Commit Graph

1048 Commits

Author SHA1 Message Date
renovate[bot] 908908b1bb chore(deps): update github actions to v7 (#23691)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v6.0.3` → `v7.0.0` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v7.0.0)

- Block checking out fork PR for pull\_request\_target and workflow\_run
by [@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
and
[@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
and Remove uuid by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by
[@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2462](https://redirect.github.com/actions/checkout/pull/2462)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIzMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-22 07:17:08 +08:00
camc314 1d33959abd fix(ci/lint-rules): peer deps issues with lint-rules (#23415) 2026-06-14 18:15:56 +00:00
renovate[bot] c1fd179fae chore(deps): update github actions (#23411)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) |
action | patch | `v4.17.0` → `v4.17.5` |
|
[oxc-project/setup-node](https://redirect.github.com/oxc-project/setup-node)
| action | patch | `v1.3.0` → `v1.3.1` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | patch | `v2.81.4` → `v2.81.10` |

---

### Release Notes

<details>
<summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary>

###
[`v4.17.5`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.17.5)

[Compare
Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.17.0...v4.17.5)

#### Release Notes

This release bundles all runner changes from `4.17.1` through `4.17.5`.

##### <!-- 0 -->🚀 Features

- Add optional `mode` arg to target setup by
[@&#8203;fargito](https://redirect.github.com/fargito) in
[#&#8203;397](https://redirect.github.com/CodSpeedHQ/runner/pull/397)
- Restore DYLD\_INSERT\_LIBRARIES from SAMPLY\_ alias by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Bump valgrind-codspeed to 3.26.0-0codspeed3 by
[@&#8203;adriencaccia](https://redirect.github.com/adriencaccia)

##### <!-- 1 -->🐛 Bug Fixes

- Purge inherited mappings on execve to fix unknown symbols
([#&#8203;392](https://redirect.github.com/CodSpeedHQ/action/issues/392))
by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;392](https://redirect.github.com/CodSpeedHQ/runner/pull/392)
- Use %p in log file path to avoid multi-process overwrite by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;381](https://redirect.github.com/CodSpeedHQ/runner/pull/381)
- Compare codspeed iteration of installed valgrind by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)

##### <!-- 10 -->💼 Other

- Enable set -u to match go.sh by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;389](https://redirect.github.com/CodSpeedHQ/runner/pull/389)

##### <!-- 2 -->🏗️ Refactor

- Parse codspeed iteration from version string by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)

##### <!-- 7 -->⚙️ Internals

- Bump samply by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Bump samply to fix sigkill by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;386](https://redirect.github.com/CodSpeedHQ/runner/pull/386)
- Log detected valgrind version by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;390](https://redirect.github.com/CodSpeedHQ/runner/pull/390)
- Bump samply-codspeed to disable jit classification and add
fp-anchoring to unwinding
([#&#8203;382](https://redirect.github.com/CodSpeedHQ/action/issues/382))
by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;382](https://redirect.github.com/CodSpeedHQ/runner/pull/382)

#### Install codspeed-runner 4.17.5

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-installer.sh | sh
```

#### Download codspeed-runner 4.17.5

| File | Platform | Checksum |
|
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
| ------------------- |
-------------------------------------------------------------------------------------------------------------------------------------
|
|
[codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-aarch64-apple-darwin.tar.gz)
| Apple Silicon macOS |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256)
|
|
[codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-aarch64-unknown-linux-musl.tar.gz)
| ARM64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256)
|
|
[codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-x86_64-unknown-linux-musl.tar.gz)
| x64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256)
|

**Full Runner Changelog**:
<https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md>

**Full Changelog**:
<https://github.com/CodSpeedHQ/action/compare/v4.17.0...v4.17.5>

</details>

<details>
<summary>oxc-project/setup-node (oxc-project/setup-node)</summary>

###
[`v1.3.1`](https://redirect.github.com/oxc-project/setup-node/compare/v1.3.0...v1.3.1)

[Compare
Source](https://redirect.github.com/oxc-project/setup-node/compare/v1.3.0...v1.3.1)

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.81.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.10):
2.81.10

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.9...v2.81.10)

- Update `tombi@latest` to 1.1.3.

- Update `release-plz@latest` to 0.3.159.

- Update `cosign@latest` to 3.1.1.

###
[`v2.81.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.9):
2.81.9

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.8...v2.81.9)

- Update `wasm-bindgen@latest` to 0.2.123.

- Update `tombi@latest` to 1.1.2.

- Update `parse-changelog@latest` to 0.6.17.

- Update `just@latest` to 1.52.0.

- Update `gungraun-runner@latest` to 0.19.2.

- Update `cargo-binstall@latest` to 1.20.0.

###
[`v2.81.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.8):
2.81.8

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.7...v2.81.8)

- Update `vacuum@latest` to 0.29.2.

- Update `parse-dockerfile@latest` to 0.1.7.

- Update `mise@latest` to 2026.6.1.

- Update `cargo-shear@latest` to 1.13.1.

###
[`v2.81.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.7):
2.81.7

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.6...v2.81.7)

- Update `wasmtime@latest` to 45.0.1.

- Update `vacuum@latest` to 0.29.1.

- Update `syft@latest` to 1.45.1.

- Update `rclone@latest` to 1.74.3.

- Update `cargo-audit@latest` to 0.22.2.

###
[`v2.81.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.6):
2.81.6

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.5...v2.81.6)

- Update `prek@latest` to 0.4.4.

- Update `cargo-shear@latest` to 1.13.0.

###
[`v2.81.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.5):
2.81.5

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.4...v2.81.5)

- Update `vacuum@latest` to 0.29.0.

- Update `uv@latest` to 0.11.19.

- Update `typos@latest` to 1.47.2.

- Update `mise@latest` to 2026.6.0.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIxOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-14 19:00:19 +01:00
overlookmotel 79cd905cd5 ci(miri): run doctests under Miri (#23259)
Running Miri on doctests was disabled in #11092. Unclear what oddity in the version of Rust nightly we were running at the time caused it not to work, but it now seems to be fixed, so we can re-enable the doctests now.

This is what caught the memory leaks in doc comment examples which were fixed in #23257.
2026-06-11 00:16:47 +00:00
overlookmotel b77ca6f323 ci(miri): run Miri with strict provenance enabled (#23258)
I had always understood that Miri ran its checks under strict provenance rules by default, but apparently not. Enable strict provenance in Miri in CI.
2026-06-11 00:16:46 +00:00
renovate[bot] 07c39f7e99 chore(deps): update github actions (#23088)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) |
action | minor | `v4.15.1` → `v4.17.0` | |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | patch | `v6.0.2` → `v6.0.3` | |
|
[cross-platform-actions/action](https://redirect.github.com/cross-platform-actions/action)
| action | minor | `v1.1.0` → `v1.2.0` | |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.79.12` → `v2.81.4` | `v2.81.7` (+2) |

---

### Release Notes

<details>
<summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary>

###
[`v4.17.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.17.0)

[Compare
Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.15.1...v4.17.0)

#### Release Notes

##### <!-- 0 -->🚀 Features

- Configure samply symbol resolution env vars by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Add CODSPEED\_WALLTIME\_PROFILER override by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Make benchmark isolation profiler-driven by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Add profile-based auth configuration
([#&#8203;366](https://redirect.github.com/CodSpeedHQ/action/issues/366))
by [@&#8203;art049](https://redirect.github.com/art049) in
[#&#8203;366](https://redirect.github.com/CodSpeedHQ/runner/pull/366)
- Bump instrument-hooks to not use stubs on macos
([#&#8203;373](https://redirect.github.com/CodSpeedHQ/action/issues/373))
by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;373](https://redirect.github.com/CodSpeedHQ/runner/pull/373)
- Pin codspeed-go-runner installer downloads with sha256 verification by
[@&#8203;art049](https://redirect.github.com/art049) in
[#&#8203;362](https://redirect.github.com/CodSpeedHQ/runner/pull/362)
- Pin downloaded binaries with sha256 verification by
[@&#8203;art049](https://redirect.github.com/art049)
- Search NixOS debug info path by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;354](https://redirect.github.com/CodSpeedHQ/runner/pull/354)
- Inherit process mapping on forks by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Bundle samply via library crate by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Add samply profiler for macOS by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Rename CODSPEED\_PERF\_ENABLED to CODSPEED\_PROFILER\_ENABLED by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Add Profiler trait abstraction by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Restore cursor on ctrl c by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;341](https://redirect.github.com/CodSpeedHQ/runner/pull/341)
- Validate tokens and repository access up front by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)

##### <!-- 1 -->🐛 Bug Fixes

- Use introspected env for memory executor by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Misleading DCE advice in setup-harness
([#&#8203;350](https://redirect.github.com/CodSpeedHQ/action/issues/350))
by [@&#8203;SuperMuel](https://redirect.github.com/SuperMuel) in
[#&#8203;350](https://redirect.github.com/CodSpeedHQ/runner/pull/350)
- Flush rolling buffer when executor errors by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;352](https://redirect.github.com/CodSpeedHQ/runner/pull/352)
- Use brew-installed bash for samply on macOS by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;347](https://redirect.github.com/CodSpeedHQ/runner/pull/347)
- Keep old name aliases to for deserialization purposes by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;345](https://redirect.github.com/CodSpeedHQ/runner/pull/345)
- Handle malformed token from backend better by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Disable PYTHON\_PERF\_JIT\_SUPPORT on macOS by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Use mach\_absolute\_time for FIFO timestamps on macOS by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Use O\_RDWR to open FIFOs on all Unix platforms by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)

##### <!-- 10 -->💼 Other

- Select profiler via typed CLI arg by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;379](https://redirect.github.com/CodSpeedHQ/runner/pull/379)
- Bump workspace dependencies
([#&#8203;370](https://redirect.github.com/CodSpeedHQ/action/issues/370))
by [@&#8203;art049](https://redirect.github.com/art049) in
[#&#8203;370](https://redirect.github.com/CodSpeedHQ/runner/pull/370)
- Make api\_client the single source of truth for the auth token by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Bump gql\_client to partial-data fork by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)

##### <!-- 2 -->🏗️ Refactor

- Centralize internal re-exec via
InternalCommands::get\_command\_builder by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;338](https://redirect.github.com/CodSpeedHQ/runner/pull/338)
- Rename Benchmark FIFO commands/markers to Profiler/Round by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Rename Profiler::wrap to wrap\_command by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Share Linux profiler sysctl setup by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Port PerfRunner to Profiler trait by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Rename PerfMetadata to WalltimeMetadata by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Move perf module under profiler/ by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Rename FifoCommand::PingPerf to PingProfiler by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Rename IntegrationMode::Perf to Walltime by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)

##### <!-- 6 -->🧪 Testing

- Update valgrind snapshot tests by
[@&#8203;adriencaccia](https://redirect.github.com/adriencaccia)

##### <!-- 7 -->⚙️ Internals

- Add taplo config file by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;363](https://redirect.github.com/CodSpeedHQ/runner/pull/363)
- Bump samply fork to use framehop-codspeed by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Add retry to sha256 tests to prevent transient failures by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;375](https://redirect.github.com/CodSpeedHQ/runner/pull/375)
- Update setarch command arguments to use long options
([#&#8203;304](https://redirect.github.com/CodSpeedHQ/action/issues/304))
by [@&#8203;xtqqczze](https://redirect.github.com/xtqqczze) in
[#&#8203;304](https://redirect.github.com/CodSpeedHQ/runner/pull/304)
- Bump valgrind-codspeed to 3.26.0-0codspeed2
- Fix macOS rustup cache corruption in install-rust action by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;357](https://redirect.github.com/CodSpeedHQ/runner/pull/357)
- Give each bpf-tests shard its own cache key by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;358](https://redirect.github.com/CodSpeedHQ/runner/pull/358)
- Shard bpf-tests by integration test binary by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Use rustup show instead of toolchain install by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;349](https://redirect.github.com/CodSpeedHQ/runner/pull/349)
- Disable profiler in macos-basic-run-test by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Upload the basic run to validate auth of integration test by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Move samply fork from AvalancheHQ to CodSpeedHQ by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Remove the cursor hiding by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)

#### Install codspeed-runner 4.17.0

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-installer.sh | sh
```

