c660391f19
ci(workflows): skip release and sensitive workflows on forks ( #19685 )
...
Add `if: github.repository == 'oxc-project/oxc'` to jobs in release,
codecov, and lint_rules workflows to prevent them from running on fork
repositories.
**Affected workflows:**
- `codecov.yml`
- `lint_rules.yml`
- `prepare_release_apps.yml`
- `prepare_release_crates.yml` (2 jobs)
- `release_apps.yml`
- `release_crates.yml`
- `release_napi_minify.yml`
- `release_napi_parser.yml`
- `release_napi_transform.yml`
- `release_runtime.yml`
- `release_types.yml`
2026-02-25 11:52:10 +08:00
fbb6410698
ci(release): install latest npm for trusted publishing
2025-08-29 15:06:27 +08:00
47e6df5269
ci: enable trusted publishing for npm napi packages
...
* oxc-parser
* oxc-minify
* oxc-transform
* @oxc-project/types
* @oxc-project/runtime
2025-08-29 14:02:05 +08:00
c6edafe08d
refactor(napi): remove npm/oxc-*/ npm packages ( #9631 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-03-09 22:43:06 +08:00
4f6d164f52
ci: fix release napi scripts
2025-01-24 13:37:01 +08:00
a78a72fb16
ci: fix overly broad permissions reported by zizmor ( #8611 )
...
https://woodruffw.github.io/zizmor/audits/#excessive-permissions
2025-01-20 13:19:50 +08:00
4a59d29c30
refactor(workflows): add reusable_release_napi.yml ( #8581 )
2025-01-18 15:27:22 +08:00
0726581f4f
chore(deps): update github-actions ( #8409 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-10 14:06:49 +08:00
dcb27ff6cd
ci: change setup-zig ( #7930 )
2024-12-16 13:52:15 +08:00
e812ae3117
chore(deps): pin dependencies ( #7842 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-13 20:12:09 +08:00
13fe68d0dd
ci: fix more action versions
2024-12-13 20:04:27 +08:00
4dd69b5811
ci: fix action versions
2024-12-13 19:55:47 +08:00
0970168a48
chore(deps): pin dependencies ( #7837 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-13 19:45:48 +08:00
ba84acd5cf
ci: pin github action versions ( #7826 )
2024-12-13 18:53:16 +08:00
b24a636b0a
ci: add zizmor for github actions security ( #7822 )
...
> zizmor is a static analysis tool for GitHub Actions. It can find many
common security issues in typical GitHub Actions CI/CD setups.
https://woodruffw.github.io/zizmor/
EDIT: what is the right PR-syntax for this?
---------
Co-authored-by: Boshen <boshenc@gmail.com >
2024-12-13 13:36:41 +08:00
f672ca0c29
ci: fix release wasm
2024-10-26 10:28:12 +08:00
40c00d53b0
ci: fix release napi
2024-10-08 21:24:36 +08:00
1ed4ccdcae
ci: fix failed to napi publish without --no-git-checks
...
We generate all the files so they are not commited to the repo
2024-09-11 18:30:15 +08:00
7f7ed7b4dc
ci: add custom pnpm action ( #5572 )
2024-09-07 16:13:19 +08:00
c796b77fa2
ci: use pnpm publish
2024-09-07 13:19:52 +08:00
c95d691af6
ci: use node-version-file ( #3607 )
2024-06-10 22:06:09 +08:00
19bc7eb20f
ci: fix mac build in release_napi_parser
2024-06-04 18:40:24 +08:00
3855579eb4
ci: apply default shell: bash to all CI jobs ( #3416 )
2024-05-26 08:05:11 +00:00
06a81409f1
ci: actions/checkout@v4 -> taiki-e/checkout-action@v1 ( #2811 )
...
