Antoine du Hamel
2a99210ff7
tools: use sparse checkout in build-tarball.yml
...
PR-URL: https://github.com/nodejs/node/pull/59788
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
Reviewed-By: Pietro Marchini <pietro.marchini94@gmail.com >
2025-09-08 15:08:55 +00:00
Antoine du Hamel
df59e21352
tools: remove unused actions from build-tarball.yml
...
PR-URL: https://github.com/nodejs/node/pull/59787
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2025-09-08 14:59:41 +00:00
Antoine du Hamel
ed68b26ca3
tools: do not attempt to compress tgz archive
...
Refs: https://github.com/actions/upload-artifact?tab=readme-ov-file#altering-compressions-level-speed-v-size
PR-URL: https://github.com/nodejs/node/pull/59785
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Chengzhong Wu <legendecas@gmail.com >
Reviewed-By: Pietro Marchini <pietro.marchini94@gmail.com >
2025-09-08 14:51:37 +00:00
dependabot[bot]
9b0e9f4544
meta: bump codecov/codecov-action
...
Bumps `codecov/codecov-action` from 5.4.3 to 5.5.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/39a2af19d...5.5.0 )
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/59726
Refs: fdcc847654
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Rich Trott <rtrott@gmail.com >
2025-09-05 08:03:11 +02:00
dependabot[bot]
538186b84f
meta: bump actions/download-artifact from 4.3.0 to 5.0.0
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.3.0 to 5.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](d3f86a106a...634f93cb29 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/59729
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2025-09-04 12:54:13 +00:00
dependabot[bot]
66fcca4328
meta: bump github/codeql-action from 3.29.2 to 3.30.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.2 to 3.30.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](181d5eefc2...2d92b76c45 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/59728
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-09-04 11:42:21 +00:00
dependabot[bot]
c34b06a2a4
meta: bump actions/cache from 4.2.3 to 4.2.4
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.3 to 4.2.4.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](5a3ec84eff...0400d5f644 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 4.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/59727
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-09-04 11:33:38 +00:00
dependabot[bot]
92f4c47aea
meta: bump actions/checkout from 4.2.2 to 5.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/59725
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2025-09-04 11:25:33 +00:00
Antoine du Hamel
b8fa294994
tools: add sccache to test-internet workflow
...
PR-URL: https://github.com/nodejs/node/pull/59720
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-09-04 08:52:20 +00:00
Michaël Zasso
494909b4f8
build: use windows-2025 runner
...
GitHub is transitioning `windows-latest` to it.
PR-URL: https://github.com/nodejs/node/pull/59673
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
2025-08-31 14:19:11 +00:00
Rich Trott
786431f6ca
tools: update coverage GitHub Actions to fixed version
...
Refs: https://github.com/codecov/codecov-action/pull/1859
Refs: https://github.com/codecov/codecov-action/issues/1858
PR-URL: https://github.com/nodejs/node/pull/59512
Reviewed-By: Filip Skokan <panva.ip@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Zeyu "Alex" Yang <himself65@outlook.com >
Reviewed-By: Moshe Atlow <moshe@atlow.co.il >
Reviewed-By: Daeyeon Jeong <daeyeon.dev@gmail.com >
Reviewed-By: Pietro Marchini <pietro.marchini94@gmail.com >
2025-08-18 08:30:57 +00:00
Michaël Zasso
8a87ba031b
build: bump minimum Clang version to 19
...
This is now required by V8.
Refs: https://github.com/nodejs/node-v8/issues/302
PR-URL: https://github.com/nodejs/node/pull/59048
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Matteo Collina <matteo.collina@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Richard Lau <richard.lau@ibm.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2025-08-02 14:10:07 +00:00
Rafael Gonzaga
037b65500b
meta: add tsc and build team as codeowners building.md
...
PR-URL: https://github.com/nodejs/node/pull/59298
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Ruy Adorno <ruy@vlt.sh >
Reviewed-By: Darshan Sen <raisinten@gmail.com >
Reviewed-By: Chengzhong Wu <legendecas@gmail.com >
Reviewed-By: Matteo Collina <matteo.collina@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-08-02 13:59:50 +00:00
Rafael Gonzaga
9086337852
meta: add nodejs/path to path files
...
