mirror of
https://github.com/oxc-project/oxc.git
synced 2026-09-14 19:36:11 +08:00
codex/parser-grouped-expression-allocation
9 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 Boshen
|
41fc6908c2 |
fix(ci): run required checks for merge queue (#25390)
Run required workflows for `merge_group` commits so the merge queue receives status checks. Keep PR-title validation and autofix publishing limited to pull request events. Validated with `just ready`. AI assistance was used for this change. |
||
|
renovate[bot]
|
eedf4c7360 |
chore(deps): update github actions (#23905)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.17.6` → `v4.18.1` | | | [cross-platform-actions/action](https://redirect.github.com/cross-platform-actions/action) | action | minor | `v1.2.0` → `v1.3.0` | | | [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.7` → `v1.0.8` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.82.0` → `v2.82.4` | `v2.82.5` | --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.18.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.18.1) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.18.0...v4.18.1) #### Release Notes ##### <!-- 0 -->🚀 Features - Bump go-runner to 1.2.1 by [@​adriencaccia](https://redirect.github.com/adriencaccia) in [#​421](https://redirect.github.com/CodSpeedHQ/runner/pull/421) #### Install codspeed-runner 4.18.1 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.18.1 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> ### [`v4.18.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.18.0) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.17.6...v4.18.0) #### Release Notes ##### <!-- 0 -->🚀 Features - Bump valgrind-codspeed to 3.26.0-0codspeed4 - Bump samply by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​415](https://redirect.github.com/CodSpeedHQ/runner/pull/415) - Set env var to have node dump inlining information by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Change isolation logic to include samply and non root fallback by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add experimental --cycle-estimation flag by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​412](https://redirect.github.com/CodSpeedHQ/runner/pull/412) - Make samply-codspeed a submodule rather than git rev with cargo by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​416](https://redirect.github.com/CodSpeedHQ/runner/pull/416) ##### <!-- 1 -->🐛 Bug Fixes - Honor locally-installed valgrind on non-apt systems by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​414](https://redirect.github.com/CodSpeedHQ/runner/pull/414) #### Install codspeed-runner 4.18.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.18.0 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> </details> <details> <summary>cross-platform-actions/action (cross-platform-actions/action)</summary> ### [`v1.3.0`](https://redirect.github.com/cross-platform-actions/action/releases/tag/v1.3.0): Cross Platform Action 1.3.0 [Compare Source](https://redirect.github.com/cross-platform-actions/action/compare/v1.2.0...v1.3.0) ##### Added - Add support for FreeBSD 15.1 ([#​153](https://redirect.github.com/cross-platform-actions/action/issues/153)) - Add a `--environment-variables` post-flag to the `cpa.sh` custom shell for forwarding additional environment variables to the VM on a per-step basis, without having to declare them on the `Start VM` step via the `environment_variables` input ([#​145](https://redirect.github.com/cross-platform-actions/action/issues/145)): ```yaml - name: Run a command with extra environment variables shell: cpa.sh {0} --environment-variables MY_ENV1 MY_ENV2 env: MY_ENV1: value1 MY_ENV2: value2 run: echo "$MY_ENV1 $MY_ENV2" ``` </details> <details> <summary>oxc-project/security-action (oxc-project/security-action)</summary> ### [`v1.0.8`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.7...v1.0.8) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.7...v1.0.8) </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.82.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.4): 2.82.4 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.3...v2.82.4) - Update `uv@latest` to 0.11.24. - Update `mise@latest` to 2026.6.13. - Update `just@latest` to 1.54.0. - Update `biome@latest` to 2.5.1. ### [`v2.82.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.3): 2.82.3 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.2...v2.82.3) - Update `zizmor@latest` to 1.26.1. - Update `wasmtime@latest` to 46.0.0. - Update `tombi@latest` to 1.1.5. - Update `mise@latest` to 2026.6.12. - Update `kingfisher@latest` to 1.104.0. - Update `cargo-tarpaulin@latest` to 0.35.5. - Update `cargo-nextest@latest` to 0.9.138. - Update `cargo-crap@latest` to 0.3.0. - Update `cargo-binstall@latest` to 1.20.1. - Update `cargo-rdme@latest` to 2.0.1. ### [`v2.82.