#### Download codspeed-runner 4.17.0

| File | Platform | Checksum |
|
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
| ------------------- |
-------------------------------------------------------------------------------------------------------------------------------------
|
|
[codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-aarch64-apple-darwin.tar.gz)
| Apple Silicon macOS |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256)
|
|
[codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz)
| ARM64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256)
|
|
[codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz)
| x64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256)
|

**Full Runner Changelog**:
<https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md>

**Full Changelog**:
<https://github.com/CodSpeedHQ/action/compare/v4.15.1...v4.17.0>

</details>

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v6.0.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by
[@&#8203;yaananth](https://redirect.github.com/yaananth) in
[#&#8203;2439](https://redirect.github.com/actions/checkout/pull/2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by
[@&#8203;yaananth](https://redirect.github.com/yaananth) in
[#&#8203;2414](https://redirect.github.com/actions/checkout/pull/2414)

</details>

<details>
<summary>cross-platform-actions/action
(cross-platform-actions/action)</summary>

###
[`v1.2.0`](https://redirect.github.com/cross-platform-actions/action/releases/tag/v1.2.0):
Cross Platform Action 1.2.0

[Compare
Source](https://redirect.github.com/cross-platform-actions/action/compare/v1.1.0...v1.2.0)

##### Added

- Add support for OpenBSD 7.9
([#&#8203;144](https://redirect.github.com/cross-platform-actions/action/issues/144))

##### Changed

- Updated QEMU to 10.2.3

##### Security

- Bump resources to a release that use immutable releases, providing
  integrity verification for downloaded artifacts

([#&#8203;147](https://redirect.github.com/cross-platform-actions/action/issues/147))

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.81.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.4):
2.81.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.3...v2.81.4)

- Update `vacuum@latest` to 0.28.4.

- Update `typos@latest` to 1.47.1.

- Update `syft@latest` to 1.45.0.

- Update `cargo-neat@latest` to 0.4.0.

- Update `cargo-mutants@latest` to 27.1.0.

###
[`v2.81.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.3):
2.81.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.2...v2.81.3)

- Update `vacuum@latest` to 0.28.3.

- Update `uv@latest` to 0.11.18.

- Update `trivy@latest` to 0.71.0.

###
[`v2.81.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.2):
2.81.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.1...v2.81.2)

- Update `mise@latest` to 2026.5.18.

- Update `cargo-semver-checks@latest` to 0.48.0.

###
[`v2.81.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.1):
2.81.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.0...v2.81.1)

- Update `cargo-no-dev-deps@latest` to 0.2.24.

- Update `cargo-hack@latest` to 0.6.45.

###
[`v2.81.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.0):
2.81.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.80.0...v2.81.0)

- Support `convco`.
([#&#8203;1831](https://redirect.github.com/taiki-e/install-action/pull/1831),
thanks [@&#8203;graelo](https://redirect.github.com/graelo))

- Support `docgarden`
([#&#8203;1830](https://redirect.github.com/taiki-e/install-action/pull/1830),
thanks [@&#8203;jesse-black](https://redirect.github.com/jesse-black))

- Update `vacuum@latest` to 0.28.0.

- Update `cargo-binstall@latest` to 1.19.1.

###
[`v2.80.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.80.0):
2.80.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.15...v2.80.0)

- Support `kingfisher`.
([#&#8203;1874](https://redirect.github.com/taiki-e/install-action/pull/1874),
thanks [@&#8203;SAY-5](https://redirect.github.com/SAY-5))

###
[`v2.79.15`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.15):
2.79.15

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.14...v2.79.15)

- Update `typos@latest` to 1.47.0.

- Update `wasm-tools@latest` to 1.251.0.

- Update `vacuum@latest` to 0.27.2.

- Update `uv@latest` to 0.11.17.

- Update `tombi@latest` to 1.1.1.

- Update `mise@latest` to 2026.5.16.

###
[`v2.79.14`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.14):
2.79.14

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.13...v2.79.14)

- Update `vacuum@latest` to 0.27.0.

- Update `cargo-deny@latest` to 0.19.8.

###
[`v2.79.13`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.13):
2.79.13

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.12...v2.79.13)

- Update `gungraun-runner@latest` to 0.19.1.

