Skip to content

Commit 58a2a8e

Browse files
eric-mallaceric-mallac
committed
chore(repo): pin actions to SHA, add FUNDING/dependabot/labeler/greetings/stale, release-note categories, README star-history
1 parent 2049996 commit 58a2a8e

15 files changed

Lines changed: 213 additions & 29 deletions

‎.github/FUNDING.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
# Shows a "Sponsor" button on the repository.
2+
# Jodit is MIT and free — a PRO / OEM license funds development and unlocks
3+
# premium plugins, source code and priority support.
4+
custom:
5+
- 'https://xdsoft.net/jodit/pro/'

‎.github/dependabot.yml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
version: 2
2+
updates:
3+
# Keep GitHub Actions pinned to SHAs up to date (bumps the pinned SHA + the
4+
# trailing version comment when a new release ships).
5+
- package-ecosystem: 'github-actions'
6+
directory: '/'
7+
schedule:
8+
interval: 'weekly'
9+
labels:
10+
- 'dependencies'
11+
- 'ci'
12+
13+
# npm dev/runtime dependencies.
14+
- package-ecosystem: 'npm'
15+
directory: '/'
16+
schedule:
17+
interval: 'weekly'
18+
open-pull-requests-limit: 10
19+
labels:
20+
- 'dependencies'

‎.github/labeler.yml‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
# Auto-labels pull requests by the paths they touch. Used by .github/workflows/labeler.yml
2+
plugins:
3+
- changed-files:
4+
- any-glob-to-any-file: 'src/plugins/**'
5+
6+
core:
7+
- changed-files:
8+
- any-glob-to-any-file: 'src/core/**'
9+
10+
styles:
11+
- changed-files:
12+
- any-glob-to-any-file: ['src/styles/**', '**/*.less']
13+
14+
tests:
15+
- changed-files:
16+
- any-glob-to-any-file: ['**/*.test.js', 'test/**']
17+
18+
documentation:
19+
- changed-files:
20+
- any-glob-to-any-file: ['**/*.md', 'src/**/README.md']
21+
22+
ci:
23+
- changed-files:
24+
- any-glob-to-any-file: ['.github/**', 'Makefile', 'tools/**']
25+
26+
dependencies:
27+
- changed-files:
28+
- any-glob-to-any-file: ['package.json', 'package-lock.json']

‎.github/release.yml‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
# Categorization for GitHub's auto-generated release notes / the "Generate
2+
# release notes" button. (The Publish workflow already fills release bodies from
3+
# CHANGELOG.md; this shapes the auto-generated fallback and the PR-based notes.)
4+
changelog:
5+
exclude:
6+
labels:
7+
- 'ignore-for-release'
8+
authors:
9+
- 'dependabot'
10+
categories:
11+
- title: 🚀 Features
12+
labels:
13+
- 'enhancement'
14+
- 'Feature Request'
15+
- title: 🐛 Bug Fixes
16+
labels:
17+
- 'bug'
18+
- 'fixed'
19+
- title: 🔒 Security
20+
labels:
21+
- 'security'
22+
- title: 🧹 Dependencies & Maintenance
23+
labels:
24+
- 'dependencies'
25+
- 'ci'
26+
- title: Other Changes
27+
labels:
28+
- '*'

‎.github/workflows/gh-pages.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,16 +11,16 @@ jobs:
1111
if: ${{ !startsWith(github.event.head_commit.message, 'New version') }}
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@v6
15-
- uses: actions/setup-node@v6 #Setup Node
14+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
15+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6 #Setup Node
1616
with:
1717
node-version-file: '.nvmrc'
1818
cache: 'npm'
1919
- run: npm ci --legacy-peer-deps
2020
- run: make build
2121
- run: make examples
2222
- name: Upload Pages artifact
23-
uses: actions/upload-pages-artifact@v3
23+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
2424
with:
2525
path: ./examples
2626

