* Configure build jobs to cancel previous builds when new changes
are pushed to a pull request branch, and serialize builds when
running in a branch from a push event
* Reduce privileges of GitHub token for scripts workflow
Show the bundled version of Code OSS in the text-based output
for --version and --help, in addition to the JSON output
(--version --json)
Closes: #4874
Introduce helper functions for getting human- and machine-readable
version strings from the constants package, and cover it in unit
tests.
This is a first step to resolving #4874.
Microsoft publishes updates to this action using the same scheme
as GitHub, where the v1 tag is updated to the latest release of
the 1.0 series. Therefore, we can manage updates manually.
Use dependabot to manage the dependencies defined in package.json and
GitHub Actions workflows, so that we can proactively update versions.
Outdated versions of third-party dependencies frequently have known
security vulnerabilities with CVEs.
* Run builds when changes are pushed to the main branch, or for pull
requests opened against the main branch. This is a subtle change
in behavior because, previously, builds would've run on pushes to
any branch, regardless if a pull request is open yet.
* Update to GitHub actions/checkout v2, which performs a shallow
clone by default, and should speed up the build.
Closes: #2559
Jonathan Yu