PR-URL: https://github.com/nodejs/node/pull/59289
Reviewed-By: Filip Skokan <panva.ip@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Darshan Sen <raisinten@gmail.com >
2025-08-01 18:48:10 +00:00
Michaël Zasso
af77e4bf2f
build: update macOS runner and Xcode
...
Xcode 16.4 will be required for Node.js 25.
macOS 15 is required for Xcode 16.4.
Refs: https://github.com/nodejs/node/issues/58069
Co-authored-by: Yagiz Nizipli <yagiz@nizipli.com >
PR-URL: https://github.com/nodejs/node/pull/59238
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com >
2025-07-29 15:51:27 +00:00
Antoine du Hamel
4dafa7747f
tools: ignore CVE mention when linting release proposals
...
PR-URL: https://github.com/nodejs/node/pull/59037
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2025-07-13 19:45:02 +00:00
dependabot[bot]
247672d078
meta: bump step-security/harden-runner from 2.12.0 to 2.12.2
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.12.0 to 2.12.2.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](0634a2670c...6c439dc8bd )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58923
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2025-07-04 12:33:36 +00:00
dependabot[bot]
e13d15d614
meta: bump github/codeql-action from 3.28.18 to 3.29.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.18 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](ff0a06e83c...181d5eefc2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58922
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2025-07-04 12:33:28 +00:00
Chengzhong Wu
8204eeb268
meta: add @nodejs/inspector as codeowner
...
PR-URL: https://github.com/nodejs/node/pull/58790
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Darshan Sen <raisinten@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Zeyu "Alex" Yang <himself65@outlook.com >
2025-06-24 10:05:43 +00:00
Antoine du Hamel
efd28a0ca2
tools: edit commit-queue workflow file
...
PR-URL: https://github.com/nodejs/node/pull/58667
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Chemi Atlow <chemi@atlow.co.il >
Reviewed-By: LiviaMedeiros <livia@cirno.name >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2025-06-12 20:05:27 +00:00
dependabot[bot]
ff8c4091d5
meta: bump github/codeql-action from 3.28.16 to 3.28.18
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.16 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](28deaeda66...ff0a06e83c )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58552
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-06-07 09:07:04 +00:00
dependabot[bot]
c2d4c78007
meta: bump codecov/codecov-action from 5.4.2 to 5.4.3
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.4.2 to 5.4.3.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](ad3126e916...18283e04ce )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 5.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58551
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-06-07 09:06:56 +00:00
dependabot[bot]
52f387e6e0
meta: bump step-security/harden-runner from 2.11.0 to 2.12.0
...
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner ) from 2.11.0 to 2.12.0.
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](4d991eb9b9...0634a2670c )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58109
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2025-06-07 08:56:47 +00:00
dependabot[bot]
53938a78f3
meta: bump ossf/scorecard-action from 2.4.1 to 2.4.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](f49aabe0b5...05b42c6244 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58550
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-06-04 22:05:00 +00:00
dependabot[bot]
3bfca86fca
meta: bump rtCamp/action-slack-notify from 2.3.2 to 2.3.3
...
Bumps [rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify ) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/rtcamp/action-slack-notify/releases )
- [Commits](c33737706d...e31e87e03d )
---
updated-dependencies:
- dependency-name: rtCamp/action-slack-notify
dependency-version: 2.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58108
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2025-06-04 22:04:51 +00:00
dependabot[bot]
3067874ba1
meta: bump github/codeql-action from 3.28.11 to 3.28.16
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.11 to 3.28.16.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.28.11...28deaeda66b76a05916b6923827895f2b14ab387 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58112
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-05-25 18:23:52 +00:00
dependabot[bot]
69b3cc8b44
meta: bump codecov/codecov-action from 5.4.0 to 5.4.2
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.4.0 to 5.4.2.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](0565863a31...ad3126e916 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 5.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58110
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-05-25 18:23:43 +00:00
dependabot[bot]
2ecf8fa1ec
meta: bump actions/download-artifact from 4.2.1 to 4.3.0
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.2.1 to 4.3.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](95815c38cf...d3f86a106a )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58106
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-05-24 20:45:18 +00:00
Jonas
b1d598744c
meta: ignore mailmap changes in linux ci
...
