Skip to content

Commit 27cf0e3

Browse files
Merge branch 'main' into fix/vue-devtools-class-attribute
2 parents cbd2f10 + 57f7301 commit 27cf0e3

281 files changed

Lines changed: 19744 additions & 638 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.github/workflows/autofix.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,11 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout
21-
uses: actions/checkout@v6.0.2
21+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
22+
with:
23+
persist-credentials: false
2224
- name: Setup Tools
23-
uses: TanStack/config/.github/setup@main
25+
uses: TanStack/config/.github/setup@e4b48f16568324f76f467aa4c2aac2f05db632c3
2426
- name: Fix formatting
2527
run: pnpm run format
2628
- name: Apply fixes

.github/workflows/detect-agent.yml

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,23 @@
11
name: Detect Agent
22

33
on:
4-
pull_request_target:
4+
pull_request:
55
types: [opened]
66
workflow_dispatch: {}
77

8-
permissions:
9-
issues: write
10-
pull-requests: write
8+
permissions: {}
119

1210
jobs:
1311
detect:
1412
if: github.event_name != 'workflow_dispatch'
13+
permissions:
14+
issues: write
15+
pull-requests: write
1516
uses: bombshell-dev/automation/.github/workflows/detect-agent.yml@a1553cebd9318d416f6a8e9f38f363b6aaa19c72
1617

1718
backfill:
1819
if: github.event_name == 'workflow_dispatch'
20+
permissions:
21+
issues: write
22+
pull-requests: write
1923
uses: bombshell-dev/automation/.github/workflows/detect-agent-backfill.yml@a1553cebd9318d416f6a8e9f38f363b6aaa19c72

.github/workflows/labeler.yml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,20 @@
11
name: Labeler
22

33
on:
4-
pull_request_target:
4+
pull_request:
55

6-
permissions:
7-
contents: read
8-
pull-requests: write
6+
permissions: {}
97

108
jobs:
119
labeler:
1210
name: Labeler
1311
runs-on: ubuntu-latest
12+
permissions:
13+
contents: read
14+
pull-requests: write
1415
steps:
1516
- name: Labeler
16-
uses: actions/labeler@v6.0.1
17+
uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
1718
with:
1819
repo-token: ${{ secrets.GITHUB_TOKEN }}
1920
configuration-path: labeler-config.yml

.github/workflows/pr.yml

Lines changed: 33 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -10,26 +10,27 @@ concurrency:
1010
env:
1111
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
1212

13-
permissions:
14-
contents: read
15-
pull-requests: write
16-
issues: write
13+
permissions: {}
1714

1815
jobs:
1916
test:
2017
name: Test
2118
runs-on: ubuntu-latest
19+
permissions:
20+
contents: read
21+
pull-requests: write
2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@v6.0.2
24+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2525
with:
2626
fetch-depth: 0
27+
persist-credentials: false
2728
- name: Start Nx Agents
2829
run: npx nx-cloud start-ci-run --distribute-on=".nx/workflows/dynamic-changesets.yaml"
2930
- name: Setup Tools
30-
uses: TanStack/config/.github/setup@main
31+
uses: TanStack/config/.github/setup@e4b48f16568324f76f467aa4c2aac2f05db632c3
3132
- name: Get base and head commits for `nx affected`
32-
uses: nrwl/nx-set-shas@v4.4.0
33+
uses: nrwl/nx-set-shas@3e9ad7370203c1e93d109be57f3b72eb0eb511b1 # v4.4.0
3334
with:
3435
main-branch-name: main
3536
- name: Run Checks
@@ -40,19 +41,25 @@ jobs:
4041
preview:
4142
name: Preview
4243
runs-on: ubuntu-latest
44+
permissions:
45+
contents: read
46+
pull-requests: write
4347
steps:
4448
- name: Checkout
45-
uses: actions/checkout@v6.0.2
49+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
50+
with:
51+
persist-credentials: false
4652
- name: Setup Tools
47-
uses: TanStack/config/.github/setup@main
53+
uses: TanStack/config/.github/setup@e4b48f16568324f76f467aa4c2aac2f05db632c3
4854
- name: Build Packages
4955
run: pnpm run build:all
5056
- name: Publish Previews
5157
run: pnpx pkg-pr-new publish --pnpm --compact './packages/*' --template './examples/*/*'
5258
- name: Determine commit SHA
5359
id: determine-sha
54-
run: |
55-
echo "COMMIT_SHA=${{ github.event.pull_request.head.sha || github.sha }}" >> $GITHUB_ENV
60+
run: echo "COMMIT_SHA=${COMMIT_SHA}" >> "$GITHUB_ENV"
61+
env:
62+
COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
5663
- name: Size Limit
5764
uses: andresz1/size-limit-action@94bc357df29c36c8f8d50ea497c3e225c3c95d1d
5865
with:
@@ -62,20 +69,30 @@ jobs:
6269
provenance:
6370
name: Provenance
6471
runs-on: ubuntu-latest
72+
permissions:
73+
contents: read
6574
steps:
6675
- name: Checkout
67-
uses: actions/checkout@v6.0.2
76+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
77+
with:
78+
persist-credentials: false
6879
- name: Check Provenance
69-
uses: danielroe/provenance-action@v0.1.1
80+
uses: danielroe/provenance-action@41bcc969e579d9e29af08ba44fcbfdf95cee6e6c # v0.1.1
7081
with:
7182
fail-on-downgrade: true
7283
version-preview:
7384
name: Version Preview
7485
runs-on: ubuntu-latest
86+
permissions:
87+
contents: read
88+
pull-requests: write
89+
issues: write
7590
steps:
7691
- name: Checkout
77-
uses: actions/checkout@v6.0.2
92+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
93+
with:
94+
persist-credentials: false
7895
- name: Setup Tools
79-
uses: TanStack/config/.github/setup@main
96+
uses: TanStack/config/.github/setup@e4b48f16568324f76f467aa4c2aac2f05db632c3
8097
- name: Changeset Preview
81-
uses: TanStack/config/.github/changeset-preview@main
98+
uses: TanStack/config/.github/changeset-preview@e4b48f16568324f76f467aa4c2aac2f05db632c3

