dependabot[bot]
330d7aa37b
ci: bump the actions group across 1 directory with 3 updates
...
Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout ), [dessant/lock-threads](https://github.com/dessant/lock-threads ) and [actions/setup-node](https://github.com/actions/setup-node ).
Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v7 )
Updates `dessant/lock-threads` from 4.0.0 to 6.0.2
- [Release notes](https://github.com/dessant/lock-threads/releases )
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md )
- [Commits](https://github.com/dessant/lock-threads/compare/c1b35aecc5cdb1a34539d14196df55838bb2f836...89ae32b08ed1a541efecbab17912962a5e38981c )
Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: dessant/lock-threads
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-20 19:04:11 +00:00
SatoshiQaziMuhammed
de9f5a8604
ci: give every workflow an explicit least-privilege GITHUB_TOKEN ( #23 )
...
CodeQL actions/missing-workflow-permissions: auto-approve.yml, auto-merge.yml, lock.yml, pr-any.yml, push-master.yml had no permissions block, so their jobs received the repository default token. Read-only where nothing writes through GITHUB_TOKEN; lock-threads gets the issues/pull-requests/discussions write it documents; workflows that write do it with a separate bot or app token, so GITHUB_TOKEN stays read-only.
2026-10-20 23:00:29 +04:00
Satoshi Qazi Muhammed and Claude Opus 5.5
513e863916
Let the PR checks fail
...
continue-on-error came with the upstream template: lint, test and build had
been red here since January while every pull request read as passing.
fail-fast: false keeps each step running to the end when another fails.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-10-07 08:14:02 +04:00
Kurdistan Tech Ministry
5822ced63c
Fix Lock Threads workflow token configuration
2026-01-18 00:51:53 +03:00
SatoshiQaziMuhammed
cf3e088118
Add CodeQL analysis workflow configuration
...
This workflow file sets up CodeQL analysis for the repository, specifying languages and build modes.
2026-01-08 02:13:58 +03:00
Kurdistan Tech Ministry
8d28b36f9c
Initial rebrand: @polkadot -> @pezkuwi (3 packages)
...
- Package namespace: @polkadot/dev -> @pezkuwi/dev
- Repository: polkadot-js/dev -> pezkuwichain/pezkuwi-dev
- Author: Pezkuwi Team <team@pezkuwichain.io >
Packages:
- @pezkuwi/dev (build tools, linting, CI scripts)
- @pezkuwi/dev-test (test runner)
- @pezkuwi/dev-ts (TypeScript build)
Upstream: polkadot-js/dev v0.83.3
2026-01-05 14:22:47 +03:00
dependabot[bot]