- Update `biome@latest` to 2.4.16.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDkuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIwOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-07 16:33:16 +00:00
Boshen dc0e17404c chore(ci): bump codecov action to v7 (#23055)
## Summary

- Bump `codecov/codecov-action` from v6.0.1 to v7.0.0.
- Keep the action pinned to the peeled v7.0.0 commit SHA.
- Fix the uploader bootstrap failure caused by v6 importing the old
Codecov Keybase GPG key.

## Testing

- Not run; workflow-only change.

## AI Disclosure

This PR was created with AI assistance. The human contributor is
responsible for reviewing and validating the change before merge.
2026-06-07 11:36:37 +08:00
renovate[bot] ff71551a4c chore(deps): update typos to v1.47.2 (#23054)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| patch | `v1.47.1` → `v1.47.2` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.47.2`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.2)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.1...v1.47.2)

##### \[1.47.2] - 2026-06-04

##### Fixes

- Don't correct `inferrable`
- Correct unused `inferible` variant

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDkuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIwOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-07 01:45:02 +00:00
renovate[bot] 30c1f53634 chore(deps): update typos to v1.47.1 (#22998)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| patch | `v1.47.0` → `v1.47.1` | `v1.47.2` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.47.1`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.1)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.0...v1.47.1)

#### \[1.47.1] - 2026-06-03

##### Fixes

- Don't correct `requestors`

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDkuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIwOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-06 05:58:52 +00:00
Cameron f6f0fbf5d9 ci(ecosystem): share label trigger for app ci (#22906)
This is stacked on #22905.

The first PR moved Oxfmt ecosystem CI to a label-triggered workflow.
This follow-up keeps that approach, but avoids having one workflow file
per app. Instead, the Oxfmt-specific workflow is renamed to a shared
ecosystem CI dispatcher that handles both trigger labels:

- `run-oxlint-ecosystem-ci` dispatches `oxlint-ci.yml`
- `run-oxfmt-ecosystem-ci` dispatches `oxfmt-ci.yml`

The release-apps workflow now adds both labels to the generated release
PR, so Oxlint and Oxfmt take the same path: create or update the
tracking comment, dispatch the matching workflow in `oxc-ecosystem-ci`
with the PR ref, then remove the label that triggered the run.
2026-06-02 11:38:33 +09:00
Cameron 97e88a568f ci(oxfmt): trigger ecosystem ci via label (#22905)
The Oxfmt ecosystem CI trigger was still using `/oxfmt-ecosys` comment
command, while the newer monitor-oxc flow uses a short-lived PR label to
kick off the external workflow and then removes the label afterward.

This moves Oxfmt to the same pattern. Adding `run-oxfmt-ecosystem-ci` to
a PR now creates or updates the tracking comment, dispatches
`oxfmt-ci.yml` in `oxc-ecosystem-ci` with the PR ref, and removes the
trigger label after dispatch. The app release workflow now adds that
label to release PRs instead of directly creating the Oxfmt comment and
dispatching the external workflow itself.

Oxlint's release ecosystem dispatch is left as-is for now, since this
change is scoped to the Oxfmt workflow requested in the PR follow-up.
2026-06-02 11:14:36 +09:00
camc314 6d1b642e47 feat(ci): remove run-monitor-oxc trigger label after workflow dispatch (#22879) 2026-06-01 14:01:54 +00:00
renovate[bot] d968e76a9c chore(deps): update crate-ci/typos action to v1.47.0 (#22871)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| minor | `v1.46.3` → `v1.47.0` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.47.0`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.0)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.3...v1.47.0)

#### \[1.47.0] - 2026-05-29

##### Features

- Updated the dictionary with the [May
2026](https://redirect.github.com/crate-ci/typos/issues/1545) changes

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-01 06:29:36 +00:00
renovate[bot] 31a290a447 chore(deps): update github actions (#22863)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[oxc-project/security-action](https://redirect.github.com/oxc-project/security-action)
| action | patch | `v1.0.5` → `v1.0.7` | |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | patch | `v2.79.4` → `v2.79.12` | `v2.81.0` (+4) |

---

### Release Notes

<details>
<summary>oxc-project/security-action
(oxc-project/security-action)</summary>

###
[`v1.0.7`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.6...v1.0.7)

[Compare
Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.6...v1.0.7)

###
[`v1.0.6`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.5...v1.0.6)

[Compare
Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.5...v1.0.6)

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.79.12`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.12):
2.79.12

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.11...v2.79.12)

- Update `prek@latest` to 0.4.3.

- Remove uses of crates.io API, which potentially cases 403 error.

###
[`v2.79.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.11):
2.79.11

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.10...v2.79.11)

- Update `vacuum@latest` to 0.26.8.

- Update `cargo-nextest@latest` to 0.9.137.

###
[`v2.79.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.10):
2.79.10

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.9...v2.79.10)

- Update `tombi@latest` to 1.1.0.

- Update `prek@latest` to 0.4.2.

- Update `editorconfig-checker@latest` to 3.7.0.

###
[`v2.79.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.9):
2.79.9

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.8...v2.79.9)

- Update `vacuum@latest` to 0.26.7.

- Update `tombi@latest` to 1.0.0.

###
[`v2.79.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.8):
2.79.8

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.7...v2.79.8)

- Update `parse-dockerfile@latest` to 0.1.6.

- Update `knope@latest` to 0.23.0.

###
[`v2.79.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.7):
2.79.7

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.6...v2.79.7)

- Update `typos@latest` to 1.46.3.

- Update `rclone@latest` to 1.74.2.

- Update `mise@latest` to 2026.5.15.

- Update `tombi@latest` to 0.11.7.

###
[`v2.79.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.6):
2.79.6

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.5...v2.79.6)

- Update `wasm-bindgen@latest` to 0.2.122.

- Update `mise@latest` to 2026.5.14.

- Update `cargo-deny@latest` to 0.19.7.

- Update `vacuum@latest` to 0.26.6.

###
[`v2.79.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.5):
2.79.5

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.4...v2.79.5)

- Update `jaq@latest` to 3.0.0.
([#&#8203;1861](https://redirect.github.com/taiki-e/install-action/pull/1861),
thanks
[@&#8203;MusicalNinjaDad](https://redirect.github.com/MusicalNinjaDad))

- Update `wasmtime@latest` to 45.0.0.

- Update `wasm-tools@latest` to 1.250.0.

- Update `tombi@latest` to 0.11.6.

- Update `mise@latest` to 2026.5.13.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-31 21:28:27 +01:00
renovate[bot] c65e8ad545 chore(deps): update crate-ci/typos action to v1.46.3 (#22746)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| patch | `v1.46.2` → `v1.46.3` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.46.3`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.3)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.2...v1.46.3)

#### \[1.46.3] - 2026-05-23

##### Fixes

- Don't correct to `sequentials`
- Don't correct to `subdolder`

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-27 01:15:09 +00:00
Dunqing 577405266e chore(deps): update oxc-project/setup-rust to v1.0.17 (#22723)
## Summary

- Bumps `oxc-project/setup-rust` from `v1.0.16` → [`v1.0.17`](https://github.com/oxc-project/setup-rust/releases/tag/v1.0.17) across 12 workflow files.
- `v1.0.17` updates the transitive `Swatinem/rust-cache` pin to [`v2.9.1`](https://github.com/Swatinem/rust-cache/releases/tag/v2.9.1), which runs on `node24`.
- Clears the Node.js 20 deprecation warning emitted on every workflow run. Node 20 actions will be forced to `node24` on **2026-06-02** and removed on **2026-09-16**. See the [GitHub Actions changelog](https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/).

The two direct `Swatinem/rust-cache@c1937114 # v2.9.1` pins in `ci.yml` and `miri-windows.yml` were already on `node24` and don't need changing.
2026-05-25 14:38:27 +00:00
Boshen 38735dd3d8 ci(release_crates): use crates environment for trusted publishing (#22677)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-25 22:09:14 +08:00
Yuji Sugiura a4752b2ea5 fix(ci): Specify release-oxc --changelog flag (#22718)
- `cargo-release-oxc` v0.0.42 made changelog generation opt-in via
`--changelog`
  - oxc-project/cargo-release-oxc#236
- The `update` step no longer writes `./target/{NAME}_CHANGELOG`,
breaking both `Prepare Release Apps` and `Prepare Release Crates`
scheduled runs
-
https://github.com/oxc-project/oxc/actions/runs/26395995261/job/77696682742
-
https://github.com/oxc-project/oxc/actions/runs/26396139852/job/77697143129

Added `--changelog` to both `cargo release-oxc update` invocations to
restore previous behavior.
2026-05-25 20:06:08 +08:00
Dunqing d5d0cf345a ci(monitor-oxc): trigger via run-monitor-oxc PR label (#22712)
## Summary

Add `.github/workflows/monitor-oxc.yml`. When a maintainer adds the `run-monitor-oxc` label to a PR, the workflow posts a placeholder comment, mints a GitHub App token, and dispatches `ci.yml` on `oxc-project/monitor-oxc` with `issue-number`, `comment-id`, and `ref: refs/pull/N/head`. monitor-oxc's existing `comment` job then edits the placeholder in place with the per-suite result table.

