Jon Parise
c9729fbd26
ci: use local git commands for path-filter action
...
Passing a `token` value causes this action to use the GitHub REST API,
which is subject to rate limits. We can chew through that allowance
quickly (1,000 requests/hour) given that we run two of these actions per
workflow run.
`token` defaults to the workflow's token, but by setting it explicitly
to an empty string, the action will instead use `git diff` to determine
the modified paths. This works fine for our case because we're already
running the checkout action, so we have an up-to-date repository view.
This also has the advantage of working around the 300 files GitHub REST
API limit for listing changed files.
Ref: https://github.com/dorny/paths-filter
2026-03-19 08:06:34 -04:00
Mitchell Hashimoto
ceef8065b0
ci: filter build-examples to directories with build.zig.zon
...
The dynamic example directory discovery added in bb3b3ba included
all subdirectories under example/, but some (wasm-key-encode,
wasm-sgr) are pure HTML examples with no build.zig.zon. Running
zig build in those directories falls back to the root build.zig
and attempts a full GTK binary build, which fails on CI.
Filter the listing to only include directories that contain a
build.zig.zon file so non-Zig examples are excluded from the
build matrix.
2026-03-17 17:05:59 -07:00
Mitchell Hashimoto
bb3b3ba615
ci: dynamically discover example directories for build-examples
...
Replace the hardcoded matrix list in the build-examples job with a
dynamic list-examples job that discovers all subdirectories under
example/ at runtime. This uses ls/jq to produce a JSON array and
fromJSON() to feed it into the matrix, so new examples are picked
up automatically without updating the workflow.
2026-03-17 16:52:49 -07:00
dependabot[bot]
67dcac02f9
build(deps): bump softprops/action-gh-release from 2.6.0 to 2.6.1
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](26e8ad27a0...153bb8e044 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-17 00:12:48 +00:00
Mitchell Hashimoto
2d2d913f80
ci: skip milestone workflow for bot-authored PRs
...
The milestone action currently runs for all merged pull_request_target
close events, including PRs opened by bots such as dependabot and
ghostty-vouch. That causes milestone binding to run on automated PRs
that should be ignored.
Gate the update-milestone job so pull request events only run when the
author is not a bot, while still allowing closed-issue events to run.
This preserves existing issue milestone behavior and prevents bot PRs
from triggering the workflow.
2026-03-16 09:34:37 -07:00
Mitchell Hashimoto
36986f0374
build(deps): bump dorny/paths-filter from 4.0.0 to 4.0.1 ( #11545 )
...
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter ) from
4.0.0 to 4.0.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fbd0ab8f3e "><code>fbd0ab8</code></a>
feat: add merge_group event support</li>
<li><a
href="efb1da7ce8 "><code>efb1da7</code></a>
feat: add dist/ freshness check to PR workflow</li>
<li><a
href="d8f7b061b2 "><code>d8f7b06</code></a>
Merge pull request <a
href="https://redirect.github.com/dorny/paths-filter/issues/302 ">#302</a>
from dorny/issue-299</li>
<li><a
href="addbc147a9 "><code>addbc14</code></a>
Update README for v4</li>
<li>See full diff in <a
href="9d7afb8d21...fbd0ab8f3e ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
2026-03-15 17:18:36 -07:00
Mitchell Hashimoto
671301c807
build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.0 ( #11544 )
...
Bumps
[softprops/action-gh-release](https://github.com/softprops/action-gh-release )
from 2.5.0 to 2.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/softprops/action-gh-release/releases ">softprops/action-gh-release's
releases</a>.</em></p>
<blockquote>
<h2>v2.6.0</h2>
<p><code>2.6.0</code> is a minor release centered on
<code>previous_tag</code> support for
<code>generate_release_notes</code>,
which lets workflows pin GitHub's comparison base explicitly instead of
relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a
<code>working_directory</code> docs sync,
a checked-bundle freshness guard for maintainers, and clearer
immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset
uploads can be published.</p>
<p>If you still hit an issue after upgrading, please open a report with
the bug template and include a minimal repro or sanitized workflow
snippet where possible.</p>
<h2>What's Changed</h2>
<h3>Exciting New Features 🎉 </h3>
<ul>
<li>feat: support previous_tag for generate_release_notes by <a
href="https://github.com/pocesar "><code>@pocesar</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/372 ">softprops/action-gh-release#372</a></li>
</ul>
<h3>Bug fixes 🐛 </h3>
<ul>
<li>fix: recover concurrent asset metadata 404s by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/760 ">softprops/action-gh-release#760</a></li>
</ul>
<h3>Other Changes 🔄 </h3>
<ul>
<li>docs: clarify reused draft release behavior by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/759 ">softprops/action-gh-release#759</a></li>
<li>docs: clarify working_directory input by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/761 ">softprops/action-gh-release#761</a></li>
<li>ci: verify dist bundle freshness by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/762 ">softprops/action-gh-release#762</a></li>
<li>fix: clarify immutable prerelease uploads by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/763 ">softprops/action-gh-release#763</a></li>
</ul>
<h2>v2.5.3</h2>
<!-- raw HTML omitted -->
<p><code>2.5.3</code> is a patch release focused on the remaining
path-handling and release-selection bugs uncovered after
<code>2.5.2</code>.
