Guiii and GitHub
986f234eb4
ci: use official download-artifact action ( #6954 )
...
Reviewed-by: Nerixyz <nerixdev@outlook.de >
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-08-22 10:41:33 +00:00
Nerixyz and GitHub
ab02b5911e
fix(ci): persist credentials for nightly-build tag ( #7189 )
...
The nightly release is failing, because it can't update the tag.
Re-enable `persist-credentials` to make it work.
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-08-21 13:49:32 +00:00
Nerixyz and GitHub
bf71244ed0
ci: Harden actions and dependabot (a bit) ( #7188 )
...
To prevent issues from using GitHub actions and dependabot, I hardened
the workflows using [zizmor](https://docs.zizmor.sh/ ). There are still
77 open findings. I only applied the ones that are easy wins.
- Pin actions to a commit hash instead of tag - tags are not immutable
(see [`unpinned-uses`](https://docs.zizmor.sh/audits/#unpinned-uses ))
- Disable `persist-credentials` on checkout - we don't need it (see
[`artipacked`](https://docs.zizmor.sh/audits/#artipacked ))
- Set cooldown on dependabot updates (see
[`dependabot-cooldown`](https://docs.zizmor.sh/audits/#dependabot-cooldown )).
For our own packages, we can manually create PRs.
I left the docker images unpinned, because they're frequently updated,
but zizmor would like to see them pinned as well.
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-08-20 20:58:01 +00:00
bf87302eb4
ci: bump vmactions/freebsd-vm from 1.5.2 to 1.5.3 ( #7163 )
...
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm )
from 1.5.2 to 1.5.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/83b151f58c6047089f4c80eb5ba2039d158ce093 "><code>83b151f</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/e9ea2cef1135a17c880e9ed9956c983d58421ece "><code>e9ea2ce</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/7f9ed700a9d1068fdd604600931b019737d9c783 "><code>7f9ed70</code></a>
Bump versions from upstream releases</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/59e13a97c0c998e5f36c10a292ebc91115d531e7 "><code>59e13a9</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/f28fc2743d290ed0b5020dca36fb2db6cc9753aa "><code>f28fc27</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/c267d2fbb461730ef00253a968e161e09e955c43 "><code>c267d2f</code></a>
Update version to v1.5.2</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/a56f3bab0836eed8238cd15313a0936e1e3cba4d "><code>a56f3ba</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/4a50e076570c30a595e08b5247f2df77ef296bd1 "><code>4a50e07</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/ff9b16bb634ef0047e04bf18b61f9ec311f8f544 "><code>ff9b16b</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/d6a581b740959e3b804b0711b8fc5200d63e9907 "><code>d6a581b</code></a>
Generated from base-vm</li>
<li>Additional commits viewable in <a
href="https://github.com/vmactions/freebsd-vm/compare/v1.5.2...v1.5.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-15 12:27:40 +00:00
5cee1b78d1
ci: bump Chatterino/msvc-dev-cmd from 2.0.5 to 2.0.7 ( #7101 )
...
