05a05f5965
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-09-09 16:29:41 +02:00
18d5da9c1a
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-09-04 07:44:53 -07:00
8d23b95119
build: remove explicit strict options
...
Those options are enabled by default, they don't need to be explicit.
(cherry picked from commit 9cf7b44f7c
2026-08-31 13:17:04 -07:00
b0f778260d
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-28 18:04:06 -07:00
8b362cbc35
build: update cypress-io/github-action action to v7.4.3
...
See associated pull request for more information.
2026-08-27 07:58:24 -07:00
9bf711393d
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-26 15:38:09 -07:00
4cf8c55930
ci: pass required inputs for adev preview artifact upload
...
The `pack-and-upload-artifact` action from `dev-infra` recently added conditional steps that require `triggering-label` and `angular-robot-key` to be passed. Without these inputs, the internal action steps were silently skipped, resulting in no artifact being uploaded. This caused the subsequent deploy workflow to fail when it couldn't find the `adev-preview` artifact.
(cherry picked from commit 3be5facf04
2026-08-25 09:57:28 -07:00
ba3bc47b20
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-24 10:51:49 -07:00
a0854d7917
build: remove scorecard workflow
...
The scorecard workflow has been replaced at the org level so these changes remove it from our workflows.
(cherry picked from commit 42f6641120
2026-08-24 10:24:09 -07:00
f61f2d0500
build: lock file maintenance
...
See associated pull request for more information.
2026-08-18 08:56:26 -07:00
efbe456748
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-14 08:21:58 -07:00
5a516cdc37
build: update all github actions
...
See associated pull request for more information.
2026-08-13 08:37:06 -07:00
eaa0d0b3d6
build: update all github actions
...
See associated pull request for more information.
2026-08-07 16:04:54 -07:00
31bbf31e11
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-07 16:01:31 -07:00
6c6f3d346f
build: lock file maintenance
...
See associated pull request for more information.
2026-08-04 08:26:26 -07:00
5e1d535868
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-08-03 08:56:14 -07:00
115abc2191
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-31 08:30:24 -07:00
d107bcad3c
build: update cross-repo angular dependencies
...
See associated pull request for more information.
Closes #69911 as a pr takeover
2026-07-30 10:04:35 -07:00
6d51b99950
ci: add branch tracking comments to dev-infra GitHub actions
...
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
(cherry picked from commit 32815d5472
2026-07-30 15:16:38 +00:00
77c5815faf
build: lock file maintenance
...
See associated pull request for more information.
2026-07-29 08:47:16 -07:00
da08a8fa59
build: update all github actions
...
See associated pull request for more information.
2026-07-24 13:44:01 -07:00
9bf8b8ca56
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-21 17:20:55 +02:00
22aecf5ed9
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-21 13:28:27 +02:00
e27d67f3ec
build: update github/codeql-action action to v4.37.1
...
See associated pull request for more information.
2026-07-20 14:23:57 +02:00
79c81b62b9
build: update actions/setup-node action to v7
...
See associated pull request for more information.
2026-07-20 11:13:50 +02:00
d43acaf80c
ci: harden workflow against expression injection
...
Interpolating GitHub context values directly into `run:` steps creates
an expression-injection vector. Move the affected values into an `env:`
block and reference them as environment variables in the shell script
instead. This prevents shell metacharacters in context values from
altering step behaviour.
Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com >
2026-07-15 17:44:44 -07:00
2732c5f63c
build: lock file maintenance
...
See associated pull request for more information.
2026-07-14 07:59:16 -07:00
a8264df6c5
build: update github/codeql-action action to v4.37.0
...
See associated pull request for more information.
2026-07-10 10:55:03 -07:00
b178e83307
ci: fix workflows broken by renamed command
...
This command was renamed in
https://github.com/angular/dev-infra/commit/ff4046900c623801d13f764a1ee59ce7d2b49599 .
2026-07-09 16:04:43 -07:00
4cf5135743
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-07-09 16:04:43 -07:00
d60b59a7e9
build: update all github actions
...
See associated pull request for more information.
2026-07-06 13:54:52 -07:00
785d254433
ci: setup Node.js in adev-preview-deploy workflow using .nvmrc
...
Ensures that the correct Node.js version is used.
2026-06-30 17:45:19 -07:00
9d6966800f
build: update all github actions to v7
...
See associated pull request for more information.
2026-06-26 10:36:11 -07:00
295dad7389
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-24 10:48:36 -04:00
681148c674
build: lock file maintenance
...
See associated pull request for more information.
2026-06-23 15:00:31 -04:00
7e1fcd4ce6
build: update all github actions to v6.0.9
...
See associated pull request for more information.
2026-06-18 14:22:31 -04:00
ebe92fe291
ci: update dev-infra release workflow SHA
...
Updates the reusable release workflow reference to point to the latest merged commit in dev-infra containing the resilient publish fixes.
2026-06-18 14:05:30 -04:00
45192ba749
ci: update dev-infra reference to new commit SHA
...
Updates the reusable release workflow reference to use the new commit SHA 1ce5d6899a2634fccf021a84656026bed0acbe16 from angular/dev-infra PR 3796.
2026-06-17 13:10:43 -07:00
ea18ab24dd
ci: add id-token: write permission to release workflow
...
Adds id-token: write permission to the release workflow to allow the called reusable workflow to generate NPM provenance metadata during publishing.
2026-06-17 10:32:27 -07:00
a7d142913f
ci: update reusable release workflow target SHA, pass robot key, and downgrade permissions
...
Updates the reusable workflow reference to target the merged dev-infra commit e9faacd5b4df391f59989b6fb448b2c24115d592. Passes the ANGULAR_ROBOT_PRIVATE_KEY secret as angular-robot-key. Downgrades default contents permission to read as write access is handled by the App token in the custom action.
2026-06-17 08:10:59 -07:00
182fbb8476
ci: introduce GHA release publish workflow
...
Introduce the caller GitHub Actions workflow for release publishing, which delegates the build and publish steps to the centralized reusable workflow in dev-infra. This targets the merged reusable workflow in dev-infra by SHA.
2026-06-17 08:10:59 -07:00
958c198aa3
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-15 09:18:49 -07:00
547d85addf
ci: run benchmark comparison in isolated worktree and harden security
...
- Run comparison benchmark in an isolated git worktree to prevent workspace pollution and local branch conflicts.
- Harden security by passing benchmark target and SHA as environment variables to prevent shell injection, and adding '--' to bazel query and git rev-parse.
- Optimize workflow by removing pnpm caching to mitigate cache poisoning risks.
- Improve robustness of benchmark log parsing, supporting both ZIP outputs and raw directories, and safely checking for JSON reports.
- Centralize git command execution on the dev-infra GitClient for consistency.
- Add tslib to benchpress dependencies to prevent module resolution failures.
2026-06-09 09:48:50 -07:00
e6ae250802
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-08 15:40:04 -07:00
f759f273dd
build: update all github actions
...
See associated pull request for more information.
2026-06-05 10:53:52 -07:00
8da119857f
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-04 11:24:00 -07:00
30ff589566
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-02 12:25:05 +02:00
4f79cfb2f5
build: update all github actions
...
See associated pull request for more information.
2026-05-28 16:09:16 +02:00
db59909c06
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-27 16:39:56 -07:00
983433d7f5
build: update dev-infra actions to 649c3afeaa46674507b9625537e49de54a695e2b
...
Updates the dev-infra action pin to the latest merge commit to resolve the retired Gemini model 404 failure.
2026-05-27 11:07:52 -07:00
Angular Robot