It fixes
<code>[#639 ](https://github.com/softprops/action-gh-release/issues/639 )</code>,
<code>[#571 ](https://github.com/softprops/action-gh-release/issues/571 )</code>,
<code>[#280 ](https://github.com/softprops/action-gh-release/issues/280 )</code>,
<code>[#614 ](https://github.com/softprops/action-gh-release/issues/614 )</code>,
<code>[#311 ](https://github.com/softprops/action-gh-release/issues/311 )</code>,
<code>[#403 ](https://github.com/softprops/action-gh-release/issues/403 )</code>,
and
<code>[#368 ](https://github.com/softprops/action-gh-release/issues/368 )</code>.
It also adds documentation clarifications for
<code>[#541 ](https://github.com/softprops/action-gh-release/issues/541 )</code>,
<code>[#645 ](https://github.com/softprops/action-gh-release/issues/645 )</code>,
<code>[#542 ](https://github.com/softprops/action-gh-release/issues/542 )</code>,
<code>[#393 ](https://github.com/softprops/action-gh-release/issues/393 )</code>,
and
<code>[#411 ](https://github.com/softprops/action-gh-release/issues/411 )</code>,
where the current behavior is either usage-sensitive or constrained by
GitHub platform limits rather than an action-side runtime bug.</p>
<p>If you still hit an issue after upgrading, please open a report with
the bug template and include a minimal repro or sanitized workflow
snippet where possible.</p>
<h2>What's Changed</h2>
<h3>Bug fixes 🐛 </h3>
<ul>
<li>fix: prefer token input over GITHUB_TOKEN by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/751 ">softprops/action-gh-release#751</a></li>
<li>fix: clean up duplicate drafts after canonicalization by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/753 ">softprops/action-gh-release#753</a></li>
<li>fix: support Windows-style file globs by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/754 ">softprops/action-gh-release#754</a></li>
<li>fix: normalize refs-tag inputs by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/755 ">softprops/action-gh-release#755</a></li>
<li>fix: expand tilde file paths by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/756 ">softprops/action-gh-release#756</a></li>
</ul>
<h3>Other Changes 🔄 </h3>
<ul>
<li>docs: clarify token precedence by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/752 ">softprops/action-gh-release#752</a></li>
<li>docs: clarify GitHub release limits by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/758 ">softprops/action-gh-release#758</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md ">softprops/action-gh-release's
changelog</a>.</em></p>
<blockquote>
<h2>2.6.0</h2>
<p><code>2.6.0</code> is a minor release centered on
<code>previous_tag</code> support for
<code>generate_release_notes</code>,
which lets workflows pin GitHub's comparison base explicitly instead of
relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a
<code>working_directory</code> docs sync,
a checked-bundle freshness guard for maintainers, and clearer
immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset
uploads can be published.</p>
<p>If you still hit an issue after upgrading, please open a report with
the bug template and include a minimal repro or sanitized workflow
snippet where possible.</p>
<h2>What's Changed</h2>
<h3>Exciting New Features 🎉 </h3>
<ul>
<li>feat: support previous_tag for generate_release_notes by <a
href="https://github.com/pocesar "><code>@pocesar</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/372 ">softprops/action-gh-release#372</a></li>
</ul>
<h3>Bug fixes 🐛 </h3>
<ul>
<li>fix: recover concurrent asset metadata 404s by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/760 ">softprops/action-gh-release#760</a></li>
</ul>
<h3>Other Changes 🔄 </h3>
<ul>
<li>docs: clarify reused draft release behavior by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/759 ">softprops/action-gh-release#759</a></li>
<li>docs: clarify working_directory input by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/761 ">softprops/action-gh-release#761</a></li>
<li>ci: verify dist bundle freshness by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/762 ">softprops/action-gh-release#762</a></li>
<li>fix: clarify immutable prerelease uploads by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/763 ">softprops/action-gh-release#763</a></li>
</ul>
<h2>2.5.3</h2>
<p><code>2.5.3</code> is a patch release focused on the remaining
path-handling and release-selection bugs uncovered after
<code>2.5.2</code>.