PR-URL: https://github.com/nodejs/node/pull/58356
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Filip Skokan <panva.ip@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com >
2025-05-16 18:53:33 +00:00
Rafael Gonzaga
0c78a48d75
tools: ignore deps/ and benchmark/ for CodeQL
...
PR-URL: https://github.com/nodejs/node/pull/58254
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
2025-05-15 21:41:17 +02:00
Antoine du Hamel
6e222edb50
tools: add read permission to workflows that read contents
...
Not having this permission is OK because the repo is public, but
on private forks, it fails the checkout step.
PR-URL: https://github.com/nodejs/node/pull/58255
Reviewed-By: LiviaMedeiros <livia@cirno.name >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2025-05-11 23:10:36 +00:00
Rich Trott
c46b2b9da3
tools: exclude deps/v8/tools from CodeQL scans
...
This will remove three of the four "A parse error occurred" issues
during JavaScript CodeQL scans. (The fourth occurrence is in our code
base, although it might be a false positive. Someone can figure that one
out sooner or later, but we certainly can bypass scanning V8 tools.)
PR-URL: https://github.com/nodejs/node/pull/58132
Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com >
Reviewed-By: Colin Ihrig <cjihrig@gmail.com >
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com >
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
2025-05-05 05:11:53 +00:00
dependabot[bot]
1b2bf2dddf
meta: bump actions/setup-node from 4.3.0 to 4.4.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](cdca7365b2...49933ea528 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58111
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-05-03 19:04:40 +00:00
dependabot[bot]
92102c0923
meta: bump actions/setup-python from 5.5.0 to 5.6.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.5.0 to 5.6.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](8d9ed9ac5c...a26af69be9 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 5.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/58107
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-05-03 19:04:32 +00:00
Michaël Zasso
187fc5cc3a
deps: remove deps/simdutf
...
We depend on V8's version of simdutf now.
PR-URL: https://github.com/nodejs/node/pull/58070
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Darshan Sen <raisinten@gmail.com >
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2025-05-02 15:10:36 +02:00
Rich Trott
fca4107e76
tools: ignore V8 tests in CodeQL scans
...
CodeQL reports hundreds of errors in V8 tests indicating 'A parse error
occurred'. Code quality issues in V8 tests are not a concern for
Node.js. Exclude the tests from CodeQL scans.
PR-URL: https://github.com/nodejs/node/pull/58081
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com >
Reviewed-By: Colin Ihrig <cjihrig@gmail.com >
Reviewed-By: Michael Dawson <midawson@redhat.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Chemi Atlow <chemi@atlow.co.il >
2025-05-02 06:12:58 +00:00
Michaël Zasso
44b4354b4e
build: downgrade armv7 support to experimental
...
There are a bunch of issues on that platform with recent V8 versions
and we don't have the capacity to fix them.
PR-URL: https://github.com/nodejs/node/pull/58071
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: Darshan Sen <raisinten@gmail.com >
Reviewed-By: Chengzhong Wu <legendecas@gmail.com >
Reviewed-By: Matteo Collina <matteo.collina@gmail.com >
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com >
Reviewed-By: Richard Lau <rlau@redhat.com >
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de >
Reviewed-By: Michael Dawson <midawson@redhat.com >
Reviewed-By: Paolo Insogna <paolo@cowtech.it >
2025-04-29 14:57:11 +00:00
Rich Trott
067a779f17
tools: enable CodeQL config file
...
A previous change designed to ignore test files in CodeQL scans had
multiple problems. This fixes the CodeQL scan breakage. It adds a
CodeQL config file, which allows us to ignore the test directory
in our scans.
