You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by er...@apache.org on 2026/07/18 16:11:47 UTC

(cordova-plugin-camera) branch master updated: chore: update workflows (#967)

This is an automated email from the ASF dual-hosted git repository.

erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-plugin-camera.git


The following commit(s) were added to refs/heads/master by this push:
     new d21e8a7  chore: update workflows (#967)
d21e8a7 is described below

commit d21e8a7888485e7683b14050fedb0e1cabf04732
Author: エリス <er...@users.noreply.github.com>
AuthorDate: Sun Jul 19 01:11:42 2026 +0900

    chore: update workflows (#967)
    
    * chore: sync with paramedic
    * chore: update rat excludes
    * chore: update .gitattributes
---
 .gitattributes                                  | 73 +------------------------
 .github/workflows/android.yml                   | 15 +++--
 .github/workflows/chrome.yml                    |  8 ++-
 .github/workflows/{release-audit.yml => ci.yml} | 48 +++++++++-------
 .github/workflows/ios.yml                       | 22 ++++----
 .github/workflows/lint.yml                      |  8 ++-
 .github/workflows/release-audit.yml             | 15 +++--
 .rat-excludes                                   |  2 -
 .ratignore                                      | 23 --------
 9 files changed, 69 insertions(+), 145 deletions(-)

diff --git a/.gitattributes b/.gitattributes
index bf43cf8..14b51cc 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -17,78 +17,7 @@
 
 * text eol=lf
 
-# source code
-*.php text
-*.css text
-*.sass text
-*.scss text
-*.less text
-*.styl text
-*.js text
-*.coffee text
-*.json text
-*.htm text
-*.html text
-*.xml text
-*.svg text
-*.txt text
-*.ini text
-*.inc text
-*.pl text
-*.rb text
-*.py text
-*.scm text
-*.sql text
-*.sh text
-*.bat text
-
-# templates
-*.ejs text
-*.hbt text
-*.jade text
-*.haml text
-*.hbs text
-*.dot text
-*.tmpl text
-*.phtml text
-
-# server config
-.htaccess text
-
-# git config
-.gitattributes text
-.gitignore text
-.gitconfig text
-
-# code analysis config
-.jshintrc text
-.jscsrc text
-.jshintignore text
-.csslintrc text
-
-# misc config
-*.yaml text
-*.yml text
-.editorconfig text
-
-# build config
-*.npmignore text
-*.bowerrc text
-
-# Heroku
-Procfile text
-.slugignore text
-
-# Documentation
-*.md text
-LICENSE text
-AUTHORS text
-
-
-#
-## These files are binary and should be left untouched
-#
-
+# These files are binary and should be left untouched
 # (binary is a macro for -text -diff)
 *.png binary
 *.jpg binary
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index e7057a5..ea2d169 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -81,11 +81,16 @@ jobs:
     timeout-minutes: 60
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.node-version }}
-      - uses: actions/setup-java@v5
+
+      - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
         env:
           java-version: ${{ matrix.versions.java-version == '' && env.default_java-version || matrix.versions.java-version }}
           java-distro: ${{ matrix.versions.java-distro == '' && env.default_java-distro || matrix.versions.java-distro }}
@@ -116,7 +121,7 @@ jobs:
         if: ${{ endswith(env.repo, '/cordova-paramedic') != true }}
         run: npm i -g github:apache/cordova-paramedic
 
-      - uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b
+      - uses: reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2.38.0
         env:
           system-image-arch: ${{ matrix.versions.system-image-arch == '' && env.default_system-image-arch || matrix.versions.system-image-arch }}
           system-image-target: ${{ matrix.versions.system-image-target == '' && env.default_system-image-target || matrix.versions.system-image-target }}
@@ -130,7 +135,7 @@ jobs:
           script: echo "Pregenerate the AVD before running Paramedic"
 
       - name: Run paramedic tests
-        uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b
+        uses: reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2.38.0
         env:
           system-image-arch: ${{ matrix.versions.system-image-arch == '' && env.default_system-image-arch || matrix.versions.system-image-arch }}
           system-image-target: ${{ matrix.versions.system-image-target == '' && env.default_system-image-target || matrix.versions.system-image-target }}
diff --git a/.github/workflows/chrome.yml b/.github/workflows/chrome.yml
index f6680a3..3b05b99 100644
--- a/.github/workflows/chrome.yml
+++ b/.github/workflows/chrome.yml
@@ -45,8 +45,12 @@ jobs:
       node-version: 24
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.node-version }}
 
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/ci.yml
similarity index 54%
copy from .github/workflows/release-audit.yml
copy to .github/workflows/ci.yml
index 52798d4..890e50f 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@
 # specific language governing permissions and limitations
 # under the License.
 