It fixes
<code>[#639 ](https://github.com/softprops/action-gh-release/issues/639 )</code>,
<code>[#571 ](https://github.com/softprops/action-gh-release/issues/571 )</code>,
<code>[#280 ](https://github.com/softprops/action-gh-release/issues/280 )</code>,
<code>[#614 ](https://github.com/softprops/action-gh-release/issues/614 )</code>,
<code>[#311 ](https://github.com/softprops/action-gh-release/issues/311 )</code>,
<code>[#403 ](https://github.com/softprops/action-gh-release/issues/403 )</code>,
and
<code>[#368 ](https://github.com/softprops/action-gh-release/issues/368 )</code>.
It also adds documentation clarifications for
<code>[#541 ](https://github.com/softprops/action-gh-release/issues/541 )</code>,
<code>[#645 ](https://github.com/softprops/action-gh-release/issues/645 )</code>,
<code>[#542 ](https://github.com/softprops/action-gh-release/issues/542 )</code>,
<code>[#393 ](https://github.com/softprops/action-gh-release/issues/393 )</code>,
and
<code>[#411 ](https://github.com/softprops/action-gh-release/issues/411 )</code>,
where the current behavior is either usage-sensitive or constrained by
GitHub platform limits rather than an action-side runtime bug.</p>
<p>If you still hit an issue after upgrading, please open a report with
the bug template and include a minimal repro or sanitized workflow
snippet where possible.</p>
<h2>What's Changed</h2>
<h3>Bug fixes 🐛 </h3>
<ul>
<li>fix: prefer token input over GITHUB_TOKEN by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/751 ">softprops/action-gh-release#751</a></li>
<li>fix: clean up duplicate drafts after canonicalization by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/753 ">softprops/action-gh-release#753</a></li>
<li>fix: support Windows-style file globs by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/754 ">softprops/action-gh-release#754</a></li>
<li>fix: normalize refs-tag inputs by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/755 ">softprops/action-gh-release#755</a></li>
<li>fix: expand tilde file paths by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/756 ">softprops/action-gh-release#756</a></li>
</ul>
<h3>Other Changes 🔄 </h3>
<ul>
<li>docs: clarify token precedence by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/752 ">softprops/action-gh-release#752</a></li>
<li>docs: clarify GitHub release limits by <a
href="https://github.com/chenrui333 "><code>@chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/758 ">softprops/action-gh-release#758</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="26e8ad27a0 "><code>26e8ad2</code></a>
release 2.6.0</li>
<li><a
href="b959f31e96 "><code>b959f31</code></a>
fix: clarify immutable prerelease uploads (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/763 ">#763</a>)</li>
<li><a
href="8a8510e3a0 "><code>8a8510e</code></a>
ci: verify dist bundle freshness (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/762 ">#762</a>)</li>
<li><a
href="438c15ddf5 "><code>438c15d</code></a>
docs: clarify working_directory input (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/761 ">#761</a>)</li>
<li><a
href="6ca3b5d96e "><code>6ca3b5d</code></a>
fix: recover concurrent asset metadata 404s (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/760 ">#760</a>)</li>
<li><a
href="11f917660b "><code>11f9176</code></a>
chore: add RELEASE.md</li>
<li><a
href="1f3f350167 "><code>1f3f350</code></a>
feat: add AGENTS.md</li>
<li><a
href="37819cb191 "><code>37819cb</code></a>
docs: clarify reused draft release behavior (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/759 ">#759</a>)</li>
<li><a
href="9312864490 "><code>9312864</code></a>
feat: support previous_tag for generate_release_notes (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/372 ">#372</a>)</li>
<li><a
href="1853d73993 "><code>1853d73</code></a>
release 2.5.3</li>
<li>Additional commits viewable in <a
href="a06a81a03e...26e8ad27a0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
2026-03-15 17:18:27 -07:00
dependabot[bot]
7f81e12dc0
build(deps): bump dorny/paths-filter from 4.0.0 to 4.0.1
...