This does not depend on node.js, and sets persist-credentials to false
2024-03-26 01:24:51 +08:00
24a9255610
Release napi oxc-parser@v0.4.0
2024-02-11 12:37:44 +08:00
5723690fdf
Release napi oxc-parser@v0.4.0-alpha.0
2024-02-11 11:56:46 +08:00
839e7c5c22
feat(napi/parser): add more linux-musl targets
2024-02-06 00:04:25 +08:00
b2040ed2ec
ci: use node.js 20
2024-02-02 22:28:23 +08:00
c0bdd050ee
ci: s/macos-latest/macos-14 ( #2244 )
2024-02-01 13:30:49 +08:00
265f7db3ca
chore(deps): bump actions/upload-artifact from 3 to 4 ( #1714 )
...
Bumps
[actions/upload-artifact](https://github.com/actions/upload-artifact )
from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases ">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>The release of upload-artifact@v4 and download-artifact@v4 are major
changes to the backend architecture of Artifacts. They have numerous
performance and behavioral improvements.</p>
<p>For more information, see the <a
href="https://github.com/actions/toolkit/tree/main/packages/artifact "><code>@actions/artifact</code></a>
documentation.</p>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/vmjoseph "><code>@vmjoseph</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/464 ">actions/upload-artifact#464</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v3...v4.0.0 ">https://github.com/actions/upload-artifact/compare/v3...v4.0.0 </a></p>
<h2>v3.1.3</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(github): remove trailing whitespaces by <a
href="https://github.com/ljmf00 "><code>@ljmf00</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/313 ">actions/upload-artifact#313</a></li>
<li>Bump <code>@actions/artifact</code> version to v1.1.2 by <a
href="https://github.com/bethanyj28 "><code>@bethanyj28</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/436 ">actions/upload-artifact#436</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v3...v3.1.3 ">https://github.com/actions/upload-artifact/compare/v3...v3.1.3 </a></p>
<h2>v3.1.2</h2>
<ul>
<li>Update all <code>@actions/*</code> NPM packages to their latest
versions- <a
href="https://redirect.github.com/actions/upload-artifact/issues/374 ">#374</a></li>
<li>Update all dev dependencies to their most recent versions - <a
href="https://redirect.github.com/actions/upload-artifact/issues/375 ">#375</a></li>
</ul>
<h2>v3.1.1</h2>
<ul>
<li>Update actions/core package to latest version to remove
<code>set-output</code> deprecation warning <a
href="https://redirect.github.com/actions/upload-artifact/issues/351 ">#351</a></li>
</ul>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@actions/artifact</code> to v1.1.0 (<a
href="https://redirect.github.com/actions/upload-artifact/pull/327 ">actions/upload-artifact#327</a>)
<ul>
<li>Adds checksum headers on artifact upload (<a
href="https://redirect.github.com/actions/toolkit/pull/1095 ">actions/toolkit#1095</a>)
(<a
href="https://redirect.github.com/actions/toolkit/pull/1063 ">actions/toolkit#1063</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/c7d193f32edcb7bfad88892161225aeda64e9392 "><code>c7d193f</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/466 ">#466</a>
from actions/v4-beta</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/13131bb095770b4070a7477c3cd2d96e1c16d9f4 "><code>13131bb</code></a>
licensed cache</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/4a6c273b9834f66a1d05c170dc3f80f9cdb9def1 "><code>4a6c273</code></a>
Merge branch 'main' into v4-beta</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/f391bb91a3d3118aeca171c365bb319ece276b37 "><code>f391bb9</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/465 ">#465</a>
from actions/robherley/v4-documentation</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/9653d03c4b74c32144e02dae644fea70e079d4b3 "><code>9653d03</code></a>
Apply suggestions from code review</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/875b63076402f25ef9d52c294c86ba4f97810575 "><code>875b630</code></a>
add limitations section</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/ecb21463e93740a6be75c3116242169bfdbcb15a "><code>ecb2146</code></a>
add compression example</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/5e7604f84a055838f64ed68bb9904751523081ae "><code>5e7604f</code></a>
trim some repeated info</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/d6437d07581fe318a364512e6cf6b1dca6b4f92c "><code>d6437d0</code></a>
naming</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/1b561557037b4957d7d184e9aac02bec86c771eb "><code>1b56155</code></a>
s/v4-beta/v4/g</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/upload-artifact/compare/v3...v4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 14:56:13 +08:00
ce8ab0c039
chore(deps): bump actions/download-artifact from 3 to 4 ( #1715 )
...