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.2): 2.82.2 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.1...v2.82.2) - Update `xh@latest` to 0.26.1. - Update `uv@latest` to 0.11.23. - Update `trivy@latest` to 0.71.2. - Update `sccache@latest` to 0.16.0. ### [`v2.82.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.1): 2.82.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.0...v2.82.1) - Update `vacuum@latest` to 0.29.4. - Update `uv@latest` to 0.11.22. - Update `osv-scanner@latest` to 2.4.0. - Update `mise@latest` to 2026.6.11. - Update `martin@latest` to 1.11.0. - Update `just@latest` to 1.53.0. - Update `cargo-zigbuild@latest` to 0.23.0. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
31a290a447 |
chore(deps): update github actions (#22863)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.5` → `v1.0.7` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.79.4` → `v2.79.12` | `v2.81.0` (+4) | --- ### Release Notes <details> <summary>oxc-project/security-action (oxc-project/security-action)</summary> ### [`v1.0.7`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.6...v1.0.7) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.6...v1.0.7) ### [`v1.0.6`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.5...v1.0.6) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.5...v1.0.6) </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.79.12`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.12): 2.79.12 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.11...v2.79.12) - Update `prek@latest` to 0.4.3. - Remove uses of crates.io API, which potentially cases 403 error. ### [`v2.79.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.11): 2.79.11 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.10...v2.79.11) - Update `vacuum@latest` to 0.26.8. - Update `cargo-nextest@latest` to 0.9.137. ### [`v2.79.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.10): 2.79.10 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.9...v2.79.10) - Update `tombi@latest` to 1.1.0. - Update `prek@latest` to 0.4.2. - Update `editorconfig-checker@latest` to 3.7.0. ### [`v2.79.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.9): 2.79.9 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.8...v2.79.9) - Update `vacuum@latest` to 0.26.7. - Update `tombi@latest` to 1.0.0. ### [`v2.79.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.8): 2.79.8 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.7...v2.79.8) - Update `parse-dockerfile@latest` to 0.1.6. - Update `knope@latest` to 0.23.0. ### [`v2.79.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.7): 2.79.7 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.6...v2.79.7) - Update `typos@latest` to 1.46.3. - Update `rclone@latest` to 1.74.2. - Update `mise@latest` to 2026.5.15. - Update `tombi@latest` to 0.11.7. ### [`v2.79.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.6): 2.79.6 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.5...v2.79.6) - Update `wasm-bindgen@latest` to 0.2.122. - Update `mise@latest` to 2026.5.14. - Update `cargo-deny@latest` to 0.19.7. - Update `vacuum@latest` to 0.26.6. ### [`v2.79.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.79.5): 2.79.5 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.79.4...v2.79.5) - Update `jaq@latest` to 3.0.0. ([#​1861](https://redirect.github.com/taiki-e/install-action/pull/1861), thanks [@​MusicalNinjaDad](https://redirect.github.com/MusicalNinjaDad)) - Update `wasmtime@latest` to 45.0.0. - Update `wasm-tools@latest` to 1.250.0. - Update `tombi@latest` to 0.11.6. - Update `mise@latest` to 2026.5.13. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate
|
f2e88df9cd |
chore(deps): update github actions (#22291)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | patch | `v4.15.0` → `v4.15.1` | | | [actions/labeler](https://redirect.github.com/actions/labeler) | action | minor | `v6.0.1` → `v6.1.0` | | | [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.3` → `v1.0.5` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | minor | `v2.75.27` → `v2.77.1` | `v2.77.4` (+2) | --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.15.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.15.1) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.15.0...v4.15.1) #### Release Notes ##### <!