mirror of
https://github.com/oxc-project/oxc.git
synced 2026-09-14 19:36:11 +08:00
codex/comment-attachments
5 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 renovate[bot]
|
07a189c070 |
chore(deps): update actions/labeler action to v7 (#24954)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/labeler](https://redirect.github.com/actions/labeler) | action | major | `v6.2.0` → `v7.0.0` | --- ### Release Notes <details> <summary>actions/labeler (actions/labeler)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/labeler/compare/v6.2.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/labeler/compare/v6.2.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
1ef07a1f5b |
chore(deps): update github actions (#24410)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | patch | `v4.18.1` → `v4.18.5` | | | [actions/labeler](https://redirect.github.com/actions/labeler) | action | minor | `v6.1.0` → `v6.2.0` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | minor | `v2.82.7` → `v2.83.0` | `v2.83.2` (+1) | --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.18.5`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.18.5) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.18.4...v4.18.5) #### Release Notes ##### <!-- 10 -->💼 Other - Bump pinned valgrind-codspeed to [3.26.0-0codspeed6](https://redirect.github.com/CodSpeedHQ/valgrind-codspeed/releases/tag/3.26.0-0codspeed6) ([#​448](https://redirect.github.com/CodSpeedHQ/action/issues/448)) by [@​adriencaccia](https://redirect.github.com/adriencaccia) in [#​448](https://redirect.github.com/CodSpeedHQ/runner/pull/448) - fix: hangs on ARM64 due to atomics by [@​not-matthias](https://redirect.github.com/not-matthias) in [CodSpeedHQ/valgrind-codspeed#23](https://redirect.github.com/CodSpeedHQ/valgrind-codspeed/pull/23) - fix(aspacem): raise amd64 managed address ceiling to 1 TiB by [@​not-matthias](https://redirect.github.com/not-matthias) in [CodSpeedHQ/valgrind-codspeed#22](https://redirect.github.com/CodSpeedHQ/valgrind-codspeed/pull/22) #### Install codspeed-runner 4.18.4 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.18.4 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.4/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.18.4...v4.18.5> ### [`v4.18.4`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.18.4) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.18.2...v4.18.4) #### What's Changed - fix 4.18.3 runner hash – [`bf19f56`](https://redirect.github.com/CodSpeedHQ/action/commit/bf19f56fe8857e83e4343138c1a927e56f666e3b) by [@​adriencaccia](https://redirect.github.com/adriencaccia) **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.18.3...v4.18.4> ### [`v4.18.2`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.18.2) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.18.1...v4.18.2) #### Release Notes ##### <!-- 1 -->🐛 Bug Fixes - Source forwarded env below memtrack's capability boundary by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​439](https://redirect.github.com/CodSpeedHQ/runner/pull/439) ##### <!-- 7 -->⚙️ Internals - chore: bump runner version to 4.18.2 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​219](https://redirect.github.com/CodSpeedHQ/action/pull/219) #### Install codspeed-runner 4.18.2 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.18.2 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.18.1...v4.18.2> </details> <details> <summary>actions/labeler (actions/labeler)</summary> ### [`v6.2.0`](https://redirect.github.com/actions/labeler/releases/tag/v6.2.0) [Compare Source](https://redirect.github.com/actions/labeler/compare/v6.1.0...v6.2.0) #### What's Changed ##### Bug Fix - Improve PR number validation and warning messages in input handling by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​939](https://redirect.github.com/actions/labeler/pull/939) ##### Dependency Updates - Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by [@​dependabot](https://redirect.github.com/dependabot) in [#​943](https://redirect.github.com/actions/labeler/pull/943) - Bump [@​typescript-eslint/eslint-plugin](https://redirect.github.com/typescript-eslint/eslint-plugin) from 8.59.1 to 8.61.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​942](https://redirect.github.com/actions/labeler/pull/942) **Full Changelog**: <https://github.com/actions/labeler/compare/v6.1.0...v6.2.0> </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.83.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.0): 2.83.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.11...v2.83.0) - Support `cargo-about`. ([#​1924](https://redirect.github.com/taiki-e/install-action/pull/1924), thanks [@​ruffsl](https://redirect.github.com/ruffsl)) - Update `uv@latest` to 0.11.28. - Update `martin@latest` to 1.12.0. - Update `kingfisher@latest` to 1.106.0. - Update `biome@latest` to 2.5.3. ### [`v2.82.