Bumps
[Chatterino/msvc-dev-cmd](https://github.com/chatterino/msvc-dev-cmd )
from 2.0.5 to 2.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/chatterino/msvc-dev-cmd/releases ">Chatterino/msvc-dev-cmd's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove amd64_arm from build workflow by <a
href="https://github.com/Wissididom "><code>@Wissididom</code></a> in <a
href="https://redirect.github.com/Chatterino/msvc-dev-cmd/pull/3 ">Chatterino/msvc-dev-cmd#3</a></li>
<li>Update some ilammy's to Chatterino in README.md by <a
href="https://github.com/Wissididom "><code>@Wissididom</code></a> in <a
href="https://redirect.github.com/Chatterino/msvc-dev-cmd/pull/2 ">Chatterino/msvc-dev-cmd#2</a></li>
<li>Use a PowerShell composite action instead of NodeJS by <a
href="https://github.com/Wissididom "><code>@Wissididom</code></a> in <a
href="https://redirect.github.com/Chatterino/msvc-dev-cmd/pull/5 ">Chatterino/msvc-dev-cmd#5</a></li>
<li>Normalize indentations to 4 spaces by <a
href="https://github.com/Wissididom "><code>@Wissididom</code></a> in <a
href="https://redirect.github.com/Chatterino/msvc-dev-cmd/pull/6 ">Chatterino/msvc-dev-cmd#6</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Chatterino/msvc-dev-cmd/compare/v2.0.5...v2.0.6 ">https://github.com/Chatterino/msvc-dev-cmd/compare/v2.0.5...v2.0.6 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Chatterino/msvc-dev-cmd/commit/5e15a285487363708f5bc6a135fd434bd20d22a6 "><code>5e15a28</code></a>
Normalize indentations to 4 spaces (<a
href="https://redirect.github.com/chatterino/msvc-dev-cmd/issues/6 ">#6</a>)</li>
<li><a
href="https://github.com/Chatterino/msvc-dev-cmd/commit/7e0343fa431e4345b6215a4c2681980c3602f67f "><code>7e0343f</code></a>
Use a PowerShell composite action instead of NodeJS (<a
href="https://redirect.github.com/chatterino/msvc-dev-cmd/issues/5 ">#5</a>)</li>
<li><a
href="https://github.com/Chatterino/msvc-dev-cmd/commit/ca6e1c6fe2653f6fae90ebd04d38fced8b53259e "><code>ca6e1c6</code></a>
docs: update some ilammy's to Chatterino in README.md (<a
href="https://redirect.github.com/chatterino/msvc-dev-cmd/issues/2 ">#2</a>)</li>
<li><a
href="https://github.com/Chatterino/msvc-dev-cmd/commit/579e4881d4df6b285c4f683fc07fc8f19006977d "><code>579e488</code></a>
ci: remove amd64_arm from build workflow (<a
href="https://redirect.github.com/chatterino/msvc-dev-cmd/issues/3 ">#3</a>)</li>
<li>See full diff in <a
href="https://github.com/chatterino/msvc-dev-cmd/compare/v2.0.5...v2.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rasmus Karlsson <rasmus.karlsson@pajlada.com >
2026-07-25 14:40:14 +00:00
d64ad573d8
ci: bump actions/setup-python from 6 to 7 ( #7123 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python )
from 6 to 7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases ">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1330 ">actions/setup-python#1330</a></li>
<li>Pin SHA commits and update docs with latest versions by <a
href="https://github.com/HarithaVattikuti "><code>@HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1338 ">actions/setup-python#1338</a></li>
<li>Remove the pip-install input by <a
href="https://github.com/gowridurgad "><code>@gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1336 ">actions/setup-python#1336</a></li>
</ul>
<h3>Bug Fix</h3>
<ul>
<li>Fix to Classify stderr warning messages as warnings instead of
errors in annotations by <a
href="https://github.com/lmvysakh "><code>@lmvysakh</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1335 ">actions/setup-python#1335</a></li>
<li>Validate and retry manifest fetch to prevent silent failures by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1332 ">actions/setup-python#1332</a></li>
</ul>
<h3>Dependency Upgrade</h3>
<ul>
<li>Bump certifi from 2020.6.20 to 2024.7.4 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1328 ">actions/setup-python#1328</a></li>
<li>Remove EOL Python versions and Bumps numpy text fixture by <a
href="https://github.com/priya-kinthali "><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1333 ">actions/setup-python#1333</a></li>
<li>Upgrade <code>@actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai "><code>@philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1337 ">actions/setup-python#1337</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lmvysakh "><code>@lmvysakh</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1335 ">actions/setup-python#1335</a></li>