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter ) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/dorny/paths-filter/releases )
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md )
- [Commits](9d7afb8d21...fbd0ab8f3e )
---
updated-dependencies:
- dependency-name: dorny/paths-filter
dependency-version: 4.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 00:17:24 +00:00
dependabot[bot]
d08c8e0dbc
build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.0
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](a06a81a03e...26e8ad27a0 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 00:17:20 +00:00
dependabot[bot]
0fb1519cf2
build(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](29824e69f5...f8d387b68d )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 00:17:13 +00:00
dependabot[bot]
eccf960def
build(deps): bump dorny/paths-filter from 3.0.2 to 4.0.0
...
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter ) from 3.0.2 to 4.0.0.
- [Release notes](https://github.com/dorny/paths-filter/releases )
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md )
- [Commits](de90cc6fb3...9d7afb8d21 )
---
updated-dependencies:
- dependency-name: dorny/paths-filter
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 00:13:53 +00:00
dependabot[bot]
16ca9527e9
build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](70fc10c6e5...3e5f45b2cf )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-12 00:13:04 +00:00
Mitchell Hashimoto
f571c806fe
ci: skip vouched PRs for milestone attachment
2026-03-11 08:38:54 -07:00
dependabot[bot]
85bec80334
build(deps): bump cachix/install-nix-action from 31.10.0 to 31.10.1
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.10.0 to 31.10.1.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](19effe9fe7...1ca7d21a94 )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.10.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 00:14:04 +00:00
Mitchell Hashimoto
4e24adf717
ci: skip xcode tests for freetype build
2026-03-10 09:40:28 -07:00
dependabot[bot]
96a5e71871
build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.19.2 to 7.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](10e90e3645...d08e5c354a )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 00:14:51 +00:00
dependabot[bot]
69df92b56a
build(deps): bump cachix/install-nix-action from 31.9.1 to 31.10.0
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.9.1 to 31.10.0.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](2126ae7fc5...19effe9fe7 )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-04 00:15:23 +00:00
Mitchell Hashimoto
41870c14ad
ci: test libghostty fuzzer build
2026-03-01 06:53:30 -08:00
Mitchell Hashimoto
e8f861f561
fuzz: replace : with _ for Windows
2026-03-01 06:47:01 -08:00
Mitchell Hashimoto
4f34a0b7d2
ci: fix windows CI checkouts with afl-min filenames
2026-03-01 06:42:58 -08:00
Mitchell Hashimoto
f9c57f0bf6
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #11044 )
...
Bumps
[actions/upload-artifact](https://github.com/actions/upload-artifact )
from 6.0.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases ">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>v7 What's new</h2>
<h3>Direct Uploads</h3>
<p>Adds support for uploading single files directly (unzipped). Callers
can set the new <code>archive</code> parameter to <code>false</code> to
skip zipping the file during upload. Right now, we only support single
files. The action will fail if the glob passed resolves to multiple
files. The <code>name</code> parameter is also ignored with this
setting. Instead, the name of the artifact will be the name of the
uploaded file.</p>
<h3>ESM</h3>
<p>To support new versions of the <code>@actions/*</code> packages,
we've upgraded the package to ESM.</p>
<h2>What's Changed</h2>
<ul>
<li>Add proxy integration test by <a
href="https://github.com/Link "><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754 ">actions/upload-artifact#754</a></li>
<li>Upgrade the module to ESM and bump dependencies by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/762 ">actions/upload-artifact#762</a></li>
<li>Support direct file uploads by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/764 ">actions/upload-artifact#764</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Link "><code>@Link</code></a>- made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754 ">actions/upload-artifact#754</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0 ">https://github.com/actions/upload-artifact/compare/v6...v7.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bbbca2ddaa "><code>bbbca2d</code></a>
Support direct file uploads (<a
href="https://redirect.github.com/actions/upload-artifact/issues/764 ">#764</a>)</li>
<li><a
href="589182c5a4 "><code>589182c</code></a>
Upgrade the module to ESM and bump dependencies (<a
href="https://redirect.github.com/actions/upload-artifact/issues/762 ">#762</a>)</li>
<li><a
href="47309c993a "><code>47309c9</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/754 ">#754</a>
from actions/Link-/add-proxy-integration-tests</li>
<li><a
href="02a8460834 "><code>02a8460</code></a>
Add proxy integration test</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/v6...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
2026-02-26 16:22:26 -08:00
dependabot[bot]
5319d8d41c
build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](37930b1c2a...70fc10c6e5 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-27 00:14:14 +00:00
dependabot[bot]
64fd8d794c
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-27 00:14:02 +00:00
Mitchell Hashimoto
c60e24d200
macos: update to Sparkle 2.9
2026-02-26 08:49:42 -08:00
Mitchell Hashimoto
6132597563
ci: codesign DockTilePlugin
2026-02-24 12:29:21 -08:00
Mitchell Hashimoto
245ea56597
update vouch to 1.4.2
2026-02-24 09:48:57 -08:00
Mitchell Hashimoto
e3a6adeff5
ci: point xcode to the mounted cache path by Namespace
2026-02-23 19:54:51 -08:00
Mitchell Hashimoto
c3a900d1f4
ci: update vouch to 1.4.1
2026-02-23 19:49:30 -08:00
dependabot[bot]
123438a4eb
build(deps): bump namespacelabs/nscloud-setup from 0.0.10 to 0.0.11
...
