mirror of
https://github.com/oxc-project/oxc.git
synced 2026-09-14 19:36:11 +08:00
9688d38dfa
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [benc-uk/workflow-dispatch](https://redirect.github.com/benc-uk/workflow-dispatch) | action | patch | `v1.3.2` → `v1.3.3` | | | [mlugg/setup-zig](https://redirect.github.com/mlugg/setup-zig) | action | minor | `v2` → `v2.2.1` | | | [semgrep/semgrep](https://redirect.github.com/semgrep/semgrep-proprietary) | container | minor | `1.175.0` → `1.176.0` | `1.176.1` | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.87.0` → `v2.87.4` | `v2.87.6` (+1) | --- ### Release Notes <details> <summary>benc-uk/workflow-dispatch (benc-uk/workflow-dispatch)</summary> ### [`v1.3.3`](https://redirect.github.com/benc-uk/workflow-dispatch/releases/tag/v1.3.3) [Compare Source](https://redirect.github.com/benc-uk/workflow-dispatch/compare/v1.3.2...v1.3.3) ##### What's changed since v1.3.2 ##### Fixed - Continue polling while a dispatched workflow run is in the `pending` state, preventing premature completion warnings and a `null` conclusion for workflows using concurrency groups or waiting for a runner. ([#​97](https://redirect.github.com/benc-uk/workflow-dispatch/issues/97), fixes [#​106](https://redirect.github.com/benc-uk/workflow-dispatch/issues/106)) ##### Notes - No breaking changes. - The floating `v1` and `v1.3` tags have been moved to point at `v1.3.3`. **Full changelog**: <https://github.com/benc-uk/workflow-dispatch/compare/v1.3.2...v1.3.3> </details> <details> <summary>mlugg/setup-zig (mlugg/setup-zig)</summary> ### [`v2.2.1`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.2.1) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.2.0...v2.2.1) - Print which version of Zig was installed - Add a little more log output (helps debug cache issues) > \[!NOTE] > The setup-zig project is now hosted on [Codeberg](https://codeberg.org/mlugg/setup-zig), and this GitHub repository exists as a mirror solely to work around the vendor lock-in mechanisms employed by GitHub Actions. While there are **no plans** to discontinue GitHub Actions support, I would nonetheless encourage users to consider upgrading to Forgejo Actions on a non-profit forge like Codeberg to avoid being affected by GitHub's profit-driven behavior (such as attempting to [charge users by the minute for using their own hardware](https://resources.github.com/actions/2026-pricing-changes-for-github-actions/)). ### [`v2.2.0`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.2.0) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.1.0...v2.2.0) - Update dependencies - Replace libsodium dependency with node:crypto, improving target support - Use hardcoded mirror list when ziglang.org is inaccessible - Fix incorrect tarball names when fetching certain versions > \[!NOTE] > The setup-zig project is now hosted on [Codeberg](https://codeberg.org/mlugg/setup-zig), and this GitHub repository exists as a mirror solely to work around the vendor lock-in mechanisms employed by GitHub Actions. While there are **no plans** to discontinue GitHub Actions support, I would nonetheless encourage users to consider upgrading to Forgejo Actions on a non-profit forge like Codeberg to avoid being affected by GitHub's profit-driven behavior (such as attempting to [charge users by the minute for using their own hardware](https://resources.github.com/actions/2026-pricing-changes-for-github-actions/)). ### [`v2.1.0`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.1.0) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.5...v2.1.0) - Support Forgejo Actions - Support recent Zig versions on ARM - Progress towards better OS support - Redirect Zig caches to working directory to avoid sharing the cache on self-hosted runners ### [`v2.0.5`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.5) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.4...v2.0.5) - Fix exception identifying Zig cache directory on recent Zig builds ([#​49](https://redirect.github.com/mlugg/setup-zig/issues/49)) ### [`v2.0.4`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.4) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.3...v2.0.4) - Fix canonical `ziglang.org` download URL - Use more descriptive `?source` query parameter value ### [`v2.0.3`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.3) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.2...v2.0.3) This release switches from a hardcoded `mirrors.json` list, to fetching the list of mirrors [now available](https://ziglang.org/download/community-mirrors/) from the Zig website. There are no user-facing changes. ### [`v2.0.2`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.2) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.1...v2.0.2) - Update dependencies - Remove some mirrors experiencing issues - Don't use tool cache on GitHub-hosted runners by default ([#​34](https://redirect.github.com/mlugg/setup-zig/issues/34)) - Improve logging, in particular to help debug potential issues ### [`v2.0.1`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.1) [Compare Source](https://redirect.github.com/mlugg/setup-zig/compare/v2...v2.0.1) The recent Zig 0.14.1 release flipped the "arch" and "OS" fields in the tarball name; for instance, `zig-x86_64-linux-0.14.1.tar.xz` instead of `zig-linux-x86_64-0.14.1.tar.xz`. This brings the tarball names in line with target triple syntax. The change does *not* retroactively apply to old Zig tarballs. So, this patch has only one fix: - Add support for new Zig tarball name format as of Zig 0.14.1 / 0.15.0-dev.631+9a3540d61 > \[!NOTE] > > **I do not intend to update v1 to support the new tarball name format.