<li><a
href="https://github.com/philip-gai "><code>@philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1337 ">actions/setup-python#1337</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v7.0.0 ">https://github.com/actions/setup-python/compare/v6...v7.0.0 </a></p>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add RHEL support and include Linux distro in cache keys by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1323 ">actions/setup-python#1323</a></li>
<li>Fix pip cache error handling on Windows by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1040 ">actions/setup-python#1040</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1281 ">actions/setup-python#1281</a></li>
<li>Upgrade actions dependencies by <a
href="https://github.com/gowridurgad "><code>@gowridurgad</code></a>
with <a href="https://github.com/Copilot "><code>@Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1303 ">actions/setup-python#1303</a></li>
<li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin "><code>@jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1324 ">actions/setup-python#1324</a></li>
<li>Upgrade dependency versions and test workflow configuration by <a
href="https://github.com/HarithaVattikuti "><code>@HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1322 ">actions/setup-python#1322</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Update advanced-usage.md by <a
href="https://github.com/Dunky-Z "><code>@Dunky-Z</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/811 ">actions/setup-python#811</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/gowridurgad "><code>@gowridurgad</code></a>
with <a href="https://github.com/Copilot "><code>@Copilot</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1303 ">actions/setup-python#1303</a></li>
<li><a href="https://github.com/jasongin "><code>@jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1324 ">actions/setup-python#1324</a></li>
<li><a href="https://github.com/Dunky-Z "><code>@Dunky-Z</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/811 ">actions/setup-python#811</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0 ">https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0 </a></p>
<h2>v6.2.0</h2>
<h2>What's Changed</h2>
<h3>Dependency Upgrades</h3>
<ul>
<li>Upgrade dependencies to Node 24 compatible versions by <a
href="https://github.com/salmanmkc "><code>@salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1259 ">actions/setup-python#1259</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97 "><code>5fda3b9</code></a>
Pin SHA commits and update docs with latest versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1338 ">#1338</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e "><code>4ab7e95</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-python/issues/1337 ">#1337</a>
from actions/philip-gai/bump-actions-cache-6-2-0</li>
<li><a
href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c "><code>0f3a009</code></a>
Remove the pip-install input (<a
href="https://redirect.github.com/actions/setup-python/issues/1336 ">#1336</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932 "><code>f8cf429</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-python/issues/1330 ">#1330</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5 "><code>54baeea</code></a>
Validate and retry manifest fetch to prevent silent failures (<a
href="https://redirect.github.com/actions/setup-python/issues/1332 ">#1332</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5 "><code>c709277</code></a>
Annotation code fix (<a
href="https://redirect.github.com/actions/setup-python/issues/1335 ">#1335</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a "><code>6849080</code></a>
remove EOL Python versions and Bumps numpy text fixture (<a
href="https://redirect.github.com/actions/setup-python/issues/1333 ">#1333</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e "><code>0903b46</code></a>
Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data
(<a
href="https://redirect.github.com/actions/setup-python/issues/1328 ">#1328</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-python/compare/v6...v7 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-25 14:35:11 +02:00
544c5903af
ci: bump vmactions/freebsd-vm from 1.5.0 to 1.5.2 ( #7119 )
...
