Vincent Koc
eabc12b7d6
fix(sandbox): install supported node in common image
2026-06-24 22:54:00 +08:00
Vincent Koc
4f8fd48ea7
fix(ci): cool down main workflow fanout
2026-06-20 17:37:04 +08:00
Vincent Koc
abb6f04e0c
ci(release): harden release controls
...
One-time maintainer-authorized bootstrap merge for the release-gate verifier policy. Exact hosted CI and all supporting workflow gates passed on 66133de419 .
2026-06-18 03:11:20 +08:00
dependabot[bot]
662d366f01
chore(deps): bump the actions group across 1 directory with 4 updates ( #90601 )
...
Bumps the actions group with 4 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action ), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ), [docker/build-push-action](https://github.com/docker/build-push-action ) and [openai/codex-action](https://github.com/openai/codex-action ).
Updates `github/codeql-action` from 4 to 4.36.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.36.1 )
Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](4d04d5d948...d7f5e7f509 )
Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](bcafcacb16...f9f3042f7e )
Updates `openai/codex-action` from 1.7 to 1.8
- [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md )
- [Commits](5c3f4ccdb2...e0fdf01220 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: docker/build-push-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: openai/codex-action
dependency-version: '1.8'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 13:37:40 -07:00
Vincent Koc
e96cde7e14
fix(ci): bound docker pull smoke steps
2026-05-26 17:28:37 +02:00
Peter Steinberger
02c2160478
chore: clean up root clutter
2026-05-03 12:20:52 +01:00
Peter Steinberger
5c85624eeb
Revert "ci: use Blacksmith checkout cache"
...
This reverts commit 43734b1dbd .
2026-04-21 03:21:48 +01:00
Peter Steinberger
43734b1dbd
ci: use Blacksmith checkout cache
2026-04-21 03:09:13 +01:00
Mason Huang
f697b01747
CI: pin Docker-related GitHub Actions ( #67632 )
...
* CI: pin Docker-related GitHub Actions
* CI: pin docker build-push action
2026-04-16 19:23:03 +08:00
Mason Huang
01b7516a95
CI: add explicit permissions to all workflow jobs (fixes code-scanning #40-#57) ( #67612 )
2026-04-16 18:18:35 +08:00
Vincent Koc
a97188ceb3
ci: start required checks earlier ( #53844 )
...
* ci: start required checks earlier
* ci: restore pnpm in security-fast
* ci: skip docs-only payloads in early check jobs
* ci: harden untrusted pull request execution
* ci: pin gradle setup action
* ci: normalize pull request concurrency cancellation
* ci: remove duplicate early-lane setup
* ci: keep install-smoke push runs unique
2026-03-24 11:37:58 -07:00
Vincent Koc
56b6585e2e
ci(actions): skip heavy draft pr workflows
2026-03-21 15:50:32 -07:00
Peter Steinberger
6a812b621d
ci: modernize GitHub Actions workflow versions
2026-03-13 16:57:23 +00:00
Peter Steinberger
41718404a1
ci: opt workflows into Node 24 action runtime
2026-03-13 16:41:22 +00:00
Peter Steinberger
9f08af1f06
fix(ci): harden docker builds and unblock config docs
2026-03-12 16:45:29 +00:00
Vincent Koc
24fd6c8278
CI: use Blacksmith docker builder in sandbox smoke
2026-03-02 18:48:18 -08:00
Peter Steinberger
ce1f0c0a10
ci: move workflows to blacksmith 16vcpu runners
2026-02-19 17:25:15 +01:00
Peter Steinberger
1e4cf489e0
fix(ci): keep main runs alive while coalescing newer pushes
2026-02-16 09:53:36 +01:00
Peter Steinberger
2983ef0243
fix(ci): use ref-based concurrency across workflows
2026-02-16 09:47:07 +01:00
Peter Steinberger
c8c8fc4530
ci(sandbox): add sandbox-common smoke
2026-02-15 00:57:13 +01:00