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.11): 2.82.11 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.10...v2.82.11) - Update `wasm-tools@latest` to 1.253.0. - Update `uv@latest` to 0.11.27. - Update `mise@latest` to 2026.7.2. - Update `mdbook@latest` to 0.5.4. ### [`v2.82.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.10): 2.82.10 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10) - Update `tombi@latest` to 1.2.0. - Update `cargo-nextest@latest` to 0.9.140. ### [`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9): 2.82.9 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9) - Update `vacuum@latest` to 0.29.9. - Update `prek@latest` to 0.4.8. - Update `cargo-tarpaulin@latest` to 0.37.0. - Update `cargo-leptos@latest` to 0.3.7. ### [`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8): 2.82.8 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8) - Update `vacuum@latest` to 0.29.8. - Update `uv@latest` to 0.11.26. - Update `typos@latest` to 1.48.0. - Update `trivy@latest` to 0.72.0. - Update `tombi@latest` to 1.1.7. - Update `prek@latest` to 0.4.6. - Update `mise@latest` to 2026.7.0. - Update `just@latest` to 1.55.1. - Update `biome@latest` to 2.5.2. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Boshen
|
1139adad7d |
ci(workflows): remove graphite branch ignores (#23816)
Removes the graphite-base branch ignore from pull request workflows. |
||
|
renovate
|
f2e88df9cd |
chore(deps): update github actions (#22291)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | patch | `v4.15.0` → `v4.15.1` | | | [actions/labeler](https://redirect.github.com/actions/labeler) | action | minor | `v6.0.1` → `v6.1.0` | | | [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.3` → `v1.0.5` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | minor | `v2.75.27` → `v2.77.1` | `v2.77.4` (+2) | --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.15.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.15.1) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.15.0...v4.15.1) #### Release Notes ##### <!-- 0 -->🚀 Features - Add a way to disable perf compression through env var by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​334](https://redirect.github.com/CodSpeedHQ/runner/pull/334) - Do not display the comparison nudge when not in an interactive terminal by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​300](https://redirect.github.com/CodSpeedHQ/runner/pull/300) - Display a warning when profiling generation failed by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Detect and abort on ring buffer overflow by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​321](https://redirect.github.com/CodSpeedHQ/runner/pull/321) - Grow ring buffer to 16 MiB by [@​not-matthias](https://redirect.github.com/not-matthias) ##### <!-- 7 -->⚙️ Internals - chore: bump runner version to 4.15.1 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​205](https://redirect.github.com/CodSpeedHQ/action/pull/205) - Increase stack sampling for python by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​337](https://redirect.github.com/CodSpeedHQ/runner/pull/337) - Replace hard coded lint job for a dedicated check action by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​320](https://redirect.github.com/CodSpeedHQ/runner/pull/320) - Bump cpp-linter-hooks to support darwin by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Swap pre-commit action for prek by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Fix unused clippy errors in test targets on macos by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Run pre-commit hooks on macos and ubuntu-latest by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) #### Install codspeed-runner 4.15.1 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.15.1 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.15.0...v4.15.1> </details> <details> <summary>actions/labeler (actions/labeler)</summary> ### [`v6.1.0`](https://redirect.github.com/actions/labeler/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/actions/labeler/compare/v6.0.1...v6.1.0) #### Enhancements - Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by [@​bluca](https://redirect.github.com/bluca) in [#​923](https://redirect.github.com/actions/labeler/pull/923) #### Bug Fixes - Improve Labeler Action documentation and permission error handling by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​897](https://redirect.github.com/actions/labeler/pull/897) - Preserve manually added labels during workflow runs and refine label synchronization logic by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​917](https://redirect.github.com/actions/labeler/pull/917) #### Dependency Updates - Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​877](https://redirect.github.com/actions/labeler/pull/877) - Upgrade minimatch from 10.0.1 to 10.2.