Refs: https://github.com/nodejs/node/pull/57978#issuecomment-2829182983
Refs: https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#specifying-directories-to-scan
PR-URL: https://github.com/nodejs/node/pull/58036
Reviewed-By: Colin Ihrig <cjihrig@gmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-04-28 13:34:47 +00:00
Rich Trott
1b5b12c3e6
tools: ignore test directory in CodeQL scans
...
Scanning the test directory results in many false positives about
hard-coded credentials. We want the code scan for
user-exectuable code and possibly our tools, but not generally
for tests. Ignore the test directory in CodeQL scans. A long list
of false positives makes it harder to interpret the result of CodeQL
runs.
PR-URL: https://github.com/nodejs/node/pull/57978
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
2025-04-24 18:52:25 +00:00
Luigi Pinca
a365da6b0c
meta: fix subsystem in commit title
...
"config" is not recognized as a valid subsystem by
`core-validate-commit@4.1.0`.
Refs: https://github.com/nodejs/node/commit/478a2e656d803970e93c
PR-URL: https://github.com/nodejs/node/pull/57945
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
2025-04-22 06:43:48 +00:00
Michaël Zasso
25842c5e35
build: use clang-cl in coverage-windows workflow
...
And do not lose time trying to regenerate the project and rebuild
before running the tests.
PR-URL: https://github.com/nodejs/node/pull/57919
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com >
2025-04-19 18:00:41 +00:00
Rafael Gonzaga
78fd82b77b
tools: add codeql nightly
...
Refs: https://github.com/nodejs/node/pull/57535
PR-URL: https://github.com/nodejs/node/pull/57788
Reviewed-By: James M Snell <jasnell@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
2025-04-14 17:22:32 +00:00
KASEYA\yahor.siarheyenka
18c18fe216
tools: add zstd updater to workflow
...
PR-URL: https://github.com/nodejs/node/pull/57831
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com >
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com >
Reviewed-By: James M Snell <jasnell@gmail.com >
2025-04-13 09:57:01 -07:00
dependabot[bot]
3b34fd77f2
meta: bump Mozilla-Actions/sccache-action from 0.0.8 to 0.0.9
...
Bumps [Mozilla-Actions/sccache-action](https://github.com/mozilla-actions/sccache-action ) from 0.0.8 to 0.0.9.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases )
- [Commits](65101d47ea...7d986dd989 )
---
updated-dependencies:
- dependency-name: Mozilla-Actions/sccache-action
dependency-version: 0.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57720
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-04-03 18:42:33 +00:00
dependabot[bot]
a6de850ffe
meta: bump actions/download-artifact from 4.1.9 to 4.2.1
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.9 to 4.2.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](cc20338598...95815c38cf )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 4.2.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57719
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Tierney Cyren <hello@bnb.im >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-04-03 18:42:18 +00:00
dependabot[bot]
a4df6f959d
meta: bump actions/setup-python from 5.4.0 to 5.5.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](42375524e2...8d9ed9ac5c )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 5.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57718
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-04-03 18:41:43 +00:00
dependabot[bot]
c528569182
meta: bump peter-evans/create-pull-request from 7.0.7 to 7.0.8
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.7 to 7.0.8.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](dd2324fc52...271a8d0340 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 7.0.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57717
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com >
2025-04-03 18:41:28 +00:00
dependabot[bot]
04e0dfdf49
meta: bump github/codeql-action from 3.28.10 to 3.28.13
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.10 to 3.28.13.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b56ba49b26...1b549b9259 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57716
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-04-03 18:41:19 +00:00
dependabot[bot]
7100a44f3d
meta: bump actions/cache from 4.2.2 to 4.2.3
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.2 to 4.2.3.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](d4323d4df1...5a3ec84eff )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 4.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57715
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
2025-04-03 18:41:11 +00:00
dependabot[bot]
ad12766783
meta: bump actions/setup-node from 4.2.0 to 4.3.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](1d0ff469b7...cdca7365b2 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
PR-URL: https://github.com/nodejs/node/pull/57714
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com >
Reviewed-By: Luigi Pinca <luigipinca@gmail.com >
Reviewed-By: Michaël Zasso <targos@protonmail.com >
2025-04-03 18:41:03 +00:00