spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Hert Da Coregio	2bfdb0c6cd	Only run workflow for branches that matches [5-9]+.[5-9]+.x Issue gh-14535	2 years ago
Marcus Hert Da Coregio	731cd6131b	Do not try to run trigger dependabot automerge workflow in PRs Issue gh-14535	2 years ago
dependabot[bot]	c2a589734c	Bump spring-io/spring-github-workflows Bumps [spring-io/spring-github-workflows](https://github.com/spring-io/spring-github-workflows) from eaf17a1890b1ef1b337f015d6eb263baaf8c6dab to 1e8b0587a1f4f01697f9753fa3339c3e0d30f396. - [Release notes](https://github.com/spring-io/spring-github-workflows/releases) - [Commits](`eaf17a1890...1e8b0587a1`) --- updated-dependencies: - dependency-name: spring-io/spring-github-workflows dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	e5e67f91e9	Bump Gamesight/slack-workflow-status from 1.2.0 to 1.3.0 Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.2.0 to 1.3.0. - [Release notes](https://github.com/gamesight/slack-workflow-status/releases) - [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.2.0...v1.3.0) --- updated-dependencies: - dependency-name: Gamesight/slack-workflow-status dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Marcus Hert Da Coregio	e0fc8f37b0	Use latest version of spring-merge-dependabot-pr workflow Issue gh-14535	2 years ago
Marcus Hert Da Coregio	43ced5291b	Only run workflow for spring-projects repositories Issue gh-14535	2 years ago
Marcus Hert Da Coregio	56c5fc281e	Automatically trigger auto merge for Dependabot PRs Issue gh-14535	2 years ago
Marcus Hert Da Coregio	05d3c4b695	Add permission to Edit Dependabot PR workflow Issue gh-14486	2 years ago
Marcus Hert Da Coregio	5f80cfc705	Automatically assign milestone to Dependabot PR Issue gh-14486	2 years ago
dependabot[bot]	7011930305	Bump gradle/gradle-build-action from 2 to 3 Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2 to 3. - [Release notes](https://github.com/gradle/gradle-build-action/releases) - [Commits](https://github.com/gradle/gradle-build-action/compare/v2...v3) --- updated-dependencies: - dependency-name: gradle/gradle-build-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	8a75382b2d	Bump slackapi/slack-github-action from 1.24.0 to 1.25.0 Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.24.0 to 1.25.0. - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Commits](https://github.com/slackapi/slack-github-action/compare/v1.24.0...v1.25.0) --- updated-dependencies: - dependency-name: slackapi/slack-github-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	10b3a9b234	Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0. - [Release notes](https://github.com/gamesight/slack-workflow-status/releases) - [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0) --- updated-dependencies: - dependency-name: Gamesight/slack-workflow-status dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	e4cc0a4755	Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0. - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0) --- updated-dependencies: - dependency-name: slackapi/slack-github-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	ff71ef46b7	Bump actions/setup-java from 3 to 4 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/setup-java dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	5593655bbf	Bump spring-io/spring-gradle-build-action from 1 to 2 Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2. - [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2) --- updated-dependencies: - dependency-name: spring-io/spring-gradle-build-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	47812e506f	Bump actions/checkout from 3 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Steve Riesenberg	9c44b700f5	Add Gradle Enterprise creds to PR builds Closes gh-14249	2 years ago
Marcus Da Coregio	b9836d618a	Fix Workflows Issue gh-13873	2 years ago
