Commit graph

209 commits

Author SHA1 Message Date
dependabot[bot]
2bbafc1a09
build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0
Bumps [microsoft/setup-msbuild](https://github.com/microsoft/setup-msbuild) from 1.3.2 to 2.0.0.
- [Release notes](https://github.com/microsoft/setup-msbuild/releases)
- [Changelog](https://github.com/microsoft/setup-msbuild/blob/main/building-release.md)
- [Commits](https://github.com/microsoft/setup-msbuild/compare/v1.3.2...v2.0.0)

---
updated-dependencies:
- dependency-name: microsoft/setup-msbuild
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-31 14:37:37 +00:00
dependabot[bot]
8378e83e45
build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
Bumps [microsoft/setup-msbuild](https://github.com/microsoft/setup-msbuild) from 1.3.1 to 1.3.2.
- [Release notes](https://github.com/microsoft/setup-msbuild/releases)
- [Changelog](https://github.com/microsoft/setup-msbuild/blob/main/building-release.md)
- [Commits](https://github.com/microsoft/setup-msbuild/compare/v1.3.1...v1.3.2)

---
updated-dependencies:
- dependency-name: microsoft/setup-msbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-26 14:05:45 +00:00
dependabot[bot]
32ab65fd77
build(deps): bump actions/cache from 3 to 4 (#8594)
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-18 07:37:49 -08:00
dependabot[bot]
8cfe7572de
build(deps): bump actions/download-artifact from 3 to 4 (#8466)
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3 to 4.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-17 10:04:40 -08:00
dependabot[bot]
44cac16be1
build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-17 10:02:54 -08:00
Andy Feller
48f5a15e0d
Update deployment.yml
Removed previous deployment step env vars
2024-01-08 08:48:55 -05:00
Andy Feller
541ce0e5b4
Merge pull request #8465 from cli/andyfeller/213-windows-hsm-signing
Update deployment workflow for final HSM solution
2023-12-15 11:52:35 -05:00
Andy Feller
5ecdf166fb Update deployment workflow for final HSM solution
This applies the changes from the separate Windows HSM signing prototype development to the official deployment workflow including:

1. Use of Azure Code Signing client
2. Sourcing signtool.exe from runner
3. Moving from batch to PowerShell for Windows signing script
4. Using the same signing process for .exe and .msi
2023-12-14 13:15:38 -05:00
dependabot[bot]
1df8e833c7
build(deps): bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-14 14:24:28 +00:00
Andy Feller
29f409666e
Merge pull request #8457 from cli/andyfeller/213-windows-hsm-signing-testing
Enhance HSM deployment prototype to use the same signing process for .exe and .msi
2023-12-14 07:10:13 -05:00
Andy Feller
e01809c075 Unify Windows sign process on signtool
- converts the process from using script/sign.bat to script/sign.ps1 for supportability and capability
- resolves signtool on runner in order to run rather than hardcoded path
2023-12-13 10:19:36 -05:00
Andy Feller
f0f09bda57
Merge pull request #8421 from cli/andyfeller/213-windows-hsm-signing-testing
Create HSM testing workflow
2023-12-12 10:19:51 -05:00
Andy Feller
35f99ee426 Final fixes 2023-12-12 10:09:47 -05:00
Andy Feller
783dbf999a Remove fugue artifact 2023-12-12 09:56:35 -05:00
Andy Feller
bcbd848bfe Remove unnecessary copying, fix secrets part deux 2023-12-12 09:54:55 -05:00
Andy Feller
1fff21a63e Fixes based on actual secret names and signtool insights 2023-12-12 09:48:16 -05:00
Andy Feller
4054968fc3 Fix Dlib DLL path
Mixed up Unix and Windows path separators
2023-12-08 17:30:28 -05:00
Andy Feller
0af95d9314 Remove previous hsm test workflow 2023-12-08 17:29:19 -05:00
Andy Feller
5e8e645a7f Update HSM test using Desktop approach
This update leverages GitHub Desktop approach of downloading Azure Code Signing DLL and wiring it up as part of the existing signing process used by Windows builds.
2023-12-08 17:27:22 -05:00
dependabot[bot]
5d780dabf1
build(deps): bump actions/setup-go from 4 to 5
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-07 14:29:50 +00:00
Andy Feller
dea2cd5fe1 Create HSM testing workflow
This commit is an initial prototype based on the deployment workflow, using the
Azure Code Signing service to sign Windows .exe and .msi files.

These changes have been isolated as much as possible to not affect existing
deployment workflows while also working around design issues with how GitHub
CLI workflow works with GoReleaser and now with ACS support.  The biggest smell
was over whether to break from using GoReleaser or have GoReleaser control as
much about the release process as it has been versus opening / signing /
archiving the resulting GoReleaser artifacts; needless to say, the latter was
chosen for expedience as well as leaning into officially supported solutions.
2023-12-05 15:24:50 -05:00
Andy Feller
8302a293d0 Fix triage workflow, restore PR support
This commit reverts the triage workflow to restore the previous PR support using the `pull_request_target`, which is more secure as it doesn't allow fork repositories to change the workflow before it runs.

