Eric Meadows-Jönsson
cdbfa09edb
Fix hex upload of Elixir build without -otp- suffix ( #14840 )
...
OTP 25 is no longer supported so we didn't upload a generic build.
Instead find the oldest version instead of hardcoding it.
2025-10-17 22:21:14 +02:00
Jonatan Männchen
c06b6a929e
Update ORT Scanner ( #14594 )
2025-10-06 08:39:20 +02:00
Jean Klingler
64c61df2bf
Warn on boot for OTP28.0 ( #14732 )
2025-09-18 19:10:12 +09:00
Jonatan Männchen
499a9c55d3
Correct builds.hex.pm Publish Condition in CI ( #14772 )
2025-09-15 23:14:27 +02:00
Jonatan Männchen
cc797de249
tighten CI secret scope and move AWS config to environment vars ( #14627 )
...
* Add `environment: release` to the "publish-to-hex" job so that only
workflows explicitly targeting the release environment can read
sensitive values.
* Gate the job behind `if: ${{ vars.HEX_AWS_REGION }}` to avoid noisy
failures in forks where the variable is not configured.
* Replace `${{ secrets.HEX_AWS_REGION }}` / `${{ secrets.HEX_AWS_S3_BUCKET }}`
references with `${{ vars.* }}`. These are not credentials, so
environment-level *variables* are a better fit and keep them readable
only by jobs that declare the environment.
* Remove Fastly secrets from the job-wide `env:` block and inject them
only into the Fastly purge step, following the principle of least
privilege. Other steps no longer see these tokens.
Restricting secret visibility to an environment and to the exact step
that needs them reduces the blast radius of a compromised workflow run,
blocks accidental exposure in logs of unrelated steps, and stops forks
from obtaining privileged data.
2025-09-03 22:14:58 +02:00
Jonatan Männchen
4f5746369b
Use Workload Identity Federation for Windows Trusted Signing ( #14604 )
2025-06-25 19:31:00 +02:00
dependabot[bot]
1a8d13c12a
Bump erlef/setup-beam from 1.18.2 to 1.19.0 ( #14537 )
...
Bumps [erlef/setup-beam](https://github.com/erlef/setup-beam ) from 1.18.2 to 1.19.0.
- [Release notes](https://github.com/erlef/setup-beam/releases )
- [Commits](https://github.com/erlef/setup-beam/compare/5304e04ea2b355f03681464e683d92e3b2f18451...8aa8a857c6be0daae6e97272bb299d5b942675a4 )
---
updated-dependencies:
- dependency-name: erlef/setup-beam
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-27 09:02:41 +02:00
José Valim
050f9e28b4
Run Erlang/OTP 28 on Windows CI ( #14513 )
2025-05-22 10:21:24 +02:00
José Valim
51e160e6f8
Add OTP 28 to CI ( #14510 )
2025-05-21 13:48:13 +02:00
dependabot[bot]
ca069f7ab6
Bump DavidAnson/markdownlint-cli2-action from 19.1.0 to 20.0.0 ( #14507 )
...
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action ) from 19.1.0 to 20.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases )
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/05f32210e84442804257b2a6f20b273450ec8265...992badcdf24e3b8eb7e87ff9287fe931bcb00c6e )
---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
dependency-version: 20.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-19 23:52:01 +02:00
Eksperimental
eef6c3cb2a
CI: build does using --warnings-as-error ExDoc flag ( #14485 )
2025-05-10 11:30:41 +02:00
José Valim
670cc0954f
Update CI
2025-05-09 13:25:10 +02:00
dependabot[bot]
ef11da961d
Bump actions/download-artifact from 4.2.1 to 4.3.0 ( #14457 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.2.1 to 4.3.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/95815c38cf2ff2164869cbab79da8d1f422bc89e...d3f86a106a0bac45b974a628896c90dbdf5c8093 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-29 22:33:35 +02:00
dependabot[bot]
396382cef7
Bump actions/upload-artifact from 4.6.1 to 4.6.2 ( #14411 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4.6.1...ea165f8d65b6e75b540449e92b4886f43607fa02 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 4.6.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-08 08:22:05 +02:00
Jonatan Männchen
f3e8ceb5aa
Implement Test Coverage Reporting ( #14343 )
2025-04-07 22:37:01 +02:00
dependabot[bot]
5c63c8d94d
Bump actions/download-artifact from 4.1.9 to 4.2.1 ( #14361 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.9 to 4.2.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/cc203385981b70ca67e1cc392babf9cc229d5806...95815c38cf2ff2164869cbab79da8d1f422bc89e )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-25 10:06:25 +01:00
dependabot[bot]
95b63d74dc
Bump actions/upload-artifact from 4.6.1 to 4.6.2 ( #14360 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...ea165f8d65b6e75b540449e92b4886f43607fa02 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-25 09:57:06 +01:00
Jonatan Männchen and José Valim
f55498e7e5
Enable warnings_as_errors for Erlang only on latest ( #14339 )
...