Consolidates the duplicated dispatch logic in `prepare_release_crates.yml`: the standalone `ecosystem-ci` job (and the now-unused `outputs:` on `prepare`) is replaced by a single `labels: run-monitor-oxc` input on `peter-evans/create-pull-request`. Because the action creates the PR with the App token, attaching the label fires `pull_request: labeled` on `oxc-project/oxc` and re-enters the new workflow.

## Operational notes

- The `run-monitor-oxc` label needs to be created once in repo settings — proposed color `#55e1cc` (same as `run-bench`) with description "Add to a PR to dispatch oxc-project/monitor-oxc CI against it". The workflow's `if:` guard ignores the event when the label name doesn't match, so missing the label only means the workflow does nothing — no errors.
- The GitHub App is already authorized to dispatch into `monitor-oxc` (same `repositories: monitor-oxc` token mint used by the old `ecosystem-ci` job in `prepare_release_crates.yml`).
- One-shot: removing and re-adding the label dispatches a new run. Pushing new commits while the label is still attached does **not** auto-retrigger.

## Behavior delta for release-prep flow

- *Before:* dispatch passed no `ref`, so monitor-oxc defaulted to `main` and tested `oxc-project/oxc@main` as of dispatch time (pre version-bump).
- *After:* dispatch passes `refs/pull/N/head`, so monitor-oxc tests the release PR branch (main + version-bump commit).

Version-bump commits only touch `Cargo.toml` / `package.json` versions — no transformer/codegen/etc. code paths. So monitor-oxc's results are functionally identical; arguably slightly better since it tests the exact code that ships.
2026-05-25 09:46:10 +00:00
renovate a71fedd39c chore(deps): update taiki-e/install-action action to v2.79.4 (#22704)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.79.3` → `v2.79.4` | `v2.79.7` (+2) |

---

### Release Notes

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

### [`v2.79.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.4): 2.79.4

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.3...v2.79.4)

- Update `martin@latest` to 1.10.1.

- Update `prek@latest` to 0.4.1.

- Update `protoc@latest` to 3.35.0.

- Update `mdbook@latest` to 0.5.3.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
2026-05-25 09:36:10 +00:00
Boshen d1cd344b5a chore(deps): update cargo-shear to 1.12.4 (#22706)
## Summary

- Bump `cargo-shear` from `1.11.2` to `1.12.4` in `justfile`,
`.github/workflows/autofix.yml`, and
`.github/workflows/copilot-setup-steps.yml`.
- Enable `--check-test-targets` (new in 1.12.0) in `just fmt` and the
autofix CI step to flag `test`/`doctest` target settings that don't
match source content; pairs with `--fix` to auto-reconcile.
- Enable `--deny-warnings` and `--format=github` in the autofix CI step
so warnings fail the job (triggering the existing autofix push) and
findings surface as inline PR annotations.
2026-05-25 13:33:54 +08:00
renovate[bot] 6a338b7327 chore(deps): update github actions (#22698)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[benc-uk/workflow-dispatch](https://redirect.github.com/benc-uk/workflow-dispatch)
| action | patch | `v1.3.1` → `v1.3.2` | |
|
[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)
| action | patch | `v6.0.0` → `v6.0.1` | |
|
[cross-platform-actions/action](https://redirect.github.com/cross-platform-actions/action)
| action | minor | `v1.0.0` → `v1.1.0` | |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.78.0` → `v2.79.3` | `v2.79.7` (+3) |

---

### Release Notes

<details>
<summary>benc-uk/workflow-dispatch (benc-uk/workflow-dispatch)</summary>

###
[`v1.3.2`](https://redirect.github.com/benc-uk/workflow-dispatch/releases/tag/v1.3.2)

[Compare
Source](https://redirect.github.com/benc-uk/workflow-dispatch/compare/v1.3.1...v1.3.2)

##### What's changed since v1.3.1

##### Added

- New `wait-interval-seconds` input to control how often the action
polls when `wait-for-completion: true`.
([#&#8203;98](https://redirect.github.com/benc-uk/workflow-dispatch/issues/98))

##### Fixed

- Pass `X-GitHub-Api-Version: 2026-03-10` on the dispatch and run-status
REST calls. Removes the GitHub REST API deprecation warning emitted on
every run and makes behaviour deterministic against future
default-version changes.
([#&#8203;103](https://redirect.github.com/benc-uk/workflow-dispatch/issues/103),
fixes
[#&#8203;99](https://redirect.github.com/benc-uk/workflow-dispatch/issues/99))

##### Docs

- Document the existing `sync-status` input.
([#&#8203;93](https://redirect.github.com/benc-uk/workflow-dispatch/issues/93))
- Document `wait-interval-seconds` in the README.
([#&#8203;100](https://redirect.github.com/benc-uk/workflow-dispatch/issues/100))
- Fix typo in README for the `wait-for-completion` option.
([#&#8203;101](https://redirect.github.com/benc-uk/workflow-dispatch/issues/101))

##### Notes

- No breaking changes. No changes to `action.yaml` inputs/outputs beyond
what was already in v1.3.1.
- The floating `v1` and `v1.3` tags have been moved to point at
`v1.3.2`.

**Full changelog**:
<https://github.com/benc-uk/workflow-dispatch/compare/v1.3.1...v1.3.2>

</details>

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v6.0.1`](https://redirect.github.com/codecov/codecov-action/releases/tag/v6.0.1)

[Compare
Source](https://redirect.github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1)

#### What's Changed

- fix: prevent template injection in run: steps (VULN-1652) by
[@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov)
in
[#&#8203;1947](https://redirect.github.com/codecov/codecov-action/pull/1947)
- chore(release): 6.0.1 by
[@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov)
in
[#&#8203;1949](https://redirect.github.com/codecov/codecov-action/pull/1949)

**Full Changelog**:
<https://github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1>

</details>

<details>
<summary>cross-platform-actions/action
(cross-platform-actions/action)</summary>

###
[`v1.1.0`](https://redirect.github.com/cross-platform-actions/action/releases/tag/v1.1.0):
Cross Platform Action 1.1.0

[Compare
Source](https://redirect.github.com/cross-platform-actions/action/compare/v1...v1.1.0)

##### Added

- Add support for DragonFly BSD
([#&#8203;19](https://redirect.github.com/cross-platform-actions/action/issues/19))

- Add support for MidnightBSD
([#&#8203;102](https://redirect.github.com/cross-platform-actions/action/issues/102))

- Add support for FreeBSD 14.4
([#&#8203;122](https://redirect.github.com/cross-platform-actions/action/issues/122))

- Add support for OmniOS r151058

- New syntax for multiple steps
([#&#8203;83](https://redirect.github.com/cross-platform-actions/action/issues/83)).
Instead of invoking the action multiple times it's now possible to use a
  custom shell when running commands:

  ```yaml
  jobs:
    custom-shell:
      runs-on: ubuntu-latest
      defaults:
        run:
          shell: cpa.sh {0}

      steps:
        - name: Start VM
          uses: cross-platform-actions/action@master
          with:
            operating_system: freebsd
            architecture: x86-64
            version: '15.0'

        - name: Run command using custom shell
          run: '[ "`uname`" = FreeBSD ]'
  ```

  Each custom-shell step automatically synchronizes files in both
  directions: runner-to-vm before the step runs and vm-to-runner after.
  Pass `--sync-files DIRECTION` after the file argument to change this
  (`both` (default), `none` (skip sync), `runner-to-vm`, or
  `vm-to-runner`), or use `cpa.sh --sync-files` standalone to sync on
  demand without running a command:

  ```yaml
  - name: Sync files from runner to VM
    run: cpa.sh --sync-files runner-to-vm
  ```

- Reboot mode for rebooting the VM and waiting for it to come back up

([#&#8203;103](https://redirect.github.com/cross-platform-actions/action/issues/103),

[#&#8203;118](https://redirect.github.com/cross-platform-actions/action/issues/118)).
`cpa.sh --reboot` issues the reboot and blocks until the VM is reachable
  again:

  ```yaml
  - name: Reboot VM
    run: cpa.sh --reboot
  ```

##### Security

- Bump builders to releases that use immutable releases, providing
  integrity verification for downloaded artifacts

([#&#8203;140](https://redirect.github.com/cross-platform-actions/action/issues/140))

##### Deprecated

- The `run` input parameter has been deprecated and is now optional. Use
the
custom shell (`shell: cpa.sh {0}`) in subsequent steps to run commands
in
  the virtual machine instead.

