Commit Graph
130 Commits
Author SHA1 Message Date
dependabot[bot] 396382cef7 Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#14411)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.6.1...ea165f8d65b6e75b540449e92b4886f43607fa02)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-08 08:22:05 +02:00
Jonatan Männchen f3e8ceb5aa Implement Test Coverage Reporting (#14343) 2025-04-07 22:37:01 +02:00
dependabot[bot] 5c63c8d94d Bump actions/download-artifact from 4.1.9 to 4.2.1 (#14361)
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.9 to 4.2.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/cc203385981b70ca67e1cc392babf9cc229d5806...95815c38cf2ff2164869cbab79da8d1f422bc89e)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-25 10:06:25 +01:00
dependabot[bot] 95b63d74dc Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#14360)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...ea165f8d65b6e75b540449e92b4886f43607fa02)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-25 09:57:06 +01:00
Jonatan MännchenandJosé Valim f55498e7e5 Enable warnings_as_errors for Erlang only on latest (#14339)
Co-authored-by: José Valim <jose.valim@dashbit.co>
2025-03-18 14:27:59 +01:00
José Valim cb8b73598b Update Erlang/OTP on Windows CI (#14334) 2025-03-17 15:34:50 +01:00
Jonatan Männchen 37faa6761f Limit GH Actions Token Permissions (#14333) 2025-03-17 14:25:44 +01:00
Jonatan Männchen 6cd8082494 Pin GitHub Actions (#14332) 2025-03-17 14:25:22 +01:00
Jonatan Männchen 4db62c8d59 Update ORT Action & Executable (#14331) 2025-03-17 14:23:11 +01:00
Jonatan Männchen a58382fe5b Update ORT Action (#14296) 2025-02-24 15:41:54 +01:00
Art Kay 73893ee5c2 Fix typo in action.yml (#14286)
desctiption -> description
2025-02-20 05:56:53 +01:00
Wojtek Mach cd6fcc41a6 Add instructions for updating AZURE_CLIENT_SECRET (#14284) 2025-02-19 11:26:22 +01:00
José Valim b65570e194 Remove --keep-going and reduce concurrency for CI on Windows (#14283) 2025-02-19 11:09:39 +01:00
Jonatan Männchen 4b50edce3e Expose Packages in SBoM (#14264) 2025-02-14 09:20:16 +01:00
Jonatan Männchen e45a1f2593 Improve SBoM Details (#14258) 2025-02-09 17:35:07 +01:00
Jonatan Männchen 980500551c Inline Licence Info & Copyright for non-test files (#14256) 2025-02-07 21:11:09 +01:00
Jonatan Männchen d12286c490 Setup OSS Review Toolkit SBoM generation (#14241) 2025-02-05 13:09:56 +01:00
José Valim cb0f8d9791 Fetch all tags before generating docs (#14206) 2025-01-21 08:29:42 +01:00
dependabot[bot] 0df1ff54b1 Bump DavidAnson/markdownlint-cli2-action from 19.0.0 to 19.1.0 (#14204)
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 19.0.0 to 19.1.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v19.0.0...v19.1.0)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-21 08:20:19 +01:00
dependabot[bot] ffbe286320 Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 (#14185)
Bumps [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/azure/trusted-signing-action/releases)
- [Commits](https://github.com/azure/trusted-signing-action/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: azure/trusted-signing-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-14 08:20:24 +01:00
dependabot[bot] 78720e50d8 Bump DavidAnson/markdownlint-cli2-action from 18.0.0 to 19.0.0 (#14132)
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 18.0.0 to 19.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v18.0.0...v19.0.0)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-30 23:43:10 +01:00
José Valim af4cb1d6a6 Simplify release matrix 2024-12-28 09:21:00 +01:00
José Valim 62f49cd756 Conditionally run steps 2024-12-25 10:22:20 +01:00
José Valim e0eb19a933 Take two 2024-12-25 10:08:58 +01:00
José Valim 1ec5af94fe No need for == 2024-12-25 10:01:15 +01:00
José Valim 45e348b1f5 Run Erlang/OTP 25 release builds
Closes #14113.
2024-12-25 09:57:59 +01:00
Jonatan Männchen 91527e3753 Fix Release Signing Again (#14099) (#14102)
This time, fix the Docs publishing.
2024-12-21 17:59:53 +01:00
Jonatan Männchen 70bd74e0e0 Fix Release Signing (#14099) (#14100) 2024-12-21 16:17:38 +01:00
Jonatan Männchen 7cbc44d6bf Hash release files after signing (#14085) 2024-12-20 11:30:07 +01:00
José Valim ef7c11814f Require Erlang/OTP 26+ (#14045) 2024-12-10 15:38:02 +01:00
dependabot[bot] 051bffa0ec Bump actions/attest-build-provenance from 1 to 2 (#14042)
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1 to 2.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v2)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-10 11:51:50 +01:00
dependabot[bot] 84b5db7380 Bump DavidAnson/markdownlint-cli2-action from 17.0.0 to 18.0.0 (#14001)
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 17.0.0 to 18.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v17.0.0...v18.0.0)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-18 23:56:33 +01:00
José Valim 485ca72ae2 Infer types and use them across remote calls (#13981)
This also unifies handling of deterministic builds with Erlang/OTP
as well as warnings_as_errors.
2024-11-09 18:00:27 +01:00
Tobias Pfeiffer 57841a09f4 Bump Windows Runner & add more OTP versions (#13972) 2024-11-06 14:08:45 +01:00
Tobias Pfeiffer 75fd563691 Bump CI (OTP 27.1 and Ubuntu 24.04) (#13969) 2024-11-06 11:42:16 +01:00
José Valim 166c03dbd7 Remove --warnings-as-errors flag from Erlang build on CI 2024-10-30 10:33:42 +01:00
José Valim f2565849b1 Enable warnings_as_errors for Erlang only on latest 2024-10-30 09:16:46 +01:00
dependabot[bot] 385b046370 Bump azure/trusted-signing-action from 0.4.0 to 0.5.0 (#13936)
Bumps [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/azure/trusted-signing-action/releases)
- [Commits](https://github.com/azure/trusted-signing-action/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: azure/trusted-signing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-28 22:28:11 +01:00
Jonatan Männchen 90fae5d42b Upload Release Attestations (#13917) 2024-10-21 09:22:23 +02:00
Thanabodee Charoenpiriyakij 8786bcca7f Fetch tags before building docs (#13894)
This is regression by https://github.com/elixir-lang/elixir/pull/13845. Docs artifact needs
to fetch the tags before start building it to make version selection works.

