mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-09-19 15:38:48 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 9
6489 commits 36 branches 47 tags 158 MiB
Commit graph

317 commits

Author SHA1 Message Date
renovate[bot]
846368304c chore(deps): update mariadb docker tag to v11.5.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:59:49 +02:00
renovate[bot]
5d60abb5d5 chore(deps): update postgres docker tag to v16.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:59:11 +02:00
renovate[bot]
b38dbece19 chore(deps): update docker/build-push-action action to v5.4.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:01:11 +02:00
renovate[bot]
6c7dcb8954 chore(deps): update docker/login-action action to v3.3.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:00:46 +02:00
renovate[bot]
d00d7d4bd8 chore(deps): update docker/setup-buildx-action action to v3.6.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:00:21 +02:00
renovate[bot]
589ab5ddc5 chore(deps): update docker/setup-qemu-action action to v3.2.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 11:59:51 +02:00
renovate[bot]
ec2aaa86f7 chore(deps): update codecov/codecov-action action to v4.5.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 11:59:18 +02:00
renovate[bot]
0da6b21186 chore(deps): update github/codeql-action action to v3.26.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 11:58:45 +02:00
renovate[bot]
bc6688a83f chore(deps): update ossf/scorecard-action action to v2.4.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 11:58:22 +02:00
renovate[bot]
0455632c46 chore(deps): update mariadb docker tag to v11.2.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 10:43:54 +02:00
renovate[bot]
954a384d65 chore(deps): update ossf/scorecard-action action to v2.3.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 07:16:00 +00:00
renovate[bot]
51bc6cc33f chore(deps): update github/codeql-action action to v3.24.11 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 05:21:34 +00:00
renovate[bot]
c8c7715287 chore(deps): update fsfe/reuse docker tag to v3.0.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 05:20:45 +00:00
renovate[bot]
e242d5ccf3 chore(deps): update codecov/codecov-action action to v4.0.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:37:08 +00:00
renovate[bot]
95748d1370 chore(deps): update actions/upload-artifact action to v4.3.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:31:20 +00:00
renovate[bot]
5e236e4906 chore(deps): update actions/setup-node action to v4.0.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:30:51 +00:00
renovate[bot]
b65c8c1ff5 chore(deps): update actions/checkout action to v4.1.7 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:29:42 +00:00
renovate[bot]
9b64471554 chore(deps): update actions/checkout digest to 692973e 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:25:07 +00:00
renovate[bot]
8fedd5402c chore(deps): update actions/cache action to v4.0.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:24:54 +00:00
renovate[bot]
52944840c1 chore(deps): update actions/upload-artifact digest to 834a144 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:22:11 +00:00
Erik Michelson
1f1231a730 ci: remove netlify deployment workflow
Some checks failed
E2E Tests / backend-sqlite (push) Has been cancelled
Details
Static Analysis / CodeQL analysis (javascript) (push) Has been cancelled
Details
Run tests & build / Test and build with NodeJS ${{ matrix.node }} (true, 20) (push) Has been cancelled
Details
Docker / build-and-push (backend) (push) Has been cancelled
Details
Docker / build-and-push (frontend) (push) Has been cancelled
Details
Deploy HD2 docs to Netlify / Deploys to netlify (push) Has been cancelled
Details
E2E Tests / backend-mariadb (push) Has been cancelled
Details
E2E Tests / backend-postgres (push) Has been cancelled
Details
E2E Tests / Build test build of frontend (push) Has been cancelled
Details
Lint and check format / Lint files and check formatting (push) Has been cancelled
Details
REUSE Compliance Check / reuse (push) Has been cancelled
Details
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
Details
Static Analysis / Njsscan code scanning (push) Has been cancelled
Details
E2E Tests / frontend-cypress (1) (push) Has been cancelled
Details
E2E Tests / frontend-cypress (2) (push) Has been cancelled
Details
E2E Tests / frontend-cypress (3) (push) Has been cancelled
Details 
This workflow was used in an early stage of development of HedgeDoc 2.
It allowed the core developers to quickly check fixes, improvements or
new features to the HedgeDoc UI without the requirement to check-out
the branch locally. As not every pull request required a deployment,
this workflow was only triggered when the "ci: force deployment"
label was added. Since some time already, the frontend and backend
are so tightly coupled that the netfliy deployment doesn't make any
sense anymore and therefore hasn't been used anymore. This commit
therefore removes this leftover workflow.