- The `shutdown_vm` input parameter has been deprecated and will be
removed
in a future release. There is no replacement. When unset, it now
defaults
  to `true` if the `run` parameter is provided (preserving the legacy
behavior) and `false` otherwise (so the VM stays alive across subsequent
  custom-shell steps without needing to specify it).

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.79.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.3):
2.79.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.2...v2.79.3)

- Update `mise@latest` to 2026.5.12.

- Update `martin@latest` to 1.10.0.

- Update `uv@latest` to 0.11.15.

###
[`v2.79.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.2):
2.79.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.1...v2.79.2)

- Update `mise@latest` to 2026.5.11.

- Update `vacuum@latest` to 0.26.5.

- Update `cargo-shear@latest` to 1.12.4.

###
[`v2.79.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.1):
2.79.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.0...v2.79.1)

- Update `tombi@latest` to 0.11.5.

- Update `cargo-nextest@latest` to 0.9.136.

- Update `typos@latest` to 1.46.2.

- Update `mise@latest` to 2026.5.10.

###
[`v2.79.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.0):
2.79.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.78.3...v2.79.0)

- Support more host architectures.
([#&#8203;1841](https://redirect.github.com/taiki-e/install-action/pull/1841),
thanks [@&#8203;Gelbpunkt](https://redirect.github.com/Gelbpunkt))

- Deprecate `mdbook-alerts` because the feature now included in `mdbook`
and the
[repository](https://redirect.github.com/lambdalisue/rs-mdbook-alerts)
has been archived.
([#&#8203;1844](https://redirect.github.com/taiki-e/install-action/pull/1844))

- Deprecate `iai-callgrind-runner` because it has been
[renamed](https://redirect.github.com/gungraun/gungraun/releases/tag/v0.17.0)
to `gungraun-runner`. `gungraun-runner` is also supported by this
action.
([#&#8203;1844](https://redirect.github.com/taiki-e/install-action/pull/1844))

###
[`v2.78.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.78.3):
2.78.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.78.2...v2.78.3)

- Update `zizmor@latest` to 1.25.2.

- Update `cargo-zigbuild@latest` to 0.22.3.
([#&#8203;1814](https://redirect.github.com/taiki-e/install-action/pull/1814),
thanks
[@&#8203;simonhollingshead](https://redirect.github.com/simonhollingshead))

- Update `wasm-tools@latest` to 1.249.0.

- Update `gungraun-runner@latest` to 0.19.0.

###
[`v2.78.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.78.2):
2.78.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.78.1...v2.78.2)

- Update `wasm-pack@latest` to 0.15.0.

- Update `zizmor@latest` to 1.25.0.

- Update `mise@latest` to 2026.5.9.

- Update `cargo-nextest@latest` to 0.9.135.

- Update `cyclonedx@latest` to 0.32.0.

- Update `prek@latest` to 0.4.0.

###
[`v2.78.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.78.1):
2.78.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.78.0...v2.78.1)

- Update `mise@latest` to 2026.5.7.

- Diagnostic improvements.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-24 20:50:28 +00:00
camc314 779e769ba4 fix(ci): setup node for oxfmt conformance (#22690)
This fixes the failing `Test NAPI Oxfmt` CI job:

https://github.com/oxc-project/oxc/actions/runs/26337525454/job/77533653139

`Test NAPI Oxfmt` has two separate change filters: one for the normal Oxfmt npm tests and one for Oxfmt conformance. `setup-node` was only guarded by the normal test filter, but the conformance steps also run `pnpm`.

In the failed run, the normal Oxfmt filter skipped, so `setup-node` was skipped too. The conformance filter still allowed the conformance fixture step to run, and that failed with `pnpm: command not found`.

This updates the Oxfmt job so `setup-node` runs when either the normal Oxfmt tests or the Oxfmt conformance steps need to run. The final diff check now uses the same combined condition.
2026-05-24 11:32:43 +00:00
Yuji Sugiura 42e448fa2b ci(track-memory-allocations): Run ci on task change (#22614)
Re-generates the snapshots for tracking memory allocations as they were outdated.

Updates CI to ensure that the `allocs` job runs on any changes to `tasks/track_memory_allocations/` to prevent the snapshots from becoming stale again.

---------

Signed-off-by: Cameron <cameron.clark@hey.com>
Co-authored-by: Cameron <cameron.clark@hey.com>
2026-05-21 08:45:19 +01:00
camc314 0a22fd4e01 refactor(ci/issue-close-require): use gh cli over external dependency (#22575) 2026-05-20 01:26:03 +00:00
Cameron 93a516011a refactor(ci/issue-labeled): use gh cli over external dependency (#22574) 2026-05-20 10:24:50 +09:00
renovate[bot] 987046b992 chore(deps): update crate-ci/typos action to v1.46.2 (#22607)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| patch | `v1.46.1` → `v1.46.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the warning logs for
more information.

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.46.2`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.2)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.1...v1.46.2)

#### \[1.46.2] - 2026-05-16

##### Fixes

- Don't correct to `criterias`
- Don't correct to `replaceables`

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xODUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-20 01:06:32 +00:00
leaysgur 37d49fcd40 refactor(oxlint,oxfmt): Share src-js code via apps/shared (#22452)
New place to share code for use in `src-js`, similar to how `crates/oxc_config` works.

Initially, I considered creating an `apps/oxc_cli` and moving `crates/oxc_config` there. However, it felt unnatural deps for `crates/oxc_linter` -> `apps/oxc_cli`, so I decided to keep the Rust code as is for now and share only the JS code.

Since `apps/shared` exports `.ts` files directly, each app is responsible for bundling them via `@oxapps/shared`. Tests still live in `apps/shared`, so separate CI is also added and hooked by each app.

To start, I've only shared the function that reports TS incompatibility errors. This is just for verification purposes and will be fixed in a later PR.
2026-05-18 07:56:26 +00:00
renovate[bot] e700bd35ed chore(deps): update github actions (#22506)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token)
| action | minor | `v3.1.1` → `v3.2.0` | |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.77.1` → `v2.78.0` | `v2.79.0` (+3) |

---

### Release Notes

<details>
<summary>actions/create-github-app-token
(actions/create-github-app-token)</summary>

###
[`v3.2.0`](https://redirect.github.com/actions/create-github-app-token/releases/tag/v3.2.0)

[Compare
Source](https://redirect.github.com/actions/create-github-app-token/compare/v3.1.1...v3.2.0)

##### Features

- add support for enterprise-level GitHub Apps
([#&#8203;263](https://redirect.github.com/actions/create-github-app-token/issues/263))
([952a2a7](https://redirect.github.com/actions/create-github-app-token/commit/952a2a7073df6bfa5f49bc469ec895b6ec1acea4))
- support full repository names in `repositories` input
([#&#8203;372](https://redirect.github.com/actions/create-github-app-token/issues/372))
([85eb8dd](https://redirect.github.com/actions/create-github-app-token/commit/85eb8dd41472213aed25d1a126460e0069138ab6))

##### Bug Fixes

- **deps:** bump
[@&#8203;actions/core](https://redirect.github.com/actions/core) from
3.0.0 to 3.0.1 in the production-dependencies group
([#&#8203;364](https://redirect.github.com/actions/create-github-app-token/issues/364))
([43e5c34](https://redirect.github.com/actions/create-github-app-token/commit/43e5c345bfd4d4f3ecea019ad0042001a09dd857))
- validate private-key input
([#&#8203;376](https://redirect.github.com/actions/create-github-app-token/issues/376))
([f24bbd8](https://redirect.github.com/actions/create-github-app-token/commit/f24bbd89643991c0de27ae823c01791b2c6bafdd))

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.78.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.78.0):
2.78.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.7...v2.78.0)

- Support `cargo-mutants`.
([#&#8203;1812](https://redirect.github.com/taiki-e/install-action/pull/1812),
thanks [@&#8203;jakewimmer](https://redirect.github.com/jakewimmer))

- Update `covgate@latest` to 0.2.0.