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm )
from 1.5.0 to 1.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vmactions/freebsd-vm/releases ">vmactions/freebsd-vm's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.2</h2>
<p>reduce image sizes.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vmactions/freebsd-vm/compare/v1...v1.5.2 ">https://github.com/vmactions/freebsd-vm/compare/v1...v1.5.2 </a></p>
<h2>v1.5.1</h2>
<p>The prepare step (installing packages etc.) normally runs on every
build. With cache-after-prepare: true, the action shuts the VM down
cleanly after prepare has finished, caches the prepared VM image, and
boots the VM again before run. Later runs with the same prepare script
restore the prepared image, skip prepare entirely, and start directly at
run</p>
<p><a
href="https://github.com/vmactions/freebsd-vm#10-cache-the-vm-image-after-prepare ">https://github.com/vmactions/freebsd-vm#10-cache-the-vm-image-after-prepare </a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vmactions/freebsd-vm/compare/v1...v1.5.1 ">https://github.com/vmactions/freebsd-vm/compare/v1...v1.5.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/77ed28d336d03fe19a3f4f7266c1d2c4714dd79d "><code>77ed28d</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/7e4394ceec879179f8c566de645663ea497fc2a7 "><code>7e4394c</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/1943f6c7798721062c79065c2fff836250b050fc "><code>1943f6c</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/df48c4d9631e2adc7580787adba929840803f295 "><code>df48c4d</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/857a4066240a8bc5a148fed1f954a4be8419d909 "><code>857a406</code></a>
fix for image size</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/b05c66399774471f70a8d6bcca5e3043ae9ac5f4 "><code>b05c663</code></a>
Update version to v1.5.1</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/a46f291854f624412f94e37b2e6ba64bdb52b5dd "><code>a46f291</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/9f53bb3f0e92d93ea182d74a934572b6223d2763 "><code>9f53bb3</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/cc38efae1744a90315f43bd85e49116af72320fa "><code>cc38efa</code></a>
Update version to v1.5.0</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/0eea5137bc632b845b6194e80c74c373e0d617ac "><code>0eea513</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li>Additional commits viewable in <a
href="https://github.com/vmactions/freebsd-vm/compare/v1.5.0...v1.5.2 ">compare
view</a></li>
</ul>
</details>
<br />
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rasmus Karlsson <rasmus.karlsson@pajlada.com >
2026-07-25 11:41:53 +00:00
Nerixyz and GitHub
6de0516c66
fix(windows): deploy OpenSSL TLS plugin ( #7125 )
...
Since #7009 , our Windows nightly builds were missing the OpenSSL TLS
plugin for Qt. Qt 6.8+ only deploys the OpenSSL plugin if it sees
`libcrypto.dll` or `libssl.dll`. However, our OpenSSL is named
`lib{ssl,crypto}-3-x64.dll`. `--force-openssl` will deploy the SSL
plugin regardless.
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-07-22 14:49:52 +02:00
9112873c55
ci: bump actions/setup-node from 6 to 7 ( #7105 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6
to 7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases ">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad "><code>@gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577 ">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad "><code>@gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574 ">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad "><code>@gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558 ">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga "><code>@deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548 ">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain "><code>@chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536 ">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali "><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550 ">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain "><code>@chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567 ">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin "><code>@jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569 ">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain "><code>@chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536 ">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga "><code>@deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548 ">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin "><code>@jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569 ">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0 ">https://github.com/actions/setup-node/compare/v6...v7.0.0 </a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti "><code>@HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579 ">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0 ">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0 </a></p>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Dependency updates:</h3>
<ul>
<li>Upgrade <a
href="https://github.com/actions "><code>@actions</code></a>
dependencies by <a
href="https://github.com/Copilot "><code>@Copilot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1525 ">actions/setup-node#1525</a></li>
<li>Update Node.js versions in versions.yml and bump package to v6.4.0
by <a
href="https://github.com/priya-kinthali "><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1533 ">actions/setup-node#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot "><code>@Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1525 ">actions/setup-node#1525</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v6.4.0 ">https://github.com/actions/setup-node/compare/v6...v6.4.0 </a></p>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Support parsing <code>devEngines</code> field by <a
href="https://github.com/susnux "><code>@susnux</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1283 ">actions/setup-node#1283</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020 "><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574 ">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4 "><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577 ">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140 "><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567 ">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d "><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569 ">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f "><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f "><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574 "><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3 "><code>4f8aac5</code></a>
Bump <code>@actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980 "><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548 ">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75 "><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558 ">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/v6...v7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 11:06:23 +02:00
Wissididom and GitHub
2130871a83
ci: update to macOS 26 for the Qt 6.11 build ( #7091 )
...
Reviewed-by: Nerixyz <nerixdev@outlook.de >
Reviewed-by: Rasmus Karlsson <rasmus.karlsson@pajlada.com >
2026-07-11 12:08:55 +02:00
e6931b1b14
ci: bump vmactions/freebsd-vm from 1.4.8 to 1.5.0 ( #7076 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 12:32:13 +02:00
3b2ad254b9
docs: Add section on AI tools ( #6902 )
...