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​926](https://redirect.github.com/actions/labeler/pull/926) - Upgrade dependencies ([@​actions/core](https://redirect.github.com/actions/core), [@​actions/github](https://redirect.github.com/actions/github), js-yaml, minimatch, [@​typescript-eslint](https://redirect.github.com/typescript-eslint)) by [@​Copilot](https://redirect.github.com/Copilot) in [#​934](https://redirect.github.com/actions/labeler/pull/934) #### New Contributors - [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​897](https://redirect.github.com/actions/labeler/pull/897) - [@​bluca](https://redirect.github.com/bluca) made their first contribution in [#​923](https://redirect.github.com/actions/labeler/pull/923) - [@​Copilot](https://redirect.github.com/Copilot) made their first contribution in [#​934](https://redirect.github.com/actions/labeler/pull/934) **Full Changelog**: <https://github.com/actions/labeler/compare/v6...v6.1.0> </details> <details> <summary>oxc-project/security-action (oxc-project/security-action)</summary> ### [`v1.0.5`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.4...v1.0.5) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.4...v1.0.5) ### [`v1.0.4`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.3...v1.0.4) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.3...v1.0.4) </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.77.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.1): 2.77.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.0...v2.77.1) - Support `taiki-e/install-action@rust` tag. - Update `tombi@latest` to 0.10.3. - Update `martin@latest` to 1.8.2. ### [`v2.77.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.0): 2.77.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.76.0...v2.77.0) - Support `rust`. ([#​1779](https://redirect.github.com/taiki-e/install-action/pull/1779)) This installs rust using rustup. If rustup is not yet installed, this action downloads [rustup-init for the current platform](https://rust-lang.github.io/rustup/installation/other.html#manual-installation) using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it. This also supports installing additional components at the same time by `+<additional>` syntax: ```yaml - uses: taiki-e/install-action@v2 with: # Install rust stable with rustfmt component and wasm32-wasip1 target. tool: rust+rustfmt+wasm32-wasip1 # When installing another rust version: # tool: rust@nightly + rustfmt + wasm32-wasip1 ``` - Fix issue where x86\_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available. - Update `mise@latest` to 2026.5.0. - Diagnostic improvements. ### [`v2.76.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.76.0): 2.76.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.30...v2.76.0) - Support `mdbook-d2`. ([#​1737](https://redirect.github.com/taiki-e/install-action/pull/1737), thanks [@​nhu](https://redirect.github.com/nhu)) - Support `cargo-apple-runner`. ([#​1731](https://redirect.github.com/taiki-e/install-action/pull/1731), thanks [@​madsmtm](https://redirect.github.com/madsmtm)) - Support `cargo-binstall` on riscv64 Linux. - Update `cargo-deb@latest` to 3.7.0. - Update `tombi@latest` to 0.10.2. ### [`v2.75.30`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.30): 2.75.30 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.29...v2.75.30) - Support `cargo-spellcheck` on AArch64 Linux/Windows. - Update `cargo-spellcheck@latest` to 0.15.7. - Update `biome@latest` to 2.4.14. ### [`v2.75.29`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.29): 2.75.29 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.28...v2.75.29) - Update `syft@latest` to 1.44.0. - Update `rclone@latest` to 1.74.0. - Update `osv-scanner@latest` to 2.3.6. ### [`v2.75.28`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.28): 2.75.28 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.27...v2.75.28) - Update `wasmtime@latest` to 44.0.1. - Update `typos@latest` to 1.46.0. - Update `tombi@latest` to 0.10.1. - Update `sccache@latest` to 0.15.0. - Update `mise@latest` to 2026.4.28. - Update `gungraun-runner@latest` to 0.18.2. - Update `cyclonedx@latest` to 0.31.0. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> |
||
|
overlookmotel
|
e6ddc9cf09 |
ci(pr): restore PR labeling for internal PRs (#21962)
#21566 removed PR labelling for security reasons - it used `pull_request_target` event, which is a security hazard. I noticed its absense, and missed it! Have been labelling all my PRs by hand. Restore PR labelling only for "internal" PRs. This can work with `pull_request` target. I've added it as a separate workflow `pr-label.yml`, instead of adding it back to the `pr.yml` workflow, so that the `pull-requests: write` permission is scoped just to the job that needs it. "Check PR Title" doesn't need this permission. Claude tells me we could also support labelling external PRs by using `workflow_run` event instead: > `workflow_run` runs in base-repo context with a write token, and avoids `pull_request_target`'s privileged-context hazard. But I'm not confident enough in what he's saying, or in my own GitHub Actions chops, to propose that. So this is a "middle way" which I think is less risky. |