for more information.
2026-07-20 11:13:50 +02:00
d43acaf80c
ci: harden workflow against expression injection
...
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.
Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com >
2026-07-15 17:44:44 -07:00
2732c5f63c
build: lock file maintenance
...
See associated pull request for more information.
2026-07-14 07:59:16 -07:00
a8264df6c5
build: update github/codeql-action action to v4.37.0
...
See associated pull request for more information.
2026-07-10 10:55:03 -07:00
b178e83307
ci: fix workflows broken by renamed command
...
This command was renamed in
https://github.com/angular/dev-infra/commit/ff4046900c623801d13f764a1ee59ce7d2b49599 .
2026-07-09 16:04:43 -07:00
4cf5135743
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-09 16:04:43 -07:00
d60b59a7e9
build: update all github actions
...
See associated pull request for more information.
2026-07-06 13:54:52 -07:00
785d254433
ci: setup Node.js in adev-preview-deploy workflow using .nvmrc
...
Ensures that the correct Node.js version is used.
2026-06-30 17:45:19 -07:00
9d6966800f
build: update all github actions to v7
...
See associated pull request for more information.
2026-06-26 10:36:11 -07:00
295dad7389
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-24 10:48:36 -04:00
681148c674
build: lock file maintenance
...
See associated pull request for more information.
2026-06-23 15:00:31 -04:00
7e1fcd4ce6
build: update all github actions to v6.0.9
...
See associated pull request for more information.
2026-06-18 14:22:31 -04:00
ebe92fe291
ci: update dev-infra release workflow SHA
...
Updates the reusable release workflow reference to point to the latest merged commit in dev-infra containing the resilient publish fixes.
2026-06-18 14:05:30 -04:00
45192ba749
ci: update dev-infra reference to new commit SHA
...
Updates the reusable release workflow reference to use the new commit SHA 1ce5d6899a2634fccf021a84656026bed0acbe16 from angular/dev-infra PR 3796.
2026-06-17 13:10:43 -07:00
ea18ab24dd
ci: add id-token: write permission to release workflow
...
Adds id-token: write permission to the release workflow to allow the called reusable workflow to generate NPM provenance metadata during publishing.
2026-06-17 10:32:27 -07:00
a7d142913f
ci: update reusable release workflow target SHA, pass robot key, and downgrade permissions
...
Updates the reusable workflow reference to target the merged dev-infra commit e9faacd5b4df391f59989b6fb448b2c24115d592. Passes the ANGULAR_ROBOT_PRIVATE_KEY secret as angular-robot-key. Downgrades default contents permission to read as write access is handled by the App token in the custom action.
2026-06-17 08:10:59 -07:00
182fbb8476
ci: introduce GHA release publish workflow
...
Introduce the caller GitHub Actions workflow for release publishing, which delegates the build and publish steps to the centralized reusable workflow in dev-infra. This targets the merged reusable workflow in dev-infra by SHA.
2026-06-17 08:10:59 -07:00
958c198aa3
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-15 09:18:49 -07:00
547d85addf
ci: run benchmark comparison in isolated worktree and harden security
...
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.
2026-06-09 09:48:50 -07:00
e6ae250802
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-08 15:40:04 -07:00
f759f273dd
build: update all github actions
...
See associated pull request for more information.
2026-06-05 10:53:52 -07:00
8da119857f
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-04 11:24:00 -07:00
30ff589566
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-02 12:25:05 +02:00
4f79cfb2f5
build: update all github actions
...
See associated pull request for more information.
2026-05-28 16:09:16 +02:00
db59909c06
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-27 16:39:56 -07:00
983433d7f5
build: update dev-infra actions to 649c3afeaa46674507b9625537e49de54a695e2b
...
Updates the dev-infra action pin to the latest merge commit to resolve the retired Gemini model 404 failure.
2026-05-27 11:07:52 -07:00
a648e8e914
ci: configure setup and use pnpm in benchmark comparison workflow
...
The benchmark comparison workflow fails because it runs pnpm install
without setting up node and pnpm first. We configure the setup steps
manually so that checkouts from forks are supported.
Additionally, we update the benchmark comparison script (index.mts)
to use pnpm rather than hardcoded yarn commands to install
dependencies when checking out revisions.
2026-05-27 10:51:37 -07:00
dfbe7a6ecd
build: update github/codeql-action action to v4.35.5
...
See associated pull request for more information.
2026-05-21 13:21:30 -07:00
6ff3256b90
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-20 10:11:57 -07:00
b53fa3cdaa
build: lock file maintenance
...
See associated pull request for more information.
2026-05-19 13:22:40 -07:00
cdef73a249
build: update @angular/ng-dev
...
Update the @angular/ng-dev dependency to the latest build to pull in recent fixes and improvements.
2026-05-12 12:08:55 -07:00
3bf1b10bcf
build: update all github actions
...
See associated pull request for more information.
2026-05-07 16:28:57 -06:00
fd8568f3c5
build: update alessbell/pull-request-comment-branch action to v2
...
See associated pull request for more information.
2026-05-01 15:57:44 -07:00
116f55ce30
refactor(docs-infra): use Node.js temp APIs in deploy action
...
Replaces the 'tmp' package with native 'node:os' and 'node:fs' APIs to create temporary files in the system temp directory.
2026-04-30 16:10:54 -07:00
ebffd80ce4
build: update all github actions
...
See associated pull request for more information.
2026-04-30 15:55:07 -07:00
9fa4be9d09
test(zone.js): vitest patch for testing ( #68395 )
...
Test `fakeAsync` API in Vitest when Zone.js `vitest` patch applied.
PR Close #68395
2026-04-30 15:44:35 -07:00
e4f9781f28
build(dev-infra): update dev-infra actions to latest commit
...
Updates all GitHub Actions that use actions from the angular/dev-infra repository to the latest commit SHA 442c2fcbf06a321b5196b4c5fc70e78a49242958.
2026-04-28 10:32:20 -07:00
f219e65841
refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow
...
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
2026-04-28 10:29:24 -07:00
7f3f3d7da1
ci: remove remainings of saucelabs tests
...
Those haven't been used for a while.
2026-04-22 14:41:03 -07:00
8f5e0e09e9
build: pin firebase-tools version and disable credential persistence in preview deploy workflow
2026-04-22 14:38:22 -07:00
Angular Robot