-- 0 -->🚀 Features - Add a way to disable perf compression through env var by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​334](https://redirect.github.com/CodSpeedHQ/runner/pull/334) - Do not display the comparison nudge when not in an interactive terminal by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​300](https://redirect.github.com/CodSpeedHQ/runner/pull/300) - Display a warning when profiling generation failed by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Detect and abort on ring buffer overflow by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​321](https://redirect.github.com/CodSpeedHQ/runner/pull/321) - Grow ring buffer to 16 MiB by [@​not-matthias](https://redirect.github.com/not-matthias) ##### <!-- 7 -->⚙️ Internals - chore: bump runner version to 4.15.1 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​205](https://redirect.github.com/CodSpeedHQ/action/pull/205) - Increase stack sampling for python by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​337](https://redirect.github.com/CodSpeedHQ/runner/pull/337) - Replace hard coded lint job for a dedicated check action by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​320](https://redirect.github.com/CodSpeedHQ/runner/pull/320) - Bump cpp-linter-hooks to support darwin by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Swap pre-commit action for prek by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Fix unused clippy errors in test targets on macos by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Run pre-commit hooks on macos and ubuntu-latest by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) #### Install codspeed-runner 4.15.1 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.15.1 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.15.0...v4.15.1> </details> <details> <summary>actions/labeler (actions/labeler)</summary> ### [`v6.1.0`](https://redirect.github.com/actions/labeler/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/actions/labeler/compare/v6.0.1...v6.1.0) #### Enhancements - Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by [@​bluca](https://redirect.github.com/bluca) in [#​923](https://redirect.github.com/actions/labeler/pull/923) #### Bug Fixes - Improve Labeler Action documentation and permission error handling by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​897](https://redirect.github.com/actions/labeler/pull/897) - Preserve manually added labels during workflow runs and refine label synchronization logic by [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#​917](https://redirect.github.com/actions/labeler/pull/917) #### Dependency Updates - Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​877](https://redirect.github.com/actions/labeler/pull/877) - Upgrade minimatch from 10.0.1 to 10.2.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​926](https://redirect.github.com/actions/labeler/pull/926) - Upgrade dependencies ([@​actions/core](https://redirect.github.com/actions/core), [@​actions/github](https://redirect.github.com/actions/github), js-yaml, minimatch, [@​typescript-eslint](https://redirect.github.com/typescript-eslint)) by [@​Copilot](https://redirect.github.com/Copilot) in [#​934](https://redirect.github.com/actions/labeler/pull/934) #### New Contributors - [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#​897](https://redirect.github.com/actions/labeler/pull/897) - [@​bluca](https://redirect.github.com/bluca) made their first contribution in [#​923](https://redirect.github.com/actions/labeler/pull/923) - [@​Copilot](https://redirect.github.com/Copilot) made their first contribution in [#​934](https://redirect.github.com/actions/labeler/pull/934) **Full Changelog**: <https://github.com/actions/labeler/compare/v6...v6.1.0> </details> <details> <summary>oxc-project/security-action (oxc-project/security-action)</summary> ### [`v1.0.5`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.4...v1.0.5) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.4...v1.0.5) ### [`v1.0.4`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.3...v1.0.4) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.3...v1.0.4) </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.77.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.1): 2.77.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.77.0...v2.77.1) - Support `taiki-e/install-action@rust` tag. - Update `tombi@latest` to 0.10.3. - Update `martin@latest` to 1.8.2. ### [`v2.77.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.77.0): 2.77.