Joey Perrott
743be79749
ci: migrate windows job to GHA ( #51010 )
...
Migrate windows job to use Github Actions
PR Close #51010
2023-07-17 14:51:36 +00:00
Joey Perrott
5a5bcd2565
ci: migrate devtools tests to GHA ( #51008 )
...
Migrate devtools tests to run on Github Actions
PR Close #51008
2023-07-14 09:43:36 -07:00
Diogo Teles Sant'Anna
d82c47333a
ci: prevent injection attacks by changing how to use user input ( #51026 )
...
Update the code to not use user input directly on executable code, as it can be used for injection attacks, as detailed [here](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections )
PR Close #51026
2023-07-13 09:35:57 -07:00
Angular Robot
6cac41f039
build: update github/codeql-action action to v2.20.3 ( #50930 )
...
See associated pull request for more information.
PR Close #50930
2023-07-13 09:33:53 -07:00
Joey Perrott
25153e94f6
ci: use frozen-lockfile in CI ( #51012 )
...
Use frozen-lockfile for the CI yarn install
PR Close #51012
2023-07-11 19:05:30 +00:00
Joey Perrott
6c76a83e31
ci: migrate lint job from CircleCI to GHA ( #50891 )
...
Migrate the lint job to Github Actions
PR Close #50891
2023-07-11 17:06:16 +00:00
Angular Robot
4782336fe4
build: update cross-repo angular dependencies ( #50881 )
...
See associated pull request for more information.
PR Close #50881
2023-06-30 11:43:29 -07:00
Angular Robot
471cdff082
build: update scorecard action dependencies ( #50880 )
...
See associated pull request for more information.
PR Close #50880
2023-06-30 11:42:48 -07:00
Paul Gschwendtner
00f01497bc
ci: reduce benchmark compare permissions
...
Even though the action is already guarded to only run for
organization members that manually trigger the action, we
can reduce the permissions by using a GitHub token without
any permissions to post the result comment.
2023-06-30 18:37:36 +02:00
Angular Robot
7aa913e512
build: update actions/checkout digest to c85c95e ( #50640 )
...
See associated pull request for more information.
PR Close #50640
2023-06-27 15:57:59 -07:00
Angular Robot
7f4a7b4ea2
build: update github/codeql-action action to v2.20.0 ( #50774 )
...
See associated pull request for more information.
PR Close #50774
2023-06-20 14:55:36 +02:00
Paul Gschwendtner
17a95dac22
build: resolve benchmark compare SHA from PR branch or upstream remote ( #50764 )
...
If we try to resolve the benchmark compare ref (which may be just
`main`), we are just looking inside the PR branch- but that may
not include the `main` SHA. i.e. it's possible to run a comparison
where the PR is slightly behind of the `main` branch, or a comparison
commit from a different branch is used.
We fix this/ and simplify the logic by resolving the SHAs directly in
the TypeScript code, instead of relying on the rather brittle Bash.
Note that current solution still works, but we sometimes may not be able
to resolve to an actual SHA- causing issues as in 864bd72cb2
PR Close #50764
2023-06-19 12:54:54 +00:00
Paul Gschwendtner
864bd72cb2
build: resolve benchmark compare ref to improve results text
...
Currently the compare ref might be `main`. We will use that value
and put it into the GitHub results comment. This is non-ideal because
in the future `main` might be a different SHA and the results comment
would become invalid/confusing.
We fix this by resolving the actual SHA when the benchmark was
initiated.
2023-06-19 14:10:31 +02:00
Paul Gschwendtner
28961e805f
build: pin action dependency for improved security
...
Pins the pull request comment branch action dependency
for improved security and deterministic behavior.
2023-06-19 14:10:31 +02:00
Paul Gschwendtner
ac13b65074
ci: fix benchmark compare to work with fork pull requests ( #50758 )
...
The checkout action always assumes the main repository, but
the branch name/SHA of the pull request will be from a fork.
We fix this by using an updated action that exposes the branch
repo owner and name, so that we can check out the actual PR
branch/SHA.
PR Close #50758
2023-06-19 10:40:30 +00:00
Paul Gschwendtner
d5736d7d50
build: create github action to run benchmark comparisons ( #50745 )
...
This commit creates a GitHub action that runs benchmark comparisons
for a single target whenever a command comment is created by trusted
Angular organization members:
```
/benchmark-compare <compare-ref> <benchmark-target>
```
The benchmark will be run locally in Github actions, using the same
machine to minimize number deviation. The results are then printed
to the GitHub PR using a comment.
At current time, no actual "green/red" state is computed, but rather
the raw results are printed. In the future, since we have all the
metric data from the benchpress JSON logs, we could implement something
more easy to understand- but that's a follow-up/needs more discussion.
PR Close #50745
2023-06-18 19:32:34 +00:00
Angular Robot
0f299c0061
build: update actions/checkout action to v3.5.3 ( #50689 )
...
See associated pull request for more information.
PR Close #50689
2023-06-13 14:48:02 +02:00
Angular Robot
ad82f3ab47
build: update all non-major dependencies ( #50583 )
...
See associated pull request for more information.
PR Close #50583
2023-06-13 12:45:12 +02:00
Angular Robot
22eb947db0
build: update github/codeql-action action to v2.3.6 ( #50585 )
...
See associated pull request for more information.
PR Close #50585
2023-06-06 14:13:39 -07:00
Angular Robot
f5b82b54b6
build: update github/codeql-action action to v2.3.5 ( #50508 )
...
See associated pull request for more information.
PR Close #50508
2023-05-30 13:04:42 -07:00
Angular Robot
7ac8f09dd6
build: update github/codeql-action action to v2.3.3 ( #50216 )
...
See associated pull request for more information.
