Commit Graph
2 Commits
Author SHA1 Message Date
Jonathan Yu 7b1fe3156d chore: use dependabot to manage dependencies (#2830)
Use dependabot to manage the dependencies defined in package.json and
GitHub Actions workflows, so that we can proactively update versions.

Outdated versions of third-party dependencies frequently have known
security vulnerabilities with CVEs.
2021-03-12 11:46:18 -08:00
Jonathan Yu c270570f77 chore: run builds on pull requests (#2866)
* Run builds when changes are pushed to the main branch, or for pull
  requests opened against the main branch. This is a subtle change
  in behavior because, previously, builds would've run on pushes to
  any branch, regardless if a pull request is open yet.
* Update to GitHub actions/checkout v2, which performs a shallow
  clone by default, and should speed up the build.

Closes: #2559
2021-03-12 09:48:39 -08:00