Fixes #13892

Signed-off-by: Thanabodee Charoenpiriyakij <wingyminus@gmail.com>
2024-10-10 09:26:59 +02:00
Thanabodee Charoenpiriyakij 9d5af3fe32 Improve upload artifact to builds.hex.pm workflow (#13845) 2024-10-02 19:25:00 +02:00
Thanabodee Charoenpiriyakij f6856cf801 Remove GITHUB_TOKEN out of attest-build-provenance (#13836)
Signed-off-by: Thanabodee Charoenpiriyakij <wingyminus@gmail.com>
2024-09-17 19:48:53 +02:00
Wojtek Mach c6477803ed Fix .github/workflows/release.yml (#13831) 2024-09-17 09:20:52 +02:00
dependabot[bot] 38e9de44f7 Bump DavidAnson/markdownlint-cli2-action from 16.0.0 to 17.0.0 (#13830)
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 16.0.0 to 17.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v16.0.0...v17.0.0)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-17 00:13:35 +02:00
Wojtek Mach 69ad427ff2 Add releases for main & maintenance branches (#13829)
* Add releases for main & maintenance branches

Before this patch, release.yml workflow was only compiling and
publishing builds on tag pushes.

This patch additionally handles branch pushes (main, v1.17, etc) and
publishes them to corresponding releases (main-latest, v1.17-latest,
etc).

When we first looked at using GitHub releases for main builds, we
discarded the idea because we didn't want to keep re-creating (and thus
sending out notifications) releases. There was no API to update the SHA
the release was pointing too either. It's obvious in hindsight but all
we need to do is to update the _tag_ with the latest SHA and force-push
the tag that the release is pointing to.

We now have two places where we build main and maintenance branches,
release.yml and builds.hex.pm.yml, so in future commits we should look
into unifying the two.

* Update .github/workflows/release.yml
2024-09-16 22:31:24 +02:00
Wojtek Mach 0678be68d2 Add trusted signing to Windows installers (#13786) 2024-08-19 13:43:26 +02:00
Philip Sampaio 69bc8a756f Use GitHub Actions' "artifact attestation" feature (#13653)
The idea is to have a way to ensure that the artifacts were not tempered
after the build.

You can find details in the projects page:
https://github.com/actions/attest-build-provenance

There is also the docs page:
https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds
2024-06-12 12:48:37 +02:00
José Valim ea3e498e8f Also prebuild for 27.0 2024-05-21 13:53:40 +02:00
Michał Łępicki 5f9e08b992 Update CI to test on Erlang/OTP 27.0 (#13578) 2024-05-20 22:53:28 +02:00
Michał Łępicki 026df94147 Update CI to test on 27.0-rc3 (#13507) 2024-04-22 23:12:32 +02:00