** > `setup-zig` version 1 is considered deprecated. Please upgrade to version 2. </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.87.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.4): 2.87.4 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.3...v2.87.4) - Update `uv@latest` to 0.12.8. - Update `protoc@latest` to 3.36.1. - Update `coreutils@latest` to 0.11.0. ### [`v2.87.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.3): 2.87.3 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.2...v2.87.3) - Update `zizmor@latest` to 1.30.0. - Update `ubi@latest` to 0.12.0. - Update `protoc-gen-connect-openapi@latest` to 0.25.8. - Update `mise@latest` to 2026.8.16. - Update `kingfisher@latest` to 2.1.0. - Update `dprint@latest` to 0.57.0. ### [`v2.87.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.2): 2.87.2 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.1...v2.87.2) - Update `typos@latest` to 1.50.0. - Update `tombi@latest` to 1.5.0. - Update `shfmt@latest` to 3.14.0. ### [`v2.87.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.1): 2.87.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.0...v2.87.1) - Update `uv@latest` to 0.12.7. - Update `typos@latest` to 1.49.1. - Update `syft@latest` to 1.51.1. - Update `prek@latest` to 0.5.0. - Update `d2@latest` to 0.8.2. - Update `cargo-zigbuild@latest` to 0.23.3. - Update `cargo-rdme@latest` to 2.2.2. - Update `biome@latest` to 2.5.11. </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Shanghai) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
110 lines
4.0 KiB
YAML
110 lines
4.0 KiB
YAML
name: Prepare Release Apps
|
|
|
|
permissions: {}
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
# Triggers every Monday at 5pm Shanghai time (9am UTC)
|
|
- cron: "0 9 * * 1"
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
prepare:
|
|
if: github.repository == 'oxc-project/oxc'
|
|
name: Prepare Release
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
pull-request-number: ${{ steps.pr.outputs.pull-request-number }}
|
|
oxlint_version: ${{ steps.run.outputs.OXLINT_VERSION }}
|
|
oxfmt_version: ${{ steps.run.outputs.OXFMT_VERSION }}
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
fetch-depth: 0
|
|
persist-credentials: false
|
|
|
|
- uses: oxc-project/setup-rust@3d6fb132fbe7cdcb66bf8ec193911c2945369d12 # v1.0.17
|
|
with:
|
|
cache-key: warm
|
|
tools: cargo-release-oxc
|
|
|
|
- uses: oxc-project/setup-node@f46a72f95efdc55273fcd042d61c84e723b2892c # v1.4.1
|
|
|
|
- name: Generate version and changelog
|
|
id: run
|
|
run: |
|
|
mkdir -p target
|
|
cargo release-oxc update --changelog --release oxlint --release oxfmt
|
|
echo "OXLINT_VERSION=$(cat ./target/OXLINT_VERSION)" >> $GITHUB_OUTPUT
|
|
echo "OXFMT_VERSION=$(cat ./target/OXFMT_VERSION)" >> $GITHUB_OUTPUT
|
|
{
|
|
echo "# Oxlint"
|
|
cat ./target/OXLINT_CHANGELOG
|
|
echo ""
|
|
echo "# Oxfmt"
|
|
cat ./target/OXFMT_CHANGELOG
|
|
} > ./target/PR_BODY.md
|
|
|
|
- name: Rewrite rule versions
|
|
env:
|
|
OXLINT_VERSION: ${{ steps.run.outputs.OXLINT_VERSION }}
|
|
run: node .github/scripts/update-rule-versions.mts --release-version "$OXLINT_VERSION" --write
|
|
|
|
- name: Rebuild NAPI bindings
|
|
run: |
|
|
pnpm --filter oxlint-app run build-dev
|
|
pnpm --filter oxfmt-app run build-dev
|
|
|
|
- name: Update Cargo.lock
|
|
run: cargo check
|
|
|
|
- uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
|
|
id: app-token
|
|
with:
|
|
client-id: ${{ secrets.APP_ID }}
|
|
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
|
|
|
- uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
|
|
id: pr
|
|
with:
|
|
# bot account with PAT required for triggering workflow runs
|
|
# See https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
|
|
token: ${{ steps.app-token.outputs.token }}
|
|
commit-message: "release(apps): oxlint v${{ steps.run.outputs.OXLINT_VERSION }} && oxfmt v${{ steps.run.outputs.OXFMT_VERSION }}"
|
|
title: "release(apps): oxlint v${{ steps.run.outputs.OXLINT_VERSION }} && oxfmt v${{ steps.run.outputs.OXFMT_VERSION }}"
|
|
branch: release/apps
|
|
branch-suffix: timestamp
|
|
base: main
|
|
body-path: ./target/PR_BODY.md
|
|
assignees: Boshen
|
|
labels: |
|
|
run-oxlint-ecosystem-ci
|
|
run-oxfmt-ecosystem-ci
|
|
|
|
website:
|
|
needs: prepare
|
|
name: Update oxc.rs
|
|
runs-on: ubuntu-slim
|
|
permissions:
|
|
actions: write
|
|
steps:
|
|
- uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
|
|
- uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
|
|
id: app-token
|
|
with:
|
|
client-id: ${{ secrets.APP_ID }}
|
|
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
|
owner: oxc-project
|
|
repositories: website
|
|
- uses: benc-uk/workflow-dispatch@d004979be141727c7a17c28f603e2facc40d0855 # v1.3.3
|
|
with:
|
|
repo: oxc-project/website
|
|
workflow: release.yml
|
|
token: ${{ steps.app-token.outputs.token }}
|
|
ref: main
|
|
inputs: '{ "issue-number": "${{ needs.prepare.outputs.pull-request-number }}", "version": "${{ needs.prepare.outputs.oxlint_version }}" }'
|