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.76.0...v2.77.0) - Support `rust`. ([#​1779](https://redirect.github.com/taiki-e/install-action/pull/1779)) This installs rust using rustup. If rustup is not yet installed, this action downloads [rustup-init for the current platform](https://rust-lang.github.io/rustup/installation/other.html#manual-installation) using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it. This also supports installing additional components at the same time by `+<additional>` syntax: ```yaml - uses: taiki-e/install-action@v2 with: # Install rust stable with rustfmt component and wasm32-wasip1 target. tool: rust+rustfmt+wasm32-wasip1 # When installing another rust version: # tool: rust@nightly + rustfmt + wasm32-wasip1 ``` - Fix issue where x86\_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available. - Update `mise@latest` to 2026.5.0. - Diagnostic improvements. ### [`v2.76.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.76.0): 2.76.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.30...v2.76.0) - Support `mdbook-d2`. ([#​1737](https://redirect.github.com/taiki-e/install-action/pull/1737), thanks [@​nhu](https://redirect.github.com/nhu)) - Support `cargo-apple-runner`. ([#​1731](https://redirect.github.com/taiki-e/install-action/pull/1731), thanks [@​madsmtm](https://redirect.github.com/madsmtm)) - Support `cargo-binstall` on riscv64 Linux. - Update `cargo-deb@latest` to 3.7.0. - Update `tombi@latest` to 0.10.2. ### [`v2.75.30`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.30): 2.75.30 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.29...v2.75.30) - Support `cargo-spellcheck` on AArch64 Linux/Windows. - Update `cargo-spellcheck@latest` to 0.15.7. - Update `biome@latest` to 2.4.14. ### [`v2.75.29`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.29): 2.75.29 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.28...v2.75.29) - Update `syft@latest` to 1.44.0. - Update `rclone@latest` to 1.74.0. - Update `osv-scanner@latest` to 2.3.6. ### [`v2.75.28`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.28): 2.75.28 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.27...v2.75.28) - Update `wasmtime@latest` to 44.0.1. - Update `typos@latest` to 1.46.0. - Update `tombi@latest` to 0.10.1. - Update `sccache@latest` to 0.15.0. - Update `mise@latest` to 2026.4.28. - Update `gungraun-runner@latest` to 0.18.2. - Update `cyclonedx@latest` to 0.31.0. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> |
||
|
renovate[bot]
|
0679c008d5 |
chore(deps): update github actions (#22099)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.14.0` → `v4.15.0` | | | [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.2` → `v1.0.3` | | | [oxc-project/setup-node](https://redirect.github.com/oxc-project/setup-node) | action | minor | `v1.2.0` → `v1.3.0` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.75.22` → `v2.75.27` | `v2.75.30` (+2) | --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.15.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.15.0) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.14.0...v4.15.0) #### Release Notes This release adds first support for macOS walltime. Please note that profiling and other instruments are not yet available on macOS and will come in a later update. ##### Minimum integration versions - [`pytest-codspeed` v4.5.0](https://redirect.github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.5.0) - [`codspeed-rust` v4.6.0](https://redirect.github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.6.0) - [`codspeed-cpp` v2.3.0](https://redirect.github.com/CodSpeedHQ/codspeed-cpp/releases/tag/v2.3.0) - [`codspeed-go` v1.2.0](https://redirect.github.com/CodSpeedHQ/codspeed-go/releases/tag/v1.2.0) - [`codspeed-node` v5.4.0](https://redirect.github.com/CodSpeedHQ/codspeed-node/releases/tag/v5.4.0) ##### <!-- 0 -->🚀 Features - Revert logo changes by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Display N/A rather than NaN/inf in the benchmarks results table by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​314](https://redirect.github.com/CodSpeedHQ/runner/pull/314) - Only wrap walltime command with sudo on linux by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add `--with-token` flag to read token from stdin by [@​fargito](https://redirect.github.com/fargito) in [#​313](https://redirect.github.com/CodSpeedHQ/runner/pull/313) - Warn when libc debug info is not found by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​310](https://redirect.github.com/CodSpeedHQ/runner/pull/310) - Resolve debug info and symbols from separate debug files by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​303](https://redirect.github.com/CodSpeedHQ/runner/pull/303) ##### <!-- 6 -->🧪 Testing - Add libc debuglink/build-id fixtures by [@​not-matthias](https://redirect.github.com/not-matthias) - Add stripped binary and debug file test fixtures by [@​not-matthias](https://redirect.github.com/not-matthias) ##### <!