-name: Release Auditing
+name: Node CI
 
 on:
   push:
@@ -25,31 +25,37 @@ on:
     branches:
       - '*'
 
-permissions:
-  contents: read
-
 jobs:
-  test:
-    name: Audit Licenses
+  codeql:
+    name: CodeQL Analysis
     runs-on: ubuntu-latest
-    steps:
-      # Checkout project
-      - uses: actions/checkout@v6
 
-      # Check license headers (v2.0.0)
-      - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
+    permissions:
+      contents: read
+      security-events: write
 
-      # Setup environment with node
-      - uses: actions/setup-node@v6
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
-          node-version: 24
+          persist-credentials: false
+          fetch-depth: 1
 
-      # Install node packages
-      - name: npm install packages
-        run: npm ci
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version: 24.x
 
-      # Check node package licenses (v2.0.1)
-      - uses: erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2
+      - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
         with:
-          license-config: 'licence_checker.yml'
-          include-asf-category-a: true
+          tools: linked
+          languages: javascript, actions
+          queries: security-and-quality
+          config: |
+            paths-ignore:
+              - node_modules
+
+      - name: Run npm install
+        run: npm ci
+        env:
+          CI: true
+
+      - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml
index c87ec5d..a06960b 100644
--- a/.github/workflows/ios.yml
+++ b/.github/workflows/ios.yml
@@ -54,14 +54,6 @@ jobs:
     strategy:
       matrix:
         versions:
-          - os-version: macos-14
-            ios-version: 15.x
-            xcode-version: 15.x
-
-          - os-version: macos-14
-            ios-version: 16.x
-            xcode-version: 15.x
-
           - os-version: macos-14
             ios-version: 17.x
             xcode-version: 15.x
@@ -72,14 +64,20 @@ jobs:
 
           - os-version: macos-26
             ios-version: 26.x
-            xcode-version: 26.1
+            xcode-version: 26.x
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.node-version }}
-      - uses: maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd
+
+      # maxim-lobanov/setup-xcode v1.7.0
+      - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90
         env:
           xcode-version: ${{ matrix.versions.xcode-version == '' && env.default_xcode-version || matrix.versions.xcode-version }}
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index fe55389..6b9a594 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -40,8 +40,12 @@ jobs:
       node-version: 24
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.node-version }}
 
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml
index 52798d4..3156baa 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,13 +34,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checkout project
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+          fetch-depth: 1
 
-      # Check license headers (v2.0.0)
-      - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
+      # Check license headers
+      - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd # v3.0.0
 
       # Setup environment with node
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
 
@@ -48,8 +51,8 @@ jobs:
       - name: npm install packages
         run: npm ci
 
-      # Check node package licenses (v2.0.1)
-      - uses: erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2
+      # Check node package licenses
+      - uses: erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
         with:
           license-config: 'licence_checker.yml'
           include-asf-category-a: true
diff --git a/.rat-excludes b/.rat-excludes
index a68f1c1..f21ebe1 100644
--- a/.rat-excludes
+++ b/.rat-excludes
@@ -15,8 +15,6 @@
 # specific language governing permissions and limitations
 # under the License.
 
-# This file used by ATR
-
 .git/
 coverage/
 node_modules/
diff --git a/.ratignore b/.ratignore
deleted file mode 100644
index 63db3f1..0000000
--- a/.ratignore
+++ /dev/null
@@ -1,23 +0,0 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements.  See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership.  The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License.  You may obtain a copy of the License at
-#
-#   http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied.  See the License for the
-# specific language governing permissions and limitations
-# under the License.
-
-# This file used by release audit workflow
-
-.git/
-coverage/
-node_modules/
-types/index.d.ts


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org