- Update `cargo-llvm-cov@latest` to 0.8.7.

- Update `uv@latest` to 0.11.14.

- Update `martin@latest` to 1.9.1.

- Update `tombi@latest` to 0.11.4.

###
[`v2.77.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.7):
2.77.7

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.6...v2.77.7)

- Update `mise@latest` to 2026.5.6.

- Update `cargo-deny@latest` to 0.19.6.

###
[`v2.77.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.6):
2.77.6

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.5...v2.77.6)

- Fix `wasm-pack` installation failure.

- Update `mise@latest` to 2026.5.5.

- Update `release-plz@latest` to 0.3.158.

- Update `just@latest` to 1.51.0.

###
[`v2.77.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.5):
2.77.5

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.4...v2.77.5)

- Update `biome@latest` to 2.4.15.

- Update `mise@latest` to 2026.5.4.

- Update `cargo-deny@latest` to 0.19.5.

###
[`v2.77.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.4):
2.77.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.3...v2.77.4)

- Update `tombi@latest` to 0.11.1.

- Update `cargo-llvm-cov@latest` to 0.8.6.

- Update `uv@latest` to 0.11.12.

###
[`v2.77.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.3):
2.77.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.2...v2.77.3)

- Update `typos@latest` to 1.46.1.

- Update `rclone@latest` to 1.74.1.

- Update `tombi@latest` to 0.11.0.

- Update `osv-scanner@latest` to 2.3.8.

- Update `mise@latest` to 2026.5.3.

###
[`v2.77.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.2):
2.77.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.1...v2.77.2)

- Update `martin@latest` to 1.9.0.

- Update `wasm-bindgen@latest` to 0.2.121.

- Update `uv@latest` to 0.11.11.

- Update `mise@latest` to 2026.5.1.

- Update `prek@latest` to 0.3.13.

- Update `tombi@latest` to 0.10.6.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzkuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-17 18:21:17 +01:00
overlookmotel 64a7c11ebe fix(ci): prevent corrupt caches on CI on Mac OS (#22485)
"CI: Test Mac" task has been failing often on main branch since we switched to Namespace runners. Cause is creation of a faulty cache, which then gets picked up on next run.

According to Claude this should fix it. Explanation in comment in the diff.
2026-05-16 17:51:52 +00:00
leaysgur 70a1e2a81e ci(oxlint): Run oxlint-napi-test on oxc_config change (#22449) 2026-05-15 09:10:13 +00:00
overlookmotel f5ed139a57 ci(miri): run oxc_allocator tests with Miri on Windows (#22121)
Run the tests for `oxc_allocator` under Miri on Windows on CI.

Set to run on all PRs which touch `oxc_allocator`'s code, but not any other crates.

This is preparation for Windows-specific changes to fixed-size allocators, which contain complex unsafe code.
2026-05-14 22:26:40 +00:00
Brooooooklyn 80558c3633 fix(ci): unset TARGET_CC for *-pc-windows-msvc targets (#22344)
## Summary

`Build Oxlint/Oxfmt aarch64-pc-windows-msvc` jobs in `Release Apps` have been failing while compiling `libmimalloc-sys2`:

```
c_src/mimalloc/include/mimalloc/atomic.h:230:14: error: call to undeclared function '__ldar64'
c_src/mimalloc/include/mimalloc/atomic.h:252:7:  error: call to undeclared function '__stlr64'
c_src/mimalloc/include/mimalloc/atomic.h:273:14: error: call to undeclared function '__ldar64'
c_src/mimalloc/include/mimalloc/atomic.h:298:7:  error: call to undeclared function '__stlr64'
error: failed to run custom build command for `libmimalloc-sys2 v0.1.55`
```

(see [this run](https://github.com/oxc-project/oxc/actions/runs/25678327792/job/75390244216))

### Root cause

Three workflow files (`release_apps.yml` and `reusable_release_napi.yml`) set `TARGET_CC: clang # for mimalloc` at job level, applying it to *every* matrix entry — including `aarch64-pc-windows-msvc`.

On `aarch64-pc-windows-msvc`:

1. cc-rs picks `clang` (not `cl.exe`, not `clang-cl`).
2. `libmimalloc-sys/build.rs` only flips `cpp(true)` when `is_like_msvc()` is true, which is **false** for plain `clang` — so `static.c` is compiled as C.
3. clang targeting `*-pc-windows-msvc` defines `_MSC_VER` (for Windows SDK header compatibility), so `mimalloc/atomic.h` takes the `#elif defined(_MSC_VER)` branch.
4. That branch's ARM64 path calls `__ldar64`/`__stlr64` — MSVC-only intrinsics that clang does not provide → compile error.

The x86_64/i686 MSVC builds pass because the x86 atomic path uses `__iso_volatile_load`/`__iso_volatile_store`, which clang does provide. Only ARM64 hits the missing intrinsics.

### Fix

Skip `TARGET_CC=clang` on all `*-pc-windows-msvc` targets so cc-rs falls back to `cl.exe`, which:

- has the `__ldar64`/`__stlr64` intrinsics, and
- triggers `libmimalloc-sys/build.rs`'s `is_like_msvc()` check, which switches the C build to C++ — taking the `std::atomic` branch in `atomic.h`.

This matches what [napi-rs/mimalloc-safe's own CI](https://github.com/napi-rs/mimalloc-safe/blob/main/.github/workflows/CI.yml#L208-L217) does: `TARGET_CC=clang` is only set on `*-gnu*` cross builds.

## Test plan

- [ ] `Release Apps` workflow runs successfully on a release that touches `npm/oxlint/package.json` or `npm/oxfmt/package.json`, including the `aarch64-pc-windows-msvc` matrix entries.
- [ ] `Build *-pc-windows-msvc` jobs in the napi reusable workflow pass.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Touches release CI workflows and alters compiler selection for Windows MSVC matrix entries; while small, it can impact build outputs and release automation if misconfigured.
>
> **Overview**
> Prevents Windows MSVC (notably ARM64) release builds from forcing `TARGET_CC=clang`, which was breaking `mimalloc` compilation.
>
> Updates the `Release Apps` (`oxlint`/`oxfmt`) and reusable NAPI release workflows to set `TARGET_CC` to `clang` only for non-`*-pc-windows-msvc` targets, leaving it unset so `cc-rs` falls back to `cl.exe` on MSVC.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 8b2cab00b89fb48fea5229bc61951525648b6525. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
2026-05-12 07:27:09 +00:00
renovate de23fb3b4e chore(deps): update crate-ci/typos action to v1.46.1 (#22327)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action | patch | `v1.46.0` → `v1.46.1` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

### [`v1.46.1`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.1)

[Compare Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.0...v1.46.1)

#### \[1.46.1] - 2026-05-08

##### Fixes

- Don't correct to `confidentials`

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
2026-05-11 14:46:47 +00:00
leaysgur 5558219a11 ci(oxfmt): Separate test filter and conformance filter (#22307) 2026-05-11 08:38:58 +00:00
leaysgur 892ab7e91b ci(oxfmt): Run oxfmt tests on oxc_(formatter|config) change (#22301) 2026-05-11 08:17:01 +00:00
leaysgur fe9eac3847 test(oxfmt): Run conformance on CI (#22298)
For caching fixtures, use nscloud along with the others, also utilizes internal `.digit` directory.
2026-05-11 07:23:46 +00:00
renovate f2e88df9cd chore(deps): update github actions (#22291)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | patch | `v4.15.0` → `v4.15.1` |  |
| [actions/labeler](https://redirect.github.com/actions/labeler) | action | minor | `v6.0.1` → `v6.1.0` |  |
| [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.3` → `v1.0.5` |  |
| [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | minor | `v2.75.27` → `v2.77.1` | `v2.77.4` (+2) |

---

### Release Notes

<details>
<summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary>

### [`v4.15.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.15.1)

[Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.15.0...v4.15.1)