Bumps [namespacelabs/nscloud-setup](https://github.com/namespacelabs/nscloud-setup ) from 0.0.10 to 0.0.11.
- [Release notes](https://github.com/namespacelabs/nscloud-setup/releases )
- [Commits](d1c625762f...f378676225 )
---
updated-dependencies:
- dependency-name: namespacelabs/nscloud-setup
dependency-version: 0.0.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-24 00:48:13 +00:00
Mitchell Hashimoto
0830ecfb65
ci: enable macOS caching (Zig, Xcode)
...
Namespace now supports cache volumes on macOS.
This enables caching for Zig and Xcode artifacts. We can't do Nix yet because
we can't create `/nix` and there's a chicken/egg with how Nix installation
works on macOS. I'm emailing Namespace support about it... But still, a big
win for Zig and Xcode!
2026-02-23 10:05:11 -08:00
dependabot[bot]
4f6fc324f1
build(deps): bump namespacelabs/nscloud-cache-action from 1.4.1 to 1.4.2
...
Bumps [namespacelabs/nscloud-cache-action](https://github.com/namespacelabs/nscloud-cache-action ) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/namespacelabs/nscloud-cache-action/releases )
- [Commits](https://github.com/namespacelabs/nscloud-cache-action/compare/v1.4.1...a90bb5d4b27522ce881c6e98eebd7d7e6d1653f9 )
---
updated-dependencies:
- dependency-name: namespacelabs/nscloud-cache-action
dependency-version: 1.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 00:22:04 +00:00
Jeffrey C. Ollie
2a02b8f0ef
android: build improvements
...
* Use a GitHub action to download the Android NDK
* Use helper functions available on `std.Build` to simplify
the build script.
* Use various Zig-isms to simplify the code.
FYI, using Nix to seems to be a non-starter as getting any Android
development kits from nixpkgs requires accepting the Android license
agreement and allowing many packages to use unfree licenses. And since
the packages are unfree they are not cached by NixOS so the build
triggers massive memory-hungry builds.
2026-02-22 16:26:22 -06:00
Mitchell Hashimoto
79e530a0f3
ci: fix CI for NDK
2026-02-22 12:57:57 +08:00
Mitchell Hashimoto
12c2f5c359
prettier
2026-02-21 13:56:55 -08:00
Elias Andualem
88a6e8ae4b
build: add Android build target for libghostty-vt
2026-02-22 00:01:03 +08:00
Mitchell Hashimoto
7c504649fd
ci: use explicit PAT with path-filter for higher rate limits
2026-02-20 21:05:54 -08:00
Mitchell Hashimoto
07a68b3e65
ci: use every to filter vouch paths
...
The prior filter wasn't working because the default quantifier is
`any`.
2026-02-20 20:28:15 -08:00
Mitchell Hashimoto
8699a67ecf
ci: Add a skips job where we can accumulate skip conditions
...
This adds a new job that we can use to set outputs to accumulate skip
conditions for other tests. The major change here is skipping all tests
if we're only updating vouches, to save our CI.
I also included a number of minor skips based on filepaths.
2026-02-20 10:57:05 -08:00
Jon Parise
c2eab3b43d
macos: add root-level .swiftlint.yml
...
In order to support running from both the repository root and from
within Xcode project, and to keep things generally organized, our
primary .swiftlint.yml configuration file lives under macos/.
This change introduces a root-level .swiftlint.yml which limits the file
scope to macos/ and then includes macos/.swiftlint.yml for the rest of
the directives.
This unlocks a few benefits:
- We no longer need to pass an explicit `macos` path argument in any of
our invocations. SwiftLint will do the right thing when run either
from the repository root or from within the macos/ directory.