Additionally, this fixes an issue currently causing the workflow to break as cli/cli uses the `discuss` label but github/cli uses the `triage` label.
2023-12-05 08:46:45 -05:00
Andy Feller
bdfdc42624 Revert "Update triage.yml"
This reverts commit 3be9a0ed85.
2023-12-05 08:33:00 -05:00
Andy Feller
3be9a0ed85
Update triage.yml 2023-12-04 13:54:16 -05:00
Andy Feller
109766fe14 Correcting label and language
- replacing triage for discuss
2023-11-30 23:09:46 -05:00
Andy Feller
a7753a9809 Refactor triage workflow
- replaces creating discussions for issues
- supports discussing both issues and pull requests
- populates more information about related issues and pull requests in triage issues
2023-11-30 23:00:30 -05:00
William Martin
ede1705bf2 Ensure good link in triage discussion 2023-10-31 10:02:42 +01:00
William Martin
b2c445f4b9 Ensure variables get passed in discussion triage 2023-10-31 09:58:30 +01:00
William Martin
6782120254 Update discussion triage types to ID 2023-10-31 09:55:29 +01:00
William Martin
4213e3e2b4 Update secret name to not be prefixed with GITHUB
Apparently this isn't allowed
2023-10-31 09:49:46 +01:00
William Martin
09b81ff545
Create private discussion for issues labelled discuss (#8264) 2023-10-31 09:44:31 +01:00
Andy Feller
80e46cabeb
Update deployment.yml
Update release job to use repository environment needed for homebrew secret
2023-10-03 11:28:58 -04:00
Andy Feller
aefecbab65
Update homebrew-bump.yml
Adding missing input needed for testing
2023-10-03 10:54:44 -04:00
William Martin
49ec484211
Add homebrew-bump-debug workflow (#8114) 2023-10-03 16:45:44 +02:00
dependabot[bot]
9683b91363
build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
Bumps [mislav/bump-homebrew-formula-action](https://github.com/mislav/bump-homebrew-formula-action) from 2 to 3.
- [Release notes](https://github.com/mislav/bump-homebrew-formula-action/releases)
- [Commits](https://github.com/mislav/bump-homebrew-formula-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: mislav/bump-homebrew-formula-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-21 14:07:16 +00:00
dependabot[bot]
fe40c2652e
build(deps): bump goreleaser/goreleaser-action from 4 to 5
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4 to 5.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 14:24:27 +00:00
William Martin
1d0d51834d Move homebrew bump fork to personal repo 2023-09-06 15:23:24 +02:00
William Martin
1d650a1577 Revert "Add a test workflow for homebrew bump investigations (#7951)"
This reverts commit 3d4df8800e.
2023-09-06 15:22:21 +02:00
William Martin
3d4df8800e
Add a test workflow for homebrew bump investigations (#7951) 2023-09-06 15:02:58 +02:00
dependabot[bot]
f9df89da0f
build(deps): bump actions/checkout from 3 to 4 (#7937)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 04:06:24 +02:00
William Martin
e81a76d535
Add formula-path to homebrew-bump step (#7930) 2023-09-01 17:45:27 +02:00
Sam Coe
4a57a812f5
Upgrade to Go 1.21 (#7843) 2023-08-16 10:37:58 -07:00
William Martin
bd46f923bd Use homebrew fork in cli org and update token 2023-06-07 13:29:25 +02:00
William Martin
ca02aec13b Change site deployment ssh key to PAT 2023-06-07 12:58:02 +02:00
Mislav Marohnić
fbb9d71b02
Fix release guard for deployment workflow
Co-authored-by: Sam Coe <samcoe@users.noreply.github.com>
2023-05-10 12:14:07 +02:00
Mislav Marohnić
8b987e2deb
New deployment workflow
Add ability to trigger deployments without having to push a git tag
2023-05-09 20:23:54 +02:00
Mislav Marohnić
57a5997e36
Initialize deployment.yml workflow file 2023-04-17 20:00:04 +02:00
jongwooo
3a89f14dea Replace deprecated command with environment file
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
2023-03-19 00:19:02 +09:00
dependabot[bot]
d905165875
Bump actions/setup-go from 3 to 4 (#7177)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-16 09:22:02 +11:00
dependabot[bot]
940ef473de
Bump microsoft/setup-msbuild from 1.1.3 to 1.3.1
Bumps [microsoft/setup-msbuild](https://github.com/microsoft/setup-msbuild) from 1.1.3 to 1.3.1.
- [Release notes](https://github.com/microsoft/setup-msbuild/releases)
- [Changelog](https://github.com/microsoft/setup-msbuild/blob/main/building-release.md)
- [Commits](https://github.com/microsoft/setup-msbuild/compare/v1.1.3...v1.3.1)

---
updated-dependencies:
- dependency-name: microsoft/setup-msbuild
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-06 14:06:47 +00:00