dependabot[bot]
e777764661
build(deps): bump actions/setup-java from 5.7.0 to 6.0.1
...
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from 5.7.0 to 6.0.1.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...de7274f081f381c8f8158605e0321c36c376e2e6 )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-20 19:03:31 +00:00
pnoker
52260f7bd3
build(ci): inline codeql paths-ignore in workflow
...
The config file only carried two paths-ignore entries, which the init action accepts directly as inputs; folding them into codeql.yml removes the separate .github/codeql directory without behavior change.
2026-09-03 09:03:48 +08:00
dependabot[bot]
7cf76107c9
build(deps): bump actions/setup-java from 4.8.0 to 5.7.0 ( #152 )
...
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from 4.8.0 to 5.7.0.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/c1e323688fd81a25caa38c78aa6df2d33d3e20d9...b6effb05e454b25005698d916606bdc6ffcbf961 )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 5.7.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:32:38 +08:00
dependabot[bot]
ac39d9d60f
build(deps): bump actions/checkout from 4.3.1 to 7.0.0 ( #103 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.3.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-19 21:07:39 +08:00
pnoker and Claude
ad89fde9dc
ci: pin GitHub Actions and CodeQL workflows to immutable commit hashes
...
Replace floating action tags with pinned commit SHAs across the CI workflows and add the CodeQL config.
Co-Authored-By: Claude <noreply@anthropic.com >
2026-07-16 20:03:59 +08:00
pnoker and Claude Fable 5
8d08826e2a
ci: optimize GitHub Actions and dependabot coverage
...
- codeql: add javascript-typescript scanning for dc3-web/docs frontend
- dependabot: fix docker directories (14 stale paths with no Dockerfile
-> 4 real ones: /, /dc3-web, /dc3/dependencies/{rabbitmq,postgres})
- remove orphan codeql-config.yml (never referenced by codeql.yml)
- merge docker-ci-web.yml into docker-ci.yml as build-web job with its
own gha cache scope; release now needs both backend and web builds
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-07-14 12:04:37 +08:00
pnoker
dd3ee73fb8
ci: drop release branch, rewire triggers to develop/main and v* tags
2026-06-26 14:23:13 +08:00
pnoker
0f0eac8c29
ci: manage docs npm deps via dependabot; scope codeql security-events:write to job level
2026-06-24 19:19:48 +08:00
Vickey
469d290631
revert(ci): restore custom CodeQL workflow
2026-05-10 09:38:05 +08:00
Vickey
cbcbbe6bc4
chore(ci): remove custom CodeQL workflow in favor of default setup
...
The repository has default CodeQL enabled in GitHub settings, which
conflicts with an advanced configuration workflow and causes SARIF
upload failures.
2026-05-10 09:36:22 +08:00
pnoker
7d68495f3a
ci: add security quality checks
2026-05-09 20:00:40 +08:00
pnoker
57f4512b21
ci: harden github workflows
2026-05-09 18:57:30 +08:00
pnoker
ea17c86387
chore: update version to 2026.4.19 across all modules and adjust branch settings in codeql.yml
2026-04-19 13:45:21 +08:00
pnoker
d102e18b00
chore: fix inceptionYear and scm connection in all pom.xml
...
- Fix <inceptionYear> from '2016-2022' to '2016' in 20 pom.xml files
- Fix <scm> connection/developerConnection to use scm
2026-04-18 01:31:07 +08:00
zzi666
d4d379a17a
refactor: standardize and translate comments across driver modules for consistency and clarity
2025-10-28 15:45:52 +08:00
Vickey
106096249c
build: upgrade base image references to dc3-jdk:2025.9 and fix codeql.yml matrix indentation
2025-09-11 16:53:42 +08:00
pnoker
bd83f0574b
ci: add CodeQL workflow for actions and java-kotlin analysis
2025-09-10 19:13:49 +08:00
dependabot[bot]