Marcus Da Coregio	2505c08e8f	Do Not Run Some Workflows on Dependabot's PRs Issue gh-13873 (cherry picked from commit `3aae03b1b2`)	2 years ago
Marcus Da Coregio	9e877c9bc6	Do not run some workflows for Dependabot branches Issue gh-13873 (cherry picked from commit `ab812b2b53`)	2 years ago
Marcus Da Coregio	650692964e	Fix snapshot_tests on CI workflow Closes gh-13876	2 years ago
Marcus Da Coregio	e29ea47ff7	Use Gradle's Version Catalog Issue gh-13868	2 years ago
jongwooo	aad3e61f4d	chore: Use cache in continuous-integration-workflow.yml Signed-off-by: jongwooo <jongwooo.han@gmail.com>	3 years ago
Kirk Lin	9c6d90490d	ci: fix GitHub Actions Deprecating save-state and set-output commands Closes gh-12032	3 years ago
Dan Allen	fe252f5057	sync docs build; upgrade Antora and Antora Collector to latest alpha	3 years ago
Dan Allen	2063279d89	fix deploy docs workflow - don't use environment variable reference in checkout action	3 years ago
Dan Allen	b5bd52cb14	trigger partial docs build on push	3 years ago
Josh Cummings	ff055cf07a	Remote antoraUpdateVersion task from CI	3 years ago
Marcus Da Coregio	465d80c162	Remove antoreUpdateVersion task from release automation	3 years ago
Marcus Da Coregio	7756247c3a	Simplify checkSamples task Closes gh-11814	3 years ago
Dan Allen	3387149a0f	repurpose 5.6.x branch to provide local docs build * remove unused workflows, scripts, and configuration (now handled by docs-build branch) * upgrade Antora to 3.1 (and Node.js to 16) * tune playbook settings * reconfigure docs build for local build only * add patch to support using linked worktree as Antora content source * remove Antora extensions not needed for local builds	3 years ago
Dan Allen	3e42119f84	repurpose 5.7.x branch to provide local docs build * remove unused workflows, scripts, and configuration (now handled by docs-build branch) * upgrade Antora to 3.1 (and Node.js to 16) * tune playbook settings * reconfigure docs build for local build only * add patch to support using linked worktree as Antora content source * remove Antora extensions not needed for local builds	3 years ago
Dan Allen	ab9ed26ad2	repurpose 5.8.x branch to provide local docs build * remove unused workflows, scripts, and configuration (now handled by docs-build branch) * upgrade Antora to 3.1 (and Node.js to 16) * tune playbook settings * reconfigure docs build for local build only * add patch to support using linked worktree as Antora content source * remove Antora extensions not needed for local builds	3 years ago
Rob Winch	8c69699458	Remove backportbot.yml Issue gh-11736	3 years ago
Steve Riesenberg	02459919cc	Skip workflows on forks of spring-security	4 years ago
Steve Riesenberg	57d212ddca	Use cache and user.name system property on Windows	4 years ago
Steve Riesenberg	539b17f6da	Only run prerequisites job if on upstream repo	4 years ago
Steve Riesenberg	37e1ad27fe	Simplify dependency graph	4 years ago
Steve Riesenberg	043fdd6f03	Use Spring Gradle Build Action Closes gh-11630	4 years ago
Steve Riesenberg	3234e05085	Polish gh-11367	4 years ago
naveen	f957e3c051	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	4 years ago
Steve Riesenberg	24033be046	Skip workflows on forks of spring-security	4 years ago
Steve Riesenberg	47a5665767	Use cache and user.name system property on Windows	4 years ago
Steve Riesenberg	aad60cc6af	Only run prerequisites job if on upstream repo	4 years ago
Steve Riesenberg	13e94935ae	Simplify dependency graph	4 years ago
Steve Riesenberg	6c29007fac	Use Spring Gradle Build Action Closes gh-11630	4 years ago
Steve Riesenberg	6ad567f0fa	Polish gh-11367	4 years ago
naveen	8c634f8a9d	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	4 years ago
Steve Riesenberg	4fbbfd2c8b	Skip workflows on forks of spring-security	4 years ago
Steve Riesenberg	66da4301fc	Use cache and user.name system property on Windows	4 years ago

1 2

90 Commits (2bfdb0c6cd35f3ce1de4e8ef8c3078de427d31cc)