PR Close #50216
2023-05-09 14:48:54 -07:00
Angular Robot
47c093a739
build: update cross-repo angular dependencies ( #50105 )
...
See associated pull request for more information.
PR Close #50105
2023-05-02 18:26:46 +02:00
Angular Robot
123f689cb6
build: update cross-repo angular dependencies ( #50107 )
...
See associated pull request for more information.
PR Close #50107
2023-05-02 16:10:48 +02:00
Angular Robot
d0a9150be0
build: update github/codeql-action action to v2.3.2 ( #50102 )
...
See associated pull request for more information.
PR Close #50102
2023-05-02 12:29:03 +02:00
Angular Robot
0ccf6c9b58
build: update cross-repo angular dependencies ( #50069 )
...
See associated pull request for more information.
PR Close #50069
2023-05-02 12:17:34 +02:00
Angular Robot
bfa6e6ad23
build: update cross-repo angular dependencies ( #50067 )
...
See associated pull request for more information.
PR Close #50067
2023-04-28 18:19:42 +02:00
Angular Robot
c650b40816
build: update cross-repo angular dependencies ( #49978 )
...
See associated pull request for more information.
PR Close #49978
2023-04-28 13:36:18 +02:00
Paul Gschwendtner
aba7f03920
ci: update link to start google presubmit ( #50060 )
...
Updates the golink to start a google presubmit, given that
documentation has moved.
PR Close #50060
2023-04-28 11:41:21 +02:00
Angular Robot
316d1d0905
build: update github/codeql-action action to v2.3.0 ( #49992 )
...
See associated pull request for more information.
PR Close #49992
2023-04-26 11:28:10 -07:00
Angular Robot
a5428a7fa6
build: update cross-repo angular dependencies ( #49964 )
...
See associated pull request for more information.
PR Close #49964
2023-04-24 11:53:26 -07:00
Angular Robot
27093a7167
build: update cross-repo angular dependencies ( #49956 )
...
See associated pull request for more information.
PR Close #49956
2023-04-21 09:06:25 -07:00
Angular Robot
bf8041fdfc
build: update angular/dev-infra digest to 1564c4e ( #49916 )
...
See associated pull request for more information.
PR Close #49916
2023-04-18 22:09:40 +00:00
Angular Robot
85f3a38bb3
build: update all non-major dependencies ( #49909 )
...
See associated pull request for more information.
PR Close #49909
2023-04-18 20:54:28 +00:00
Angular Robot
882ca66f05
build: update cross-repo angular dependencies ( #49891 )
...
See associated pull request for more information.
PR Close #49891
2023-04-18 19:06:46 +00:00
Angular Robot
ec30674e20
build: update scorecard action dependencies ( #49897 )
...
See associated pull request for more information.
PR Close #49897
2023-04-18 13:58:53 +00:00
Angular Robot
f023020368
build: update cross-repo angular dependencies ( #49887 )
...
See associated pull request for more information.
PR Close #49887
2023-04-17 15:46:39 +00:00
Angular Robot
3fcf8bd667
build: update actions/checkout digest to 8e5e7e5 ( #49815 )
...
See associated pull request for more information.
PR Close #49815
2023-04-17 13:31:19 +00:00
Angular Robot
85c1a6463f
build: update github/codeql-action action to v2.2.11 ( #49775 )
...
See associated pull request for more information.
PR Close #49775
2023-04-12 09:26:02 -07:00
Joey Perrott
8ad31d53b0
ci: remove lock-closed action ( #49650 )
...
Remove the lock-closed asction as it has been centralized within dev-infra
PR Close #49650
2023-04-06 15:37:14 -07:00
Angular Robot
12b2caad24
build: update scorecard action dependencies ( #49609 )
...
See associated pull request for more information.
PR Close #49609
2023-03-31 11:49:46 -07:00
Angular Robot
de55fdfceb
build: update cross-repo angular dependencies ( #49649 )
...
See associated pull request for more information.
PR Close #49649
2023-03-31 11:46:15 -07:00
Angular Robot
9400b0f652
build: update actions/checkout digest to 8f4b7f8 ( #49577 )
...
See associated pull request for more information.
PR Close #49577
2023-03-24 10:27:35 -07:00
Angular Robot
f0f1e7dfa7
build: update scorecard action dependencies ( #49508 )
...
See associated pull request for more information.
PR Close #49508
2023-03-21 16:39:09 +01:00
Angular Robot
1acf3ec84b
build: update cross-repo angular dependencies ( #49514 )
...
See associated pull request for more information.
PR Close #49514
2023-03-21 15:18:13 +01:00
Angular Robot
fa023dd41f
build: update actions/checkout digest to 24cb908 ( #49436 )
...
See associated pull request for more information.
PR Close #49436
2023-03-17 08:38:14 +01:00
Angular Robot
de0bdeea4c
build: update github/codeql-action action to v2.2.6 ( #49420 )
...
See associated pull request for more information.
PR Close #49420
2023-03-15 17:01:00 -07:00
Angular Robot
c10962b713
build: update cross-repo angular dependencies ( #49388 )
...
See associated pull request for more information.
PR Close #49388
2023-03-13 09:24:13 +00:00
Alan Agius
a50ff60bff
build: update cross-repo angular dependencies ( #49376 )
...
See associated pull request for more information.
(cherry picked from commit ba630a3c65 )
PR Close #49376
2023-03-09 11:32:03 -08:00
Angular Robot
8e76107b94
build: update cross-repo angular dependencies ( #49367 )
...
See associated pull request for more information.
PR Close #49367
2023-03-08 18:00:27 +00:00
Angular Robot
984d0f49b5
build: update cross-repo angular dependencies ( #49188 )
...
See associated pull request for more information.
PR Close #49188
2023-03-08 01:54:00 +00:00