This adds a small section on the use of AI tools/assistants to the
`CONTRIBUTING.md` in hopes that people read it.
Co-authored-by: fourtf <tf.four@gmail.com >
Co-authored-by: Mm2PL <mm2pl+gh@kotmisia.pl >
Co-authored-by: pajlada <rasmus.karlsson@pajlada.com >
2026-06-27 16:21:25 +00:00
55ff186117
ci: bump actions/cache from 5 to 6 ( #7067 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pajlada <rasmus.karlsson@pajlada.com >
2026-06-27 12:59:14 +00:00
5ab797e15e
ci: bump vmactions/freebsd-vm from 1.4.6 to 1.4.8 ( #7062 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pajlada <rasmus.karlsson@pajlada.com >
2026-06-27 12:02:52 +00:00
dependabot[bot] and GitHub
654a2bc1d6
ci: bump actions/checkout from 6 to 7 ( #7059 )
2026-06-24 16:41:48 +00:00
pajlada and GitHub
72342d7ad0
ci: don't upload macos builds to nightly release ( #7068 )
...
Reported-by: MattIPv4
Parent-pr: 7009
Parent-pr: 7051
2026-06-24 15:42:53 +00:00
Wissididom and GitHub
4446b39417
ci: Fix filename for create-installer workflow ( #7051 )
...
I guess that's something I overlooked when doing
https://github.com/Chatterino/chatterino2/pull/7009 .
I saw the error in
https://github.com/Chatterino/chatterino2/actions/runs/27479154379/job/81223740085
<!--
Leave this at the bottom
Co-authored-by: -
Tested-by: -
Reported-by: -
Reviewed-by: -
Parent-pr: -
-->
2026-06-13 23:28:28 +02:00
Wissididom and GitHub
4abd124d99
deps: update Qt 6.11.1 (and 6.8.3 for windows) ( #7009 )
...
Reviewed-by: Nerixyz <nerixdev@outlook.de >
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-06-13 22:23:02 +02:00
pajlada and GitHub
83b5866b58
ci: build coverage on Ubuntu 26.04 ( #7050 )
...
code coverage generation broke for Ubuntu 22.04 in https://github.com/Chatterino/docker/pull/39
2026-06-13 12:39:16 +02:00
Wissididom and GitHub
7e53c470c4
ci: use merge-multiple for downloading artifacts ( #7031 )
...
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com
2026-06-13 09:19:27 +02:00
147f44bb7c
ci: bump vmactions/freebsd-vm from 1.4.5 to 1.4.6 ( #7028 )
...
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm )
from 1.4.5 to 1.4.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vmactions/freebsd-vm/releases ">vmactions/freebsd-vm's
releases</a>.</em></p>
<blockquote>
<h2>v1.4.6</h2>
<p>update images for stability and reliability</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vmactions/freebsd-vm/compare/v1.4.5...v1.4.6 ">https://github.com/vmactions/freebsd-vm/compare/v1.4.5...v1.4.6 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/a6de9343ef5747433d9c25784c90e84998b9d69a "><code>a6de934</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/97fccd4571e9acaf24d89f675f59a178b7a5ebc6 "><code>97fccd4</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/31a870e7368014ab18f22d798401367896ba656b "><code>31a870e</code></a>
update for reliability</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/a05d987c8f88d9d97e43a29598fba6b0db3a19b5 "><code>a05d987</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/bd150013d1f8772ed7c93ebbc5d7aadfbb4ee2cd "><code>bd15001</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/5bbc26dbb50e84f2b0edad7be53cc06bc73f8d6b "><code>5bbc26d</code></a>
update</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/67a8329a56d80ad1a9dce617fdc23f210662fcbf "><code>67a8329</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/ae9b07f56b4227e5c42c75f5d3ccbc7066ddd06c "><code>ae9b07f</code></a>
Generated from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/e490b38ff140247e6438d047869eb4849b2f1bb4 "><code>e490b38</code></a>
Update vmactions/freebsd-vm from base-vm</li>
<li><a
href="https://github.com/vmactions/freebsd-vm/commit/9a3cdc625307049519a8f00d6ef7abd720ef521b "><code>9a3cdc6</code></a>
Generated from base-vm</li>
<li>Additional commits viewable in <a
href="https://github.com/vmactions/freebsd-vm/compare/v1.4.5...v1.4.6 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pajlada <rasmus.karlsson@pajlada.com >
2026-06-13 00:42:38 +00:00
594d030510
ci: bump codecov/codecov-action from 6.0.0 to 7.0.0 ( #7043 )
...