@RedYetiDev contacted us privately and reported that this deployment
workflow could have been abused to invoke arbitrary commands, including
extraction of environment variables which include our tokens for the
turborepo build cache or the netlify deployment token. For this it
would have been required that somebody created a "safe" pull request,
which would have been labelled with the deployment label and then
changed afterwards since the workflow checks out the pull request
source repository, not the target. We assured that the label was only
added to pull requests from trusted members of the HedgeDoc core team.
There was never any malicious use of the workflow. Furthermore, no
released versions of HedgeDoc (1.x) could have been affected by this,
even in the worst-case scenario.

We're thankful for putting this risk at our attention!
If you too encounter something unusual regarding security in HedgeDoc
itself or our toolchain around it, don't hesitate to contact us.
Details on this are wriiten in our SECURITY.md in the root of the
repository.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-07-30 08:48:38 +02:00
Erik Michelson
d3318eb232 fix(ci): adjust options for artifacts action v4 
See: https://github.com/actions/upload-artifact/blob/main/docs/MIGRATION.md
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-02-12 09:39:38 +01:00
renovate[bot]
6e42da2613 chore(deps): update actions/download-artifact action to v4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 09:39:38 +01:00
renovate[bot]
31a0103b42 chore(deps): update actions/upload-artifact action to v4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 09:39:38 +01:00
renovate[bot]
57be001b0e chore(deps): update actions/setup-python action to v5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 09:39:38 +01:00
renovate[bot]
8faa200ce2 chore(deps): update actions/cache action to v4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 09:39:38 +01:00
renovate[bot]
2b3f18f735 chore(deps): update codecov/codecov-action action to v4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 09:39:38 +01:00
renovate[bot]
9e63419dff chore(deps): update github/codeql-action action to v3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 09:39:38 +01:00
renovate[bot]
87eda11b10 chore(deps): update fsfe/reuse docker tag to v3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:10:43 +01:00
renovate[bot]
7e45914cc1 chore(deps): update github/codeql-action action to v2.24.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:00:34 +01:00
renovate[bot]
6b256b9233 chore(deps): update docker/metadata-action action to v5.5.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:00:34 +01:00
renovate[bot]
8255fd1612 chore(deps): update codecov/codecov-action action to v3.1.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:00:34 +01:00
renovate[bot]
96353811a5 chore(deps): update actions/setup-node action to v4.0.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:00:34 +01:00
renovate[bot]
6c73e68973 chore(deps): update postgres:16.1 docker digest to 09f23e0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:00:34 +01:00
renovate[bot]
6dd0dbca07 chore(deps): update mariadb:11.2.2 docker digest to c5077bb 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 15:29:38 +00:00
renovate[bot]
c0b7394873 chore(deps): update actions/upload-artifact digest to 4c0ff1c 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 15:28:29 +00:00
renovate[bot]
17aade0934 chore(deps): update actions/upload-artifact digest to d00351b 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-29 15:29:24 +00:00
renovate[bot]
2ef9c1f5db chore(deps): update codecov/codecov-action action to v3.1.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-28 16:51:29 +00:00
renovate[bot]
9e315033f2 chore(deps): update actions/upload-artifact digest to 26f96df 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-25 09:10:44 +01:00
renovate[bot]
ab663a2852 chore(deps): update github/codeql-action action to v2.22.12 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-24 21:57:26 +00:00
renovate[bot]
c180d0eb24 chore(deps): update actions/setup-node action to v4.0.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-22 03:14:03 +00:00
renovate[bot]
8b5704cc87 chore(deps): update actions/cache action to v3.3.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-21 21:45:30 +00:00
renovate[bot]
7c377292f9 chore(deps): update postgres:16.1 docker digest to 49c276f 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-21 19:59:30 +00:00
renovate[bot]
cc5ac4fa06 chore(deps): update mariadb:11.2.2 docker digest to eb6a2d3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-21 14:50:14 +00:00
Tilman Vatteroth
cd01deca67 fix(ci): artifact-upload in e2e tests 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-01-19 10:20:02 +01:00
renovate[bot]
912165cfbb chore(deps): update actions/upload-artifact digest to 694cdab 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-18 20:28:57 +00:00
Tilman Vatteroth
01d7eb9529 fix(deps): bump minimum node version to v20 
With node 18 the tests always crash.

Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-01-18 19:12:46 +01:00
Tilman Vatteroth
931ce68a32 Add pull_request_target trigger to lint workflow 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-01-17 14:36:54 +01:00
Tilman Vatteroth
3aa5bb1e34 Add pull_request_target trigger to test-and-build workflow 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-01-17 14:36:54 +01:00
renovate[bot]
5ee0ac288a chore(deps): update mariadb docker tag to v11.2.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-07 21:14:49 +01:00