#### Release Notes

##### <!-- 0 -->🚀 Features

- Add a way to disable perf compression through env var by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&#8203;334](https://redirect.github.com/CodSpeedHQ/runner/pull/334)
- Do not display the comparison nudge when not in an interactive terminal by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&#8203;300](https://redirect.github.com/CodSpeedHQ/runner/pull/300)
- Display a warning when profiling generation failed by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Detect and abort on ring buffer overflow by [@&#8203;not-matthias](https://redirect.github.com/not-matthias) in [#&#8203;321](https://redirect.github.com/CodSpeedHQ/runner/pull/321)
- Grow ring buffer to 16 MiB by [@&#8203;not-matthias](https://redirect.github.com/not-matthias)

##### <!-- 7 -->⚙️ Internals

- chore: bump runner version to 4.15.1 by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;205](https://redirect.github.com/CodSpeedHQ/action/pull/205)
- Increase stack sampling for python by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&#8203;337](https://redirect.github.com/CodSpeedHQ/runner/pull/337)
- Replace hard coded lint job for a dedicated check action by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#&#8203;320](https://redirect.github.com/CodSpeedHQ/runner/pull/320)
- Bump cpp-linter-hooks to support darwin by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Swap pre-commit action for prek by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Fix unused clippy errors in test targets on macos by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Run pre-commit hooks on macos and ubuntu-latest by [@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)

#### Install codspeed-runner 4.15.1

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-installer.sh | sh
```

#### Download codspeed-runner 4.15.1

| File                                                                                                                                                                    | Platform            | Checksum                                                                                                                              |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
| [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-apple-darwin.tar.gz)             | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256)       |
| [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux    | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz)  | x64 MUSL Linux      | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256)  |

**Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md>

**Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.15.0...v4.15.1>

</details>

<details>
<summary>actions/labeler (actions/labeler)</summary>

### [`v6.1.0`](https://redirect.github.com/actions/labeler/releases/tag/v6.1.0)

[Compare Source](https://redirect.github.com/actions/labeler/compare/v6.0.1...v6.1.0)

#### Enhancements

- Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by [@&#8203;bluca](https://redirect.github.com/bluca) in [#&#8203;923](https://redirect.github.com/actions/labeler/pull/923)

#### Bug Fixes

- Improve Labeler Action documentation and permission error handling by [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#&#8203;897](https://redirect.github.com/actions/labeler/pull/897)
- Preserve manually added labels during workflow runs and refine label synchronization logic by [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#&#8203;917](https://redirect.github.com/actions/labeler/pull/917)

#### Dependency Updates

- Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;877](https://redirect.github.com/actions/labeler/pull/877)
- Upgrade minimatch from 10.0.1 to 10.2.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;926](https://redirect.github.com/actions/labeler/pull/926)
- Upgrade dependencies ([@&#8203;actions/core](https://redirect.github.com/actions/core), [@&#8203;actions/github](https://redirect.github.com/actions/github), js-yaml, minimatch, [@&#8203;typescript-eslint](https://redirect.github.com/typescript-eslint)) by [@&#8203;Copilot](https://redirect.github.com/Copilot) in [#&#8203;934](https://redirect.github.com/actions/labeler/pull/934)

#### New Contributors

- [@&#8203;chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#&#8203;897](https://redirect.github.com/actions/labeler/pull/897)
- [@&#8203;bluca](https://redirect.github.com/bluca) made their first contribution in [#&#8203;923](https://redirect.github.com/actions/labeler/pull/923)
- [@&#8203;Copilot](https://redirect.github.com/Copilot) made their first contribution in [#&#8203;934](https://redirect.github.com/actions/labeler/pull/934)

**Full Changelog**: <https://github.com/actions/labeler/compare/v6...v6.1.0>

</details>

<details>
<summary>oxc-project/security-action (oxc-project/security-action)</summary>

### [`v1.0.5`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.4...v1.0.5)

[Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.4...v1.0.5)

### [`v1.0.4`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.3...v1.0.4)

[Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.3...v1.0.4)

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

### [`v2.77.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.1): 2.77.1

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.0...v2.77.1)

- Support `taiki-e/install-action@rust` tag.

- Update `tombi@latest` to 0.10.3.

- Update `martin@latest` to 1.8.2.

### [`v2.77.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.0): 2.77.0

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.76.0...v2.77.0)

- Support `rust`. ([#&#8203;1779](https://redirect.github.com/taiki-e/install-action/pull/1779))

  This installs rust using rustup.

  If rustup is not yet installed, this action downloads [rustup-init for the current platform](https://rust-lang.github.io/rustup/installation/other.html#manual-installation) using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

  This also supports installing additional components at the same time by `+<additional>` syntax:

  ```yaml
  - uses: taiki-e/install-action@v2
    with:
      # Install rust stable with rustfmt component and wasm32-wasip1 target.
      tool: rust+rustfmt+wasm32-wasip1
      # When installing another rust version:
      # tool: rust@nightly + rustfmt + wasm32-wasip1
  ```

- Fix issue where x86\_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.

- Update `mise@latest` to 2026.5.0.

- Diagnostic improvements.

### [`v2.76.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.76.0): 2.76.0

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.30...v2.76.0)

- Support `mdbook-d2`. ([#&#8203;1737](https://redirect.github.com/taiki-e/install-action/pull/1737), thanks [@&#8203;nhu](https://redirect.github.com/nhu))

- Support `cargo-apple-runner`. ([#&#8203;1731](https://redirect.github.com/taiki-e/install-action/pull/1731), thanks [@&#8203;madsmtm](https://redirect.github.com/madsmtm))

- Support `cargo-binstall` on riscv64 Linux.

- Update `cargo-deb@latest` to 3.7.0.

- Update `tombi@latest` to 0.10.2.

### [`v2.75.30`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.30): 2.75.30

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.29...v2.75.30)

- Support `cargo-spellcheck` on AArch64 Linux/Windows.

- Update `cargo-spellcheck@latest` to 0.15.7.

- Update `biome@latest` to 2.4.14.

### [`v2.75.29`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.29): 2.75.29

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.28...v2.75.29)

- Update `syft@latest` to 1.44.0.

- Update `rclone@latest` to 1.74.0.

- Update `osv-scanner@latest` to 2.3.6.

### [`v2.75.28`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.28): 2.75.28

[Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.27...v2.75.28)

- Update `wasmtime@latest` to 44.0.1.

- Update `typos@latest` to 1.46.0.

- Update `tombi@latest` to 0.10.1.

- Update `sccache@latest` to 0.15.0.

- Update `mise@latest` to 2026.4.28.

- Update `gungraun-runner@latest` to 0.18.2.

- Update `cyclonedx@latest` to 0.31.0.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
2026-05-10 19:19:23 +00:00
yoshi-taka af27cf9576 perf(ci): use filter blob:none for release metadata checkout (#22105)
## Summary

Use `filter: blob:none` for checkout in `release_apps.yml`.

This workflow builds release artifacts across many targets, so it still
needs the working tree at `HEAD`. The goal here is not to avoid checking
out source files, but to avoid downloading unnecessary historical blobs
during checkout.

## Why

The release workflow checks out the repository in several jobs before
building oxlint artifacts. A blobless partial clone keeps commits and
trees available while omitting blobs that are not needed unless a later
Git operation asks for them.

This should reduce checkout transfer size without changing the build
behavior.

## Notes

- The working tree for `HEAD` is still available.
- If a later step needs a missing blob from history, Git can fetch it
lazily.
- No functional change intended.

## Verification

- Release workflow checkout succeeds.
- Build steps continue to run against the checked-out source tree.

## AI Disclosure

This change was identified using my CI analysis tool:
https://github.com/yoshi-taka/ci-perf-lint

The patch and reasoning were validated manually.

Parts of this PR description were assisted by AI.
2026-05-07 14:35:43 +08:00
overlookmotel e6ddc9cf09 ci(pr): restore PR labeling for internal PRs (#21962)
#21566 removed PR labelling for security reasons - it used
`pull_request_target` event, which is a security hazard.

I noticed its absense, and missed it! Have been labelling all my PRs by
hand.

Restore PR labelling only for "internal" PRs. This can work with
`pull_request` target.

I've added it as a separate workflow `pr-label.yml`, instead of adding
it back to the `pr.yml` workflow, so that the `pull-requests: write`
permission is scoped just to the job that needs it. "Check PR Title"
doesn't need this permission.

Claude tells me we could also support labelling external PRs by using
`workflow_run` event instead:

> `workflow_run` runs in base-repo context with a write token, and
avoids `pull_request_target`'s privileged-context hazard.

But I'm not confident enough in what he's saying, or in my own GitHub
Actions chops, to propose that. So this is a "middle way" which I think
is less risky.
2026-05-06 10:15:06 +08:00
camc314 ed9b4933ad feat(ci): require full insta snapshot match (#22136)
this prevents the old format of the insta snapshot from being merged as a PR, and enforces that only the newer version is supported.

This should prevent unecessary diffs and prevent PRs such as #22135.

~Note: it's expected that the CI will fail on this PR until #22135 is merged~
2026-05-05 09:43:17 +00:00
camc314 9d385e9b89 fix(ci/release-apps): skip validate rule versions if no new release (#22112)
`Validate rule versions` now runs only when the oxlint package version changed. This avoids running oxlint rule-version validation for releases that only update other app packages.

This should pervent failures such as https://github.com/oxc-project/oxc/actions/runs/25299302016/job/74163331967
2026-05-04 10:57:29 +00:00
renovate[bot] 0679c008d5 chore(deps): update github actions (#22099)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) |
action | minor | `v4.14.0` → `v4.15.0` | |
|
[oxc-project/security-action](https://redirect.github.com/oxc-project/security-action)
| action | patch | `v1.0.2` → `v1.0.3` | |
|
[oxc-project/setup-node](https://redirect.github.com/oxc-project/setup-node)
| action | minor | `v1.2.0` → `v1.3.0` | |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | patch | `v2.75.22` → `v2.75.27` | `v2.75.30` (+2) |

---

### Release Notes

<details>
<summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary>

###
[`v4.15.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.15.0)

[Compare
Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.14.0...v4.15.0)

#### Release Notes

This release adds first support for macOS walltime.

Please note that profiling and other instruments are not yet available
on macOS and will come in a later update.

##### Minimum integration versions

- [`pytest-codspeed`
v4.5.0](https://redirect.github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.5.0)
- [`codspeed-rust`
v4.6.0](https://redirect.github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.6.0)
- [`codspeed-cpp`
v2.3.0](https://redirect.github.com/CodSpeedHQ/codspeed-cpp/releases/tag/v2.3.0)
- [`codspeed-go`
v1.2.0](https://redirect.github.com/CodSpeedHQ/codspeed-go/releases/tag/v1.2.0)
- [`codspeed-node`
v5.4.0](https://redirect.github.com/CodSpeedHQ/codspeed-node/releases/tag/v5.4.0)

##### <!-- 0 -->🚀 Features

- Revert logo changes by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Display N/A rather than NaN/inf in the benchmarks results table by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;314](https://redirect.github.com/CodSpeedHQ/runner/pull/314)
- Only wrap walltime command with sudo on linux by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Add `--with-token` flag to read token from stdin by
[@&#8203;fargito](https://redirect.github.com/fargito) in
[#&#8203;313](https://redirect.github.com/CodSpeedHQ/runner/pull/313)
- Warn when libc debug info is not found by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;310](https://redirect.github.com/CodSpeedHQ/runner/pull/310)
- Resolve debug info and symbols from separate debug files by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;303](https://redirect.github.com/CodSpeedHQ/runner/pull/303)

##### <!-- 6 -->🧪 Testing

- Add libc debuglink/build-id fixtures by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Add stripped binary and debug file test fixtures by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)

##### <!-- 7 -->⚙️ Internals

- chore: bump runner version to 4.15.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;204](https://redirect.github.com/CodSpeedHQ/action/pull/204)
- Bump exec-harness version
- Add macos basic run test by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;319](https://redirect.github.com/CodSpeedHQ/runner/pull/319)
- Remove DumpPerfMapAtExit in favor of custom dumper by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;295](https://redirect.github.com/CodSpeedHQ/runner/pull/295)

#### Install codspeed-runner 4.15.0

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-installer.sh | sh
```