Bumps
[codecov/codecov-action](https://github.com/codecov/codecov-action ) from
6.0.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/codecov/codecov-action/releases ">codecov/codecov-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<p>⚠️ Due to migration issues with keybase, we are unable to update our
keys under the <code>codecovsecurity</code> account. We have deleted the
account and are using <code>codecovsecops</code> with the original gpg
key</p>
<h2>What's Changed</h2>
<ul>
<li>ci: remove Enforce License Compliance workflow by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1950 ">codecov/codecov-action#1950</a></li>
<li>chore(release): 7.0.0 by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1957 ">codecov/codecov-action#1957</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v6.0.1...v7.0.0 ">https://github.com/codecov/codecov-action/compare/v6.0.1...v7.0.0 </a></p>
<h2>v6.0.2</h2>
<p>This is a copy of the <code>v7.0.0</code> release to make updates
easier</p>
<h2>What's Changed</h2>
<ul>
<li>ci: remove Enforce License Compliance workflow by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1950 ">codecov/codecov-action#1950</a></li>
<li>chore(release): 7.0.0 by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1957 ">codecov/codecov-action#1957</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v6.0.1...v6.0.2 ">https://github.com/codecov/codecov-action/compare/v6.0.1...v6.0.2 </a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: prevent template injection in run: steps (VULN-1652) by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1947 ">codecov/codecov-action#1947</a></li>
<li>chore(release): 6.0.1 by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1949 ">codecov/codecov-action#1949</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1 ">https://github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md ">codecov/codecov-action's
changelog</a>.</em></p>
<blockquote>
<h2>v5.5.2</h2>
<h3>What's Changed</h3>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2 ">https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2 </a></p>
<h2>v5.5.1</h2>
<h3>What's Changed</h3>
<ul>
<li>fix: overwrite pr number on fork by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1871 ">codecov/codecov-action#1871</a></li>
<li>build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1868 ">codecov/codecov-action#1868</a></li>
<li>build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1867 ">codecov/codecov-action#1867</a></li>
<li>fix: update to use local app/ dir by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1872 ">codecov/codecov-action#1872</a></li>
<li>docs: fix typo in README by <a
href="https://github.com/datalater "><code>@datalater</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1866 ">codecov/codecov-action#1866</a></li>
<li>Document a <code>codecov-cli</code> version reference example by <a
href="https://github.com/webknjaz "><code>@webknjaz</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1774 ">codecov/codecov-action#1774</a></li>
<li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1861 ">codecov/codecov-action#1861</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1833 ">codecov/codecov-action#1833</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1 ">https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1 </a></p>
<h2>v5.5.0</h2>
<h3>What's Changed</h3>
<ul>
<li>feat: upgrade wrapper to 0.2.4 by <a
href="https://github.com/jviall "><code>@jviall</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1864 ">codecov/codecov-action#1864</a></li>
<li>Pin actions/github-script by Git SHA by <a
href="https://github.com/martincostello "><code>@martincostello</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1859 ">codecov/codecov-action#1859</a></li>
<li>fix: check reqs exist by <a
href="https://github.com/joseph-sentry "><code>@joseph-sentry</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1835 ">codecov/codecov-action#1835</a></li>