- It lets us easily exclude the macos/build/ directory (and re-enable
the 'deployment_target' rule). In the previous setup, this was more
challenging than you'd expect due to SwiftLint's path resolution rules
and required passing even more arguments like `--working-directory`.
The only downside is adding a new file to the repository root, but that
feels like the right trade-off given the benefits and conveniences.
2026-02-20 09:21:04 -05:00
Mitchell Hashimoto
a6b6033852
ci: pass milestone token via github-token parameter
...
If I am reading the upstream action right, even if you set GITHUB_TOKEN
env var its defaulting to `github.token`, so we need to specify as a
param.
2026-02-19 20:39:53 -08:00
Mitchell Hashimoto
df47dc1a98
ci: milestone workflow should use our vouch app token
...
This increases our rate limits and the vouch app already has the
permissions required for the milestone workflow.
2026-02-19 20:35:00 -08:00
Mitchell Hashimoto
2863849fca
ci: milestone workflow should use our vouch app token
...
This increases our rate limits and the vouch app already has the
permissions required for the milestone workflow.
2026-02-19 20:28:30 -08:00
Mitchell Hashimoto
f2a5f36f26
macos: lint Swift files using SwiftLint ( #10860 )
...
SwiftLint <https://realm.github.io/SwiftLint/ > is both a linter and
formatting. It's a popular way to spot issues and enforce a consistent
style.
Our SwiftLint configuration lives in `macos/.swiftlint.yml`, where is is
automatically discovered. It's very configurable, and I made an initial
pass as some basic, weakly-opinionated rules. The "TODO" section lists
rules that currently have violations but can be easily (auto)fixed in
follow-up commits.
Our integration is CLI-based. Similar to our other support tools, we
expect developers to install `swiftlint` via nix or e.g. Homebrew. This
is documented in HACKING.md.
We also have an optional Xcode integration, for in-editor feedback. When
`swiftlint` is available, it's run as a script-based Build Phase.
SwiftLint supports an auto-fix mode (`--fix`). Agents are aware of this
via AGENTS.md.
The rules are enforced using a (nix-based) CI job.
2026-02-19 13:34:22 -08:00
Mitchell Hashimoto
7928883f73
ci: add sync-codeowners action so that codeowners auto-vouch
2026-02-19 13:26:49 -08:00
Jon Parise
a5dd7a750b
ci: only run 'swiftlint' when macos/ changes
...
This saves us some work on the majority of our commits. I think we'd
only miss commits to .github/ and the nix environment with this filter,
but we can expand the filter's scope as needed.
2026-02-19 14:42:11 -05:00
Jon Parise
21ea94610a
macos: lint Swift files using SwiftLint
...
SwiftLint <https://realm.github.io/SwiftLint/ > is both a linter and
formatting. It's a popular way to spot issues and enforce a consistent
style.
Our SwiftLint configuration lives in macos/.swiftlint.yml, where is is
automatically discovered. It's very configurable, and I made an initial
pass as some basic, weakly-opinionated rules. The "TODO" section lists
rules that currently have violations but can be easily (auto)fixed in
follow-up commits.
Our integration is CLI-based. Similar to our other support tools, we
expect developers to install `swiftlint` via nix or e.g. Homebrew.
This is documented in HACKING.md.
We also have an optional Xcode integration, for in-editor feedback. When
`swiftlint` is available, it's run as a script-based Build Phase.
SwiftLint supports an auto-fix mode (--fix). Agents are aware of this
via AGENTS.md.
The rules are enforced using a (nix-based) CI job.
2026-02-19 14:42:11 -05:00
dependabot[bot]
16b320ca8a
build(deps): bump namespacelabs/nscloud-cache-action from 1.4.1 to 1.4.2
...
Bumps [namespacelabs/nscloud-cache-action](https://github.com/namespacelabs/nscloud-cache-action ) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/namespacelabs/nscloud-cache-action/releases )
- [Commits](4d61c33d0b...a90bb5d4b2 )
---
updated-dependencies:
- dependency-name: namespacelabs/nscloud-cache-action
dependency-version: 1.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-19 00:14:31 +00:00
Mitchell Hashimoto
d1de9aca94
ci: make the libghostty-macos builds required
2026-02-18 09:36:46 -08:00
Elias Andualem
90e4e0296a
ci: add separate Darwin build targets for libghostty-vt
2026-02-18 09:35:08 -08:00
Mitchell Hashimoto
b6dbd445d0
ci: update create-github-app-token
2026-02-16 21:02:44 -08:00