@@ -37,4 +37,4 @@ jobs:
3737
steps:
3838
- name: Deploy to GitHub Pages
3939
id: deployment
40-
uses: actions/deploy-pages@v4
40+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

‎.github/workflows/greetings.yml‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
name: Greetings
2+
3+
on:
4+
pull_request_target:
5+
types: [opened]
6+
issues:
7+
types: [opened]
8+
9+
permissions:
10+
issues: write
11+
pull-requests: write
12+
13+
jobs:
14+
greeting:
15+
runs-on: ubuntu-latest
16+
steps:
17+
- uses: actions/first-interaction@3c71ce730280171fd1cfb57c00c774f8998586f7 # v1
18+
with:
19+
repo-token: ${{ secrets.GITHUB_TOKEN }}
20+
issue-message: >
21+
👋 Thanks for opening your first issue in Jodit!
22+
23+
24+
To help us reproduce it fast, please include your Jodit
25+
version, browser/OS, and a minimal runnable example
26+
(CodePen / JSFiddle / StackBlitz) or the exact
27+
`editor.value` / config that triggers the problem.
28+
29+
30+
Using Jodit in a commercial product? A
31+
[PRO / OEM license](https://xdsoft.net/jodit/pro/)
32+
includes priority support.
33+
pr-message: >
34+
🎉 Thanks for your first pull request to Jodit!
35+
36+
37+
A maintainer will review it soon. Please make sure the CI
38+
checks pass and that new behaviour is covered by tests
39+
(`make test`). Appreciate the contribution!

‎.github/workflows/labeler.yml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
name: Labeler
2+
3+
on: [pull_request_target]
4+
5+
permissions:
6+
contents: read
7+
pull-requests: write
8+
9+
jobs:
10+
label:
11+
runs-on: ubuntu-latest
12+
steps:
13+
- uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
14+
with:
15+
repo-token: ${{ secrets.GITHUB_TOKEN }}
16+
sync-labels: false

‎.github/workflows/new-version.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,11 @@ jobs:
1010
newversion:
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
1414
with:
1515
persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal access token.
1616
fetch-depth: 0 # otherwise, there would be errors pushing refs to the destination repository.
17-
- uses: actions/setup-node@v6 #Setup Node
17+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6 #Setup Node
1818
with:
1919
node-version-file: '.nvmrc'
2020
cache: 'npm'
@@ -25,7 +25,7 @@ jobs:
2525
make newversion push=false
2626
2727
- name: Push changes
28-
uses: ad-m/github-push-action@master
28+
uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # master (pinned)
2929
with:
3030
github_token: ${{ secrets.GITHUB_TOKEN }}
3131
branch: ${{ github.ref }}

‎.github/workflows/playwright.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,8 @@ jobs:
1111
timeout-minutes: 60
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@v6
15-
- uses: actions/setup-node@v6
14+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
15+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
1616
with:
1717
node-version-file: '.nvmrc'
1818
cache: 'npm'
@@ -25,7 +25,7 @@ jobs:
2525
run: make screenshots-build-image
2626
- name: Run Playwright tests
2727
run: make screenshots-test es=es2021 fat=true min=true
28-
- uses: actions/upload-artifact@v7
28+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
2929
if: always()
3030
with:
3131
name: playwright-report

‎.github/workflows/release.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@ jobs:
1717
runs-on: ubuntu-latest
1818

1919
steps:
20-
- uses: actions/checkout@v6
20+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
2121

22-
- uses: actions/setup-node@v6
22+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
2323
with:
2424
node-version-file: '.nvmrc'
2525
cache: 'npm'
@@ -35,9 +35,9 @@ jobs:
3535
runs-on: ubuntu-latest
3636

3737
steps:
38-
- uses: actions/checkout@v6
38+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
3939

40-
- uses: actions/setup-node@v6
40+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
4141
with:
4242
node-version-file: '.nvmrc'
4343
cache: 'npm'
@@ -52,7 +52,7 @@ jobs:
5252
run: make check-esm-build pluginsCount=63
5353

5454
- name: Upload build artifacts
55