-- 7 -->⚙️ Internals - chore: bump runner version to 4.15.0 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​204](https://redirect.github.com/CodSpeedHQ/action/pull/204) - Bump exec-harness version - Add macos basic run test by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​319](https://redirect.github.com/CodSpeedHQ/runner/pull/319) - Remove DumpPerfMapAtExit in favor of custom dumper by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​295](https://redirect.github.com/CodSpeedHQ/runner/pull/295) #### Install codspeed-runner 4.15.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.15.0 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.14.0...v4.15.0> </details> <details> <summary>oxc-project/security-action (oxc-project/security-action)</summary> ### [`v1.0.3`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.2...v1.0.3) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.2...v1.0.3) </details> <details> <summary>oxc-project/setup-node (oxc-project/setup-node)</summary> ### [`v1.3.0`](https://redirect.github.com/oxc-project/setup-node/compare/v1.2.0...v1.3.0) [Compare Source](https://redirect.github.com/oxc-project/setup-node/compare/v1.2.0...v1.3.0) </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.75.27`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.27): 2.75.27 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.26...v2.75.27) - Update `cargo-udeps@latest` to 0.1.61. - Update `wasm-tools@latest` to 1.248.0. - Update `cargo-deb@latest` to 3.6.4. ### [`v2.75.26`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.26): 2.75.26 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.25...v2.75.26) - Update `wasm-bindgen@latest` to 0.2.120. - Update `mise@latest` to 2026.4.25. - Update `martin@latest` to 1.8.0. - Update `vacuum@latest` to 0.26.4. ### [`v2.75.25`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.25): 2.75.25 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.24...v2.75.25) - Update `uv@latest` to 0.11.8. - Update `typos@latest` to 1.45.2. - Update `tombi@latest` to 0.9.25. - Update `mise@latest` to 2026.4.24. ### [`v2.75.24`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.24): 2.75.24 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.23...v2.75.24) - Update `prek@latest` to 0.3.11. - Update `mise@latest` to 2026.4.23. - Update `vacuum@latest` to 0.26.3. ### [`v2.75.23`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.23): 2.75.23 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.22...v2.75.23) - Update `vacuum@latest` to 0.26.2. - Update `tombi@latest` to 0.9.24. - Update `mise@latest` to 2026.4.22. - Update `martin@latest` to 1.7.0. - Update `git-cliff@latest` to 2.13.1. - Update `cargo-tarpaulin@latest` to 0.35.4. - Update `cargo-sort@latest` to 2.1.4. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Boshen
|
24f0b5870a | ci(security): run security analysis on ubuntu-latest (#21807) | ||
|
renovate[bot]
|
eb0c97b321 |
chore(deps): update github-actions (#21790)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.13.1` → `v4.14.0` | | [anthropics/claude-code-action](https://redirect.github.com/anthropics/claude-code-action) | action | patch | `v1.0.101` → `v1.0.107` | | [namespacelabs/nscloud-cache-action](https://redirect.github.com/namespacelabs/nscloud-cache-action) | action | patch | `v1.4.2` → `v1.4.3` | | [oxc-project/security-action](https://redirect.github.com/oxc-project/security-action) | action | patch | `v1.0.0` → `v1.0.2` | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.75.18` → `v2.75.22` | --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.14.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.14.0) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.13.1...v4.14.0) #### Release Notes We now collect buildtime and runtime environment data to warn users about differences in their runtime environment when comparing two runs against one another. This data includes toolchain metadata like version and build options, as well as a list of dynamically loaded linked libraries. ##### Minimum integration versions To support the runtime metadata collection, make sure to use at least the following versions: - [`pytest-codspeed` v4.4.0](https://redirect.github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.4.0) - [`codspeed-rust` v4.5.0](https://redirect.github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.5.0) - [`codspeed-cpp` v2.2.0](https://redirect.github.com/CodSpeedHQ/codspeed-cpp/releases/tag/v2.2.0) - [`codspeed-go` v1.1.0](https://redirect.github.com/CodSpeedHQ/codspeed-go/releases/tag/v1.1.0) - [`codspeed-node` v5.3.0](https://redirect.github.com/CodSpeedHQ/codspeed-node/releases/tag/v5.3.0) ##### <!