Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: group dependencies and change action tags to SHAs #144

Merged
merged 1 commit into from
Jun 8, 2024
Merged

chore: group dependencies and change action tags to SHAs #144

merged 1 commit into from
Jun 8, 2024

Conversation

jmeridth
Copy link
Contributor

@jmeridth jmeridth commented Jun 8, 2024 •
edited
Loading

  • group dependecies for minor/patch updates to reduce PRs
    • keep major dependency updates to own PRs for visility and testing
  • change workflows to use SHAs instead of tags to security supply chain
  • drop codeql workflow since we're not doing anything custom, changed settings in repo to use default codeql runs

@jmeridth jmeridth self-assigned this Jun 8, 2024
@jmeridth jmeridth requested a review from a team as a code owner June 8, 2024 04:16
@jmeridth
chore: group dependencies and change action tags to SHAs
756a7c6 
- [x] group dependecies for minor/patch updates to reduce PRs
  - keep major dependency updates to own PRs for visility and testing
- [x] change workflows to use SHAs instead of tags to security supply chain
- [x] drop codeql workflow since we're not doing anything custom, changed settings in repo to use default codeql runs

Signed-off-by: jmeridth <jmeridth@gmail.com>
@jmeridth jmeridth force-pushed the jm_group_dependencies branch from 60953fc to 756a7c6 Compare June 8, 2024 04:19
@jmeridth jmeridth merged commit 12857c6 into main Jun 8, 2024
2 checks passed
@jmeridth jmeridth deleted the jm_group_dependencies branch June 8, 2024 08:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@zkoppert zkoppert zkoppert approved these changes

Assignees

@jmeridth jmeridth

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@jmeridth @zkoppert