Bumps
[actions/download-artifact](https://github.com/actions/download-artifact )
from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/download-artifact/releases ">actions/download-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>The release of upload-artifact@v4 and download-artifact@v4 are major
changes to the backend architecture of Artifacts. They have numerous
performance and behavioral improvements.</p>
<p>For more information, see the <a
href="https://github.com/actions/toolkit/tree/main/packages/artifact "><code>@actions/artifact</code></a>
documentation.</p>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/bflad "><code>@bflad</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/194 ">actions/download-artifact#194</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/download-artifact/compare/v3...v4.0.0 ">https://github.com/actions/download-artifact/compare/v3...v4.0.0 </a></p>
<h2>v3.0.2</h2>
<ul>
<li>Bump <code>@actions/artifact</code> to v1.1.1 - <a
href="https://redirect.github.com/actions/download-artifact/pull/195 ">actions/download-artifact#195</a></li>
<li>Fixed a bug in Node16 where if an HTTP download finished too quickly
(<1ms, e.g. when it's mocked) we attempt to delete a temp file that
has not been created yet <a
href="hhttps://redirect.github.com/actions/toolkit/pull/1278 ">actions/toolkit#1278</a></li>
</ul>
<h2>v3.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/actions/download-artifact/pull/178 ">Bump
<code>@actions/core</code> to 1.10.0</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/download-artifact/commit/7a1cd3216ca9260cd8022db641d960b1db4d1be4 "><code>7a1cd32</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/246 ">#246</a>
from actions/v4-beta</li>
<li><a
href="https://github.com/actions/download-artifact/commit/8f32874a49903ea488c5e7d476a9173e8706f409 "><code>8f32874</code></a>
licensed cache</li>
<li><a
href="https://github.com/actions/download-artifact/commit/b5ff8444b1c4fcec8131f3cb1ddade813ddfacb1 "><code>b5ff844</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/245 ">#245</a>
from actions/robherley/v4-documentation</li>
<li><a
href="https://github.com/actions/download-artifact/commit/f07a0f73f51b3f1d41667c782c821b9667da9d19 "><code>f07a0f7</code></a>
Update README.md</li>
<li><a
href="https://github.com/actions/download-artifact/commit/7226129829bb686fdff47bd63bbd0d1373993a84 "><code>7226129</code></a>
update test workflow to use different artifact names for matrix</li>
<li><a
href="https://github.com/actions/download-artifact/commit/ada9446619b84dd8a557aaaec3b79b58c4986cdf "><code>ada9446</code></a>
update docs and bump <code>@actions/artifact</code></li>
<li><a
href="https://github.com/actions/download-artifact/commit/7eafc8b729ba790ce8f2cee54be8ad6257af4c7c "><code>7eafc8b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/244 ">#244</a>
from actions/robherley/bump-toolkit</li>
<li><a
href="https://github.com/actions/download-artifact/commit/3132d12662b5915f20cdbf449465896962101abf "><code>3132d12</code></a>
consume latest toolkit</li>
<li><a
href="https://github.com/actions/download-artifact/commit/5be1d3867182a382bc59f2775e002595f487aa88 "><code>5be1d38</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/243 ">#243</a>
from actions/robherley/v4-beta-updates</li>
<li><a
href="https://github.com/actions/download-artifact/commit/465b526e63559575a64716cdbb755bc78dfb263b "><code>465b526</code></a>
consume latest <code>@actions/toolkit</code></li>
<li>Additional commits viewable in <a
href="https://github.com/actions/download-artifact/compare/v3...v4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 14:55:50 +08:00
26705f2dbf
ci(release_napi_parser): check version change before build
2023-11-10 14:47:08 +08:00
90ff0ddbe0
refactor: change @oxidation-compiler/napi to oxc-parser ( #1209 )
2023-11-10 06:17:05 +00:00
younggglcy