.github/workflows/release.yml

Lines changed: 12 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,21 +12,24 @@ env:
1212
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
1313

1414
permissions:
15-
contents: write
16-
id-token: write
17-
pull-requests: write
15+
contents: read
1816

1917
jobs:
2018
release:
2119
name: Release
2220
runs-on: ubuntu-latest
21+
permissions:
22+
contents: write
23+
id-token: write
24+
pull-requests: write
2325
steps:
2426
- name: Checkout
25-
uses: actions/checkout@v6.0.2
27+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2628
with:
2729
fetch-depth: 0
30+
persist-credentials: true # changesets/action pushes version/release changes
2831
- name: Setup Tools
29-
uses: TanStack/config/.github/setup@main
32+
uses: TanStack/config/.github/setup@e4b48f16568324f76f467aa4c2aac2f05db632c3
3033
- name: Run Build
3134
run: pnpm run build:all
3235
- name: Determine dist-tag
@@ -45,7 +48,7 @@ jobs:
4548
fi
4649
- name: Create Release Pull Request or Publish
4750
id: changesets
48-
uses: changesets/action@v1
51+
uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0
4952
with:
5053
version: pnpm run changeset:version
5154
publish: pnpm run changeset:publish ${{ steps.dist-tag.outputs.tag && format('--tag {0}', steps.dist-tag.outputs.tag) }}
@@ -55,7 +58,9 @@ jobs:
5558
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
5659
- name: Create GitHub Release
5760
if: steps.changesets.outputs.published == 'true'
58-
run: node scripts/create-github-release.mjs ${{ steps.dist-tag.outputs.prerelease == 'true' && '--prerelease' }} ${{ steps.dist-tag.outputs.latest == 'true' && '--latest' }}
61+
run: node scripts/create-github-release.mjs ${PRERELEASE_FLAG} ${LATEST_FLAG}
5962
env:
6063
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6164
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
65+
PRERELEASE_FLAG: ${{ steps.dist-tag.outputs.prerelease == 'true' && '--prerelease' }}
66+
LATEST_FLAG: ${{ steps.dist-tag.outputs.latest == 'true' && '--latest' }}

.github/workflows/zizmor.yml

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
name: GitHub Actions Security Analysis
2+
3+
on:
4+
push:
5+
branches: [main]
6+
pull_request:
7+
branches: ['**']
8+
9+
permissions: {}
10+
11+
jobs:
12+
zizmor:
13+
name: Run zizmor
14+
runs-on: ubuntu-latest
15+
steps:
16+
- name: Checkout
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
18+
with:
19+
persist-credentials: false
20+
- name: Run zizmor
21+
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
22+
with:
23+
advanced-security: false
24+
annotations: true

.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ yarn.lock
1010
build
1111
coverage
1212
dist
13+
dist-cjs
1314
dist-ts
1415

1516
# misc

0 commit comments

Comments
 (0)