<li>fix: Typo in README by <a
href="https://github.com/spalmurray "><code>@spalmurray</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1838 ">codecov/codecov-action#1838</a></li>
<li>docs: Refine OIDC docs by <a
href="https://github.com/spalmurray "><code>@spalmurray</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1837 ">codecov/codecov-action#1837</a></li>
<li>build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1829 ">codecov/codecov-action#1829</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0 ">https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0 </a></p>
<h2>v5.4.3</h2>
<h3>What's Changed</h3>
<ul>
<li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1822 ">codecov/codecov-action#1822</a></li>
<li>fix: OIDC on forks by <a
href="https://github.com/joseph-sentry "><code>@joseph-sentry</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1823 ">codecov/codecov-action#1823</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3 ">https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3 </a></p>
<h2>v5.4.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/codecov/codecov-action/commit/fb8b3582c8e4def4969c97caa2f19720cb33a72f "><code>fb8b358</code></a>
chore(release): 7.0.0 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1957 ">#1957</a>)</li>
<li><a
href="https://github.com/codecov/codecov-action/commit/ca0a928a4cb3911011e868128a5cd90437c12db1 "><code>ca0a928</code></a>
ci: remove Enforce License Compliance workflow (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1950 ">#1950</a>)</li>
<li><a
href="https://github.com/codecov/codecov-action/commit/e79a6962e0d4c0c17b229090214935d2e33f8354 "><code>e79a696</code></a>
chore(release): 6.0.1 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1949 ">#1949</a>)</li>
<li><a
href="https://github.com/codecov/codecov-action/commit/51e64229ac331acb0d7f7b17c67423995f991c79 "><code>51e6422</code></a>
fix: prevent template injection in run: steps (VULN-1652) (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1947 ">#1947</a>)</li>
<li>See full diff in <a
href="https://github.com/codecov/codecov-action/compare/v6.0.0...v7.0.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 10:39:32 +02:00
Nerixyz and GitHub
5014843c71
ci: bump conan to 2.28.1 ( #6988 )
...
The GitHub runners will update to VS 2026, which wasn't supported by the old conan version.
Reviewed-by: pajlada
2026-05-10 16:33:01 +02:00
dependabot[bot] and GitHub
ab7a4fd1db
ci: update Chatterino/msvc-dev-cmd from 2.0.4 to 2.0.5 ( #6979 )
2026-05-04 09:36:38 +02:00
Wissididom and GitHub
f1f0efc138
ci: fork ilammy/msvc-dev-cmd ( #6969 )
...
This adds support for Visual Studio
2026, moves over from CommonJS to ES modules and let Dependabot do its
work (and removed node_modules from gitignore because else it didn't
seem to work without me bringing in a bundler).
Reviewed-by: Rasmus Karlsson <rasmus.karlsson@pajlada.com >
2026-05-02 10:05:48 +00:00
dependabot[bot] and GitHub
4576d722cb
chore(deps): bump hendrikmuhs/ccache-action from 1.2.22 to 1.2.23 ( #6938 )
2026-04-25 13:01:28 +02:00
7bae9185cc
ci: bump vmactions/freebsd-vm from 1.4.4 to 1.4.5 ( #6937 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-20 12:10:31 +02:00
Wissididom and GitHub
110440c21b
ci: add workflow for building on FreeBSD ( #6922 )
...
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-04-18 11:25:37 +02:00
dependabot[bot] and GitHub
f5a9f1d9aa
deps: bump jurplel/install-qt-action from 4.3.0 to 4.3.1 ( #6915 )
2026-04-11 12:01:06 +02:00
dependabot[bot] and GitHub
0549d16896
deps: bump hendrikmuhs/ccache-action from 1.2.20 to 1.2.22 ( #6876 )
2026-04-05 13:56:09 +02:00
dependabot[bot] and GitHub
6ae2c0e219
deps: bump codecov/codecov-action from 5.5.2 to 6.0.0 ( #6875 )
2026-04-05 13:55:56 +02:00
dependabot[bot] and GitHub
75d35077a2
deps: bump dawidd6/action-download-artifact from 18 to 20 ( #6897 )
2026-04-04 12:36:01 +02:00
Tim-KH and GitHub
efb8f5d824
ci: use case() function in GitHub Actions ( #6883 )
...