Co-authored-by: José Valim <jose.valim@dashbit.co >
2025-03-18 14:27:59 +01:00
José Valim
cb8b73598b
Update Erlang/OTP on Windows CI ( #14334 )
2025-03-17 15:34:50 +01:00
Jonatan Männchen
37faa6761f
Limit GH Actions Token Permissions ( #14333 )
2025-03-17 14:25:44 +01:00
Jonatan Männchen
6cd8082494
Pin GitHub Actions ( #14332 )
2025-03-17 14:25:22 +01:00
Jonatan Männchen
4db62c8d59
Update ORT Action & Executable ( #14331 )
2025-03-17 14:23:11 +01:00
Jonatan Männchen
a58382fe5b
Update ORT Action ( #14296 )
2025-02-24 15:41:54 +01:00
Art Kay
73893ee5c2
Fix typo in action.yml ( #14286 )
...
desctiption -> description
2025-02-20 05:56:53 +01:00
Wojtek Mach
cd6fcc41a6
Add instructions for updating AZURE_CLIENT_SECRET ( #14284 )
2025-02-19 11:26:22 +01:00
José Valim
b65570e194
Remove --keep-going and reduce concurrency for CI on Windows ( #14283 )
2025-02-19 11:09:39 +01:00
Jonatan Männchen
4b50edce3e
Expose Packages in SBoM ( #14264 )
2025-02-14 09:20:16 +01:00
Jonatan Männchen
e45a1f2593
Improve SBoM Details ( #14258 )
2025-02-09 17:35:07 +01:00
Jonatan Männchen
980500551c
Inline Licence Info & Copyright for non-test files ( #14256 )
2025-02-07 21:11:09 +01:00
Jonatan Männchen
d12286c490
Setup OSS Review Toolkit SBoM generation ( #14241 )
2025-02-05 13:09:56 +01:00
José Valim
cb0f8d9791
Fetch all tags before generating docs ( #14206 )
2025-01-21 08:29:42 +01:00
dependabot[bot]
0df1ff54b1
Bump DavidAnson/markdownlint-cli2-action from 19.0.0 to 19.1.0 ( #14204 )
...
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action ) from 19.0.0 to 19.1.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases )
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v19.0.0...v19.1.0 )
---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-21 08:20:19 +01:00
dependabot[bot]
ffbe286320
Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 ( #14185 )
...
Bumps [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action ) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/azure/trusted-signing-action/releases )
- [Commits](https://github.com/azure/trusted-signing-action/compare/v0.5.0...v0.5.1 )
---
updated-dependencies:
- dependency-name: azure/trusted-signing-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-14 08:20:24 +01:00
dependabot[bot]
78720e50d8
Bump DavidAnson/markdownlint-cli2-action from 18.0.0 to 19.0.0 ( #14132 )
...
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action ) from 18.0.0 to 19.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases )
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v18.0.0...v19.0.0 )
---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-30 23:43:10 +01:00
José Valim
af4cb1d6a6
Simplify release matrix
2024-12-28 09:21:00 +01:00
José Valim
62f49cd756
Conditionally run steps
2024-12-25 10:22:20 +01:00
José Valim
e0eb19a933
Take two
2024-12-25 10:08:58 +01:00
José Valim
1ec5af94fe
No need for ==
2024-12-25 10:01:15 +01:00
José Valim
45e348b1f5
Run Erlang/OTP 25 release builds
...
Closes #14113 .
2024-12-25 09:57:59 +01:00
Jonatan Männchen
91527e3753
Fix Release Signing Again ( #14099 ) ( #14102 )
...
This time, fix the Docs publishing.
2024-12-21 17:59:53 +01:00
Jonatan Männchen
70bd74e0e0
Fix Release Signing ( #14099 ) ( #14100 )
2024-12-21 16:17:38 +01:00
Jonatan Männchen
7cbc44d6bf
Hash release files after signing ( #14085 )
2024-12-20 11:30:07 +01:00
José Valim
ef7c11814f
Require Erlang/OTP 26+ ( #14045 )
2024-12-10 15:38:02 +01:00
dependabot[bot]
051bffa0ec
Bump actions/attest-build-provenance from 1 to 2 ( #14042 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1 to 2.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-10 11:51:50 +01:00
dependabot[bot]
84b5db7380
Bump DavidAnson/markdownlint-cli2-action from 17.0.0 to 18.0.0 ( #14001 )
...
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action ) from 17.0.0 to 18.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases )
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/v17.0.0...v18.0.0 )
---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-18 23:56:33 +01:00
José Valim
485ca72ae2
Infer types and use them across remote calls ( #13981 )
...
This also unifies handling of deterministic builds with Erlang/OTP
as well as warnings_as_errors.
2024-11-09 18:00:27 +01:00
Tobias Pfeiffer
57841a09f4
Bump Windows Runner & add more OTP versions ( #13972 )
2024-11-06 14:08:45 +01:00
Tobias Pfeiffer
75fd563691
Bump CI (OTP 27.1 and Ubuntu 24.04) ( #13969 )
2024-11-06 11:42:16 +01:00
José Valim
166c03dbd7
Remove --warnings-as-errors flag from Erlang build on CI
2024-10-30 10:33:42 +01:00
José Valim
f2565849b1
Enable warnings_as_errors for Erlang only on latest
2024-10-30 09:16:46 +01:00