#### Download codspeed-runner 4.15.0

| File | Platform | Checksum |
|
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
| ------------------- |
-------------------------------------------------------------------------------------------------------------------------------------
|
|
[codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-apple-darwin.tar.gz)
| Apple Silicon macOS |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256)
|
|
[codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz)
| ARM64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256)
|
|
[codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz)
| x64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256)
|

**Full Runner Changelog**:
<https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md>

**Full Changelog**:
<https://github.com/CodSpeedHQ/action/compare/v4.14.0...v4.15.0>

</details>

<details>
<summary>oxc-project/security-action
(oxc-project/security-action)</summary>

###
[`v1.0.3`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.2...v1.0.3)

[Compare
Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.2...v1.0.3)

</details>

<details>
<summary>oxc-project/setup-node (oxc-project/setup-node)</summary>

###
[`v1.3.0`](https://redirect.github.com/oxc-project/setup-node/compare/v1.2.0...v1.3.0)

[Compare
Source](https://redirect.github.com/oxc-project/setup-node/compare/v1.2.0...v1.3.0)

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.75.27`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.27):
2.75.27

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.26...v2.75.27)

- Update `cargo-udeps@latest` to 0.1.61.

- Update `wasm-tools@latest` to 1.248.0.

- Update `cargo-deb@latest` to 3.6.4.

###
[`v2.75.26`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.26):
2.75.26

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.25...v2.75.26)

- Update `wasm-bindgen@latest` to 0.2.120.

- Update `mise@latest` to 2026.4.25.

- Update `martin@latest` to 1.8.0.

- Update `vacuum@latest` to 0.26.4.

###
[`v2.75.25`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.25):
2.75.25

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.24...v2.75.25)

- Update `uv@latest` to 0.11.8.

- Update `typos@latest` to 1.45.2.

- Update `tombi@latest` to 0.9.25.

- Update `mise@latest` to 2026.4.24.

###
[`v2.75.24`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.24):
2.75.24

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.23...v2.75.24)

- Update `prek@latest` to 0.3.11.

- Update `mise@latest` to 2026.4.23.

- Update `vacuum@latest` to 0.26.3.

###
[`v2.75.23`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.23):
2.75.23

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.22...v2.75.23)

- Update `vacuum@latest` to 0.26.2.

- Update `tombi@latest` to 0.9.24.

- Update `mise@latest` to 2026.4.22.

- Update `martin@latest` to 1.7.0.

- Update `git-cliff@latest` to 2.13.1.

- Update `cargo-tarpaulin@latest` to 0.35.4.

- Update `cargo-sort@latest` to 2.1.4.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-03 20:11:38 +01:00
renovate[bot] 57153423f2 chore(deps): update crate-ci/typos action to v1.46.0 (#22098)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| minor | `v1.45.2` → `v1.46.0` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.46.0`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.0)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.45.2...v1.46.0)

#### \[1.46.0] - 2026-04-30

##### Features

- Updated the dictionary with the [April
2026](https://redirect.github.com/crate-ci/typos/issues/1531) changes

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-03 20:11:07 +01:00
camc314 a48f94b650 ci(miri): pin version to nightly-2026-05-01 (#22028)
Pins Miri to the latest published nightly, nightly-2026-05-01, now that the previously referenced issue is fixed. This addresses the Miri workflow failure seen in https://github.com/oxc-project/oxc/actions/runs/25215216986/job/73934017722?pr=22026.
2026-05-01 13:16:07 +00:00
overlookmotel d5d1a23afd ci(pr): ignore graphite-base branches in PR workflow (#21961)
`branches-ignore: "/graphite-base/"` was added to this workflow in #18775, but was removed in #21566.

I _think_ this removal was an unintended byproduct of the valid security-related change, and we should bring it back to avoid pointless CI runs.
2026-04-30 13:57:51 +00:00
renovate[bot] de74d5f61b chore(deps): update crate-ci/typos action to v1.45.2 (#21856)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| patch | `v1.45.1` → `v1.45.2` |

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.45.2`](https://redirect.github.com/crate-ci/typos/compare/v1.45.1...v1.45.2)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.45.1...v1.45.2)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-27 18:34:28 +01:00
Boshen 5b20d41681 ci(release): gate apps publish and notify core (#21816) 2026-04-27 20:51:22 +08:00
Boshen 1f3568180f chore(ci): remove claude and pullfrog workflows (#21819) 2026-04-27 11:52:36 +08:00
Boshen 24f0b5870a ci(security): run security analysis on ubuntu-latest (#21807) 2026-04-27 08:07:33 +08:00