Replaced the ternaries in the GitHub Actions with the new case()
function as described in #6783
Reported-by: Nerixyz
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-03-29 20:30:51 +02:00
Nerixyz and GitHub
d995358063
eventsub: require clang>=21 for json code generation ( #6882 )
...
The JSON generation was broken with Clang 22, because the type names
didn't include the namespace (e.g. `std::string` → `string`). We need to
tell Clang to use the fully qualified name. This is possible with
`Type.get_fully_qualified_name` which was added in Clang 21.
This does have the consequence that more types are now fully qualified.
Reviewed-by: pajlada <rasmus.karlsson@pajlada.com >
2026-03-29 17:15:30 +00:00
pajlada and GitHub
d3b32333d9
ci: remove homebrew cask action ( #6881 )
...
homebrew automatically updates the cask for us, so this action is no
longer necessary.
2026-03-29 12:14:10 +02:00
pajlada and GitHub
deb70c3051
ci: disable changelog jobs ( #6878 )
...
We no longer require the user to update CHANGELOG.md with their
changes, instead we will attempt to keep the commit message and
description descriptive enough to build a changelog entry later.
2026-03-28 11:20:33 +00:00
dependabot[bot] and GitHub
f080479c4f
chore(deps): bump dawidd6/action-download-artifact from 17 to 18 ( #6848 )
2026-03-16 07:51:58 +00:00
dependabot[bot] and GitHub
f308a9ef6f
chore(deps): bump ncipollo/release-action from 1.20.0 to 1.21.0 ( #6849 )
2026-03-16 08:14:47 +01:00
dependabot[bot] and GitHub
808145e7d0
chore(deps): bump dawidd6/action-download-artifact from 16 to 17 ( #6847 )
2026-03-14 14:18:24 +01:00
dependabot[bot] and GitHub
5d19e663eb
chore(deps): bump actions/download-artifact from 7 to 8 ( #6828 )
2026-02-28 12:21:22 +01:00
dependabot[bot] and GitHub
e90f353de2
chore(deps): bump actions/upload-artifact from 6 to 7 ( #6829 )
2026-02-28 12:20:50 +01:00
dependabot[bot] and GitHub
5eaa0cbcff
chore(deps): bump ZedThree/clang-tidy-review from 0.23.0 to 0.23.1 ( #6827 )
2026-02-26 15:14:08 +01:00
dependabot[bot] and GitHub
60c0814be1
chore(deps): bump dawidd6/action-download-artifact from 15 to 16 ( #6826 )
2026-02-26 13:41:25 +01:00
pajlada and GitHub
2b4ede1b58
chore: update pr template for changelog testing ( #6820 )
2026-02-22 13:10:05 +01:00
dependabot[bot] and GitHub
0493f3885e
chore(deps): bump dawidd6/action-download-artifact from 14 to 15 ( #6809 )
2026-02-22 11:14:35 +00:00
dependabot[bot] and GitHub
74c0fad74e
chore(deps): bump dawidd6/action-download-artifact from 12 to 14 ( #6790 )
2026-02-14 11:14:22 +01:00
pajlada and GitHub
43ac9c38db
dev: specify nightly tag through cmake instead of modes file ( #6798 )
2026-02-08 10:59:34 +00:00
pajlada and GitHub
d6bd0090a4
ci: npx prettier instead of using unmaintained GH Action ( #6769 )
2026-01-25 14:05:59 +00:00
pajlada and GitHub
83b0cce015
feat: add build option for freestanding text in about page ( #6766 )
...
Example usage:
```
cmake -DCHATTERINO_EXTRA_BUILD_STRING="hi im <a href=\"https://forsen.tv \">forsen</a>" ..
```
2026-01-25 11:08:33 +00:00
pajlada and GitHub
281d5be3fd
chore: bump changelog checker to v1.0.4 ( #6755 )
2026-01-19 23:27:30 +01:00
GuiiiandGitHub
NerixyzandGitHub
WissididomandGitHub
Tim-KHandGitHub