-- 0 -->🚀 Features - Stop panicking when parsing invalid perf file by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​298](https://redirect.github.com/CodSpeedHQ/runner/pull/298) - Make the basic run only 5 rounds to make logs not crash the github page by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Represent the host OS as a SupportedOs enum with per-executor support gates by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Bypass systemd-run usage on macos by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add aarch64-apple-darwin to the release targets by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Collect cpu flags in system info by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​281](https://redirect.github.com/CodSpeedHQ/runner/pull/281) ##### <!-- 1 -->🐛 Bug Fixes - Fix instropected\_go's behavior on macos by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Update rust crate git2 to 0.20.4 ([#​284](https://redirect.github.com/CodSpeedHQ/action/issues/284)) by [@​xtqqczze](https://redirect.github.com/xtqqczze) in [#​284](https://redirect.github.com/CodSpeedHQ/runner/pull/284) ##### <!-- 7 -->⚙️ Internals - chore: bump runner version to 4.14.0 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​203](https://redirect.github.com/CodSpeedHQ/action/pull/203) - Move the config schema check from pre-commit to ci-only check by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​287](https://redirect.github.com/CodSpeedHQ/runner/pull/287) - Skip tests that rely on linux behavior by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Bump instrument-hooks submodule to include stubs improvement by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Rerun exec harness build if instrument hooks sources change by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Make update-bindings.sh PWD agnostic by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) #### Install codspeed-runner 4.14.0 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.14.0 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-apple-darwin.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-apple-darwin.tar.gz.sha256) | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.13.1...v4.14.0> </details> <details> <summary>anthropics/claude-code-action (anthropics/claude-code-action)</summary> ### [`v1.0.107`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.107) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.106...v1.0.107) **Full Changelog**: <https://github.com/anthropics/claude-code-action/compare/v1...v1.0.107> ### [`v1.0.106`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.106) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.105...v1.0.106) **Full Changelog**: <https://github.com/anthropics/claude-code-action/compare/v1...v1.0.106> ### [`v1.0.105`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.105) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.104...v1.0.105) ##### What's Changed - fix: allow + in branch names (generated by Claude Code EnterWorktree) by [@​awakia](https://redirect.github.com/awakia) in [#​1248](https://redirect.github.com/anthropics/claude-code-action/pull/1248) ##### New Contributors - [@​awakia](https://redirect.github.com/awakia) made their first contribution in [#​1248](https://redirect.github.com/anthropics/claude-code-action/pull/1248) **Full Changelog**: <https://github.com/anthropics/claude-code-action/compare/v1...v1.0.105> ### [`v1.0.104`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.104) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.103...v1.0.104) **Full Changelog**: <https://github.com/anthropics/claude-code-action/compare/v1...v1.0.104> ### [`v1.0.103`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.103) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.102...v1.0.103) **Full Changelog**: <https://github.com/anthropics/claude-code-action/compare/v1...v1.0.103> ### [`v1.0.102`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.102) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.101...v1.0.102) ##### What's Changed - chore: bump oven-sh/setup-bun to v2.2.0 (Node.js 24) by [@​ashwin-ant](https://redirect.github.com/ashwin-ant) in [#​1238](https://redirect.github.com/anthropics/claude-code-action/pull/1238) - docs: nit updates to security.md by [@​OctavianGuzu](https://redirect.github.com/OctavianGuzu) in [#​1240](https://redirect.github.com/anthropics/claude-code-action/pull/1240) **Full Changelog**: <https://github.com/anthropics/claude-code-action/compare/v1...v1.0.102> </details> <details> <summary>namespacelabs/nscloud-cache-action (namespacelabs/nscloud-cache-action)</summary> ### [`v1.4.3`](https://redirect.github.com/namespacelabs/nscloud-cache-action/releases/tag/v1.4.3) [Compare Source](https://redirect.github.com/namespacelabs/nscloud-cache-action/compare/v1.4.2...v1.4.3) ##### What's Changed - Add npm mode by [@​rcrowe](https://redirect.github.com/rcrowe) in [#​118](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/118) - Use repeated --path arguments instead of comma-separated values by [@​annervisser](https://redirect.github.com/annervisser) in [#​112](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/112) - Bump the minor-actions-dependencies group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​115](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/115) - Add manual-paths mode test with multiple paths by [@​annervisser](https://redirect.github.com/annervisser) in [#​111](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/111) - Bump the minor-npm-dependencies group across 1 directory with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​116](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/116) - Add major-actions-dependencies Dependabot group by [@​rcrowe](https://redirect.github.com/rcrowe) in [#​119](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/119) - Upgrade [@​namespacelabs/actions-toolkit](https://redirect.github.com/namespacelabs/actions-toolkit) to 0.3.0 by [@​rcrowe](https://redirect.github.com/rcrowe) in [#​125](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/125) - Bump the major-actions-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​123](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/123) - Bump the minor-actions-dependencies group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​122](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/122) - Bump eslint from 9.39.4 to 10.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​121](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/121) - Bump typescript from 5.9.3 to 6.0.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​120](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/120) - Bump [@​eslint/js](https://redirect.github.com/eslint/js) from 9.39.4 to 10.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​102](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/102) - Bump typescript from 6.0.2 to 6.0.3 in the minor-npm-dependencies group by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​126](https://redirect.github.com/namespacelabs/nscloud-cache-action/pull/126) **Full Changelog**: <https://github.com/namespacelabs/nscloud-cache-action/compare/v1...v1.4.3> </details> <details> <summary>oxc-project/security-action (oxc-project/security-action)</summary> ### [`v1.0.2`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.1...v1.0.2) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.1...v1.0.2) ### [`v1.0.1`](https://redirect.github.com/oxc-project/security-action/compare/v1.0.0...v1.0.1) [Compare Source](https://redirect.github.com/oxc-project/security-action/compare/v1.0.0...v1.0.1) </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.75.22`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.22): 2.75.22 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.21...v2.75.22) - Update `tombi@latest` to 0.9.22. - Update `biome@latest` to 2.4.13. ### [`v2.75.21`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.21): 2.75.21 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.20...v2.75.21) - Update `mise@latest` to 2026.4.19. - Update `tombi@latest` to 0.9.21. - Update `syft@latest` to 1.43.0. ### [`v2.75.20`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.20): 2.75.20 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.19...v2.75.20) - Update `prek@latest` to 0.3.10. - Update `cargo-xwin@latest` to 0.22.0. ### [`v2.75.19`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.75.19): 2.75.19 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.75.18...v2.75.19) - Update `wasmtime@latest` to 44.0.0. - Update `tombi@latest` to 0.9.20. - Update `martin@latest` to 1.6.0. - Update `just@latest` to 1.50.0. - Update `mise@latest` to 2026.4.18. - Update `rclone@latest` to 1.73.5. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Boshen
|
7884ec6715 |
ci: make security analysis required-check friendly (#21565)
Updates the security workflow so the required check is always created for pull requests, while keeping the workflow-file path filter on pushes to main. Also switches the job to the ubuntu-slim runner for this lightweight security scan. Validation: - /tmp/zizmor-1.24.1/bin/zizmor --config /Users/boshen/github/oxc-project/security-action/zizmor.yml --strict-collection --show-audit-urls=always --min-severity=medium . - git diff --check |
||
|
Boshen
|
a07566a676 |
ci(workflows): add security analysis workflow (#21553)
## Summary - add the canonical Security Analysis workflow using `oxc-project/security-action` - replace legacy zizmor workflow files where present ## Testing - Not run; workflow-only change. |