linux/ohmyzsh
Watch
1
0
Fork
You've already forked ohmyzsh
 0
mirror of https://github.com/ohmyzsh/ohmyzsh.git synced 2026-07-24 05:57:47 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
7,820 commits 4 branches 0 tags 151 MiB
Commit graph ohmyzsh/.github/workflows/project.yml
Author SHA1 Message Date
dependabot[bot]
98fe9b81a6
 		chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 (#13863) 
Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-20 10:39:30 +02:00
dependabot[bot]
d633270784
 		chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 (#13768) 
Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 10:12:19 +02:00
dependabot[bot]
efd6135bf5
 		chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 (#13755) 
Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-18 08:45:12 +02:00
dependabot[bot]
c4e39ad56b
 		chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 (#13753) 
Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-18 08:43:53 +02:00
dependabot[bot]
571439d06b
 		chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 (#13727) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-04 09:18:30 +02:00
dependabot[bot]
bbe8cace5a
 		chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (#13711) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-27 09:15:13 +02:00
dependabot[bot]
7a6357cbf6
 		chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (#13697) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-20 10:55:24 +02:00
Carlo Sala
061f773dd3
 		ci: use client-id rather than app-id (#13690) 2026-04-13 11:31:03 +02:00
dependabot[bot]
c53cfb2de4
 		chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#13689) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-13 10:51:45 +02:00
dependabot[bot]
1708d84b70
 		chore(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 (#13687) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-13 09:54:42 +02:00
dependabot[bot]
beab0c0b3c
 		chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 (#13667) 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.16.0 to 2.16.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](fa2e9d605c...fe10465874)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-05 19:26:46 +02:00
dependabot[bot]
cfad9e07f6
 		chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 (#13641) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-23 09:12:34 +01:00
dependabot[bot]
b42f22643a
 		chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 (#13636) 
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](29824e69f5...f8d387b68d)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-16 07:52:03 +01:00
dependabot[bot]
2bc4538c36
 		chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 (#13620) 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.15.0 to 2.15.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](a90bcbc653...58077d3c7e)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-09 21:20:08 +01:00
dependabot[bot]
3fd2331ae8
 		chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0 (#13601) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-01 16:42:13 +01:00
dependabot[bot]
116be8badd
 		chore(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2 (#13557) 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.1 to 2.14.2.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](e3f713f2d8...5ef0c079ce)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-08 21:09:10 +01:00
dependabot[bot]
9df4ea095f
 		chore(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 (#13547)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1s
Details 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.14.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](20cf305ff2...e3f713f2d8)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-02 09:49:29 +01:00
dependabot[bot]
1fee750c3b
 		chore(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 (#13483) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-15 09:59:52 +01:00
dependabot[bot]
0ebeae78d0
 		chore(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#13470) 
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](7e473efe3c...29824e69f5)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-07 18:38:44 +01:00
dependabot[bot]
3b66f643e4
 		chore(deps): bump step-security/harden-runner from 2.13.2 to 2.13.3 (#13471) 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.2 to 2.13.3.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](95d9a5deda...df199fb7be)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-07 18:38:26 +01:00
dependabot[bot]
beadd56dd7
 		chore(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 (#13440)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2s
Details 
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](6701853927...7e473efe3c)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-23 22:37:35 +01:00
dependabot[bot]
18d0a63df8
 		chore(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 (#13414) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-09 20:03:00 +01:00
Marc Cornellà
242e2faa51
 		ci: improve security in project.yml workflow (#13329) 
There is no inherent security vulnerability in the workflow, but there were
certain practices that increased latent risk. In this commit, we:

- Explicitly bind app token for each step that needs it, instead of setting it for
  all steps after "Store app token"
- Refactor "classify" step, to not rely on files passed around, and instead uses
  only awk script.
- Remove all instances of template injection within `run` scripts. There was nothing
  dangerous, but the practice is unsafe.
- Sanitize all unwanted characters from PR plugin and theme names.

References: W2M1-06 W2M1-07
 2025-09-27 20:00:50 +02:00
StepSecurity Bot
7f3d8a34e2
 		ci: Harden GitHub Actions [StepSecurity] (#13318) 2025-09-19 17:30:10 +02:00
Carlo Sala
5c804257ce
 		ci: use actions/create-github-app-token (#13233) 2025-07-28 19:20:50 +02:00
Carlo Sala
544eb17e33 ci(project): use ohmyzsh's bot credentials 2023-12-28 21:21:39 +01:00
Marc Cornellà
1342459b15
 		ci: fix update of plugin or theme fields 
See [1] for the reference of value field (ProjectV2FieldValue type),
and [2] for sample application code.

[1] https://docs.github.com/en/graphql/reference/input-objects#projectv2fieldvalue
[2] https://docs.github.com/en/enterprise-cloud@latest/issues/planning-and-tracking-with-projects/automating-your-project/automating-projects-using-actions#example-workflow-authenticating-with-a-github-app
 2022-11-04 19:16:54 +01:00
Lennart Ochel
239e2f9fcd
 		ci: migrate to ProjectV2 GraphQL API (#11311) 2022-11-03 18:30:30 +01:00
Alex
065f5ffc5a
 		ci: harden permissions for GitHub Workflows (#11174) 
* build: harden main.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>

* build: harden project.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>

* Update project.yml

The permissions are not necessary, because a separate token is used `GITHUB_TOKEN: ${{ secrets.PROJECT_TOKEN }}`
 2022-10-07 14:39:00 +02:00
Marc Cornellà
4d9e5ce9a7
 		ci(project): sort issues and PRs when reopened 2022-04-04 21:40:08 +02:00
Marc Cornellà
ebfd7cb219
 		ci: cancel current runs on new trigger 2022-02-21 19:27:21 +01:00
Marc Cornellà
b481955761
 		ci(project): fix .list files not found error 2022-01-11 23:40:33 +01:00
Marc Cornellà
0ca2e48ee8
 		ci(project): fix gh pr view call to use ohmyzsh repository 2022-01-10 17:22:31 +01:00
Marc Cornellà
63345c4e5d
 		ci: disable GitHub Actions on forks 2022-01-03 13:10:53 +01:00
Marc Cornellà
512839ef78
 		chore: simplify project GitHub Action 2022-01-03 13:08:29 +01:00
Marc Cornellà
9dd1dc49d9
 		chore: simplify GITHUB_TOKEN env in project GitHub Action 2022-01-03 12:32:37 +01:00
Marc Cornellà
121ee818a5
 		chore: I'm dumb af 2022-01-02 03:37:16 +01:00
Marc Cornellà
dd7f0f2211
 		chore: let's try again 2022-01-02 03:32:48 +01:00
Marc Cornellà
17c52ccfc9
 		chore: look ma no auth! 2022-01-02 03:27:25 +01:00
Marc Cornellà
861e7e24a3
 		chore: please work 2022-01-02 03:19:46 +01:00
Marc Cornellà
1d35b30461
 		chore: fix auth in Project tracking Action 2022-01-02 03:17:40 +01:00
Marc Cornellà
95a66532d1
 		chore: use GITHUB_TOKEN auth for Project Beta GitHub Action 2022-01-02 03:09:52 +01:00
Marc Cornellà
d1c07f9569
 		chore: add Projects Beta GitHub Action 2022-01-02 02:30:00 +01:00