You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by er...@apache.org on 2026/05/17 04:16:11 UTC
(cordova-android) branch chore/improve-release-draft updated (9b799714 -> ef01aeb1)
This is an automated email from the ASF dual-hosted git repository.
erisu pushed a change to branch chore/improve-release-draft
in repository https://gitbox.apache.org/repos/asf/cordova-android.git
discard 9b799714 chore: added dependabot configs
discard d7873847 chore(workflow): update actions/checkout configs
discard 9b5d5d2c chore(workflow): pin actions in all workflows
new 43af0765 chore(workflow): pin actions in all workflows
new f506953f chore(workflow): update actions/checkout configs
new ef01aeb1 chore: added dependabot configs
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (9b799714)
\
N -- N -- N refs/heads/chore/improve-release-draft (ef01aeb1)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/ci.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
(cordova-android) 03/03: chore: added dependabot configs
Posted by er...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch chore/improve-release-draft
in repository https://gitbox.apache.org/repos/asf/cordova-android.git
commit ef01aeb1eaa00f5ec8c3e3e5e63fb5a188a78c86
Author: Erisu <er...@apache.org>
AuthorDate: Sat May 16 18:16:04 2026 +0900
chore: added dependabot configs
---
.github/dependabot.yml | 34 ++++++++++++++++++++++++++++++++++
1 file changed, 34 insertions(+)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..21193931
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,34 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+version: 2
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ cooldown:
+ default-days: 6
+ schedule:
+ interval: "cron"
+ cronjob: "0 1 * * *"
+
+ - package-ecosystem: "npm"
+ directory: "/"
+ cooldown:
+ default-days: 6
+ schedule:
+ interval: "cron"
+ cronjob: "0 1 * * *"
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
(cordova-android) 02/03: chore(workflow): update actions/checkout configs
Posted by er...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch chore/improve-release-draft
in repository https://gitbox.apache.org/repos/asf/cordova-android.git
commit f506953f0f82a84a33045e1efa878ce830ab545e
Author: Erisu <er...@apache.org>
AuthorDate: Sat May 16 18:13:57 2026 +0900
chore(workflow): update actions/checkout configs
---
.github/workflows/ci.yml | 3 +++
.github/workflows/release-audit.yml | 3 +++
2 files changed, 6 insertions(+)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c49944a3..2daaf6f2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,6 +42,9 @@ jobs:
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: ${{ matrix.node-version }}
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml
index 3d2448b3..d3d7067c 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -35,6 +35,9 @@ jobs:
steps:
# Checkout project
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ with:
+ persist-credentials: false
+ fetch-depth: 1
# Check license headers (v2.0.0)
- uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
(cordova-android) 01/03: chore(workflow): pin actions in all workflows
Posted by er...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch chore/improve-release-draft
in repository https://gitbox.apache.org/repos/asf/cordova-android.git
commit 43af0765239403cc982d74db7d2bc0beee35f963
Author: Erisu <er...@apache.org>
AuthorDate: Sat May 16 18:12:55 2026 +0900
chore(workflow): pin actions in all workflows
---
.github/workflows/ci.yml | 10 +++++-----
.github/workflows/release-audit.yml | 4 ++--
2 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 941bfb40..c49944a3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,12 +41,12 @@ jobs:
os: [ubuntu-latest, windows-latest, macos-15]
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: ${{ matrix.node-version }}
- - uses: actions/setup-java@v5
+ - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
with:
distribution: 'temurin'
java-version: '17'
@@ -61,7 +61,7 @@ jobs:
# It contains mixed content from the npm package "cordova-js" and "./cordova-js-src".
# The report might not be resolvable because of the external package.
# If the report is related to this repository, it would be detected when scanning "./cordova-js-src".
- - uses: github/codeql-action/init@v4
+ - uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
with:
languages: javascript, java-kotlin
queries: security-and-quality
@@ -79,7 +79,7 @@ jobs:
env:
CI: true
- - uses: github/codeql-action/analyze@v4
+ - uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
# v4.6.0
- uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml
index 52798d4a..3d2448b3 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,13 +34,13 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
# Check license headers (v2.0.0)
- uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
# Setup environment with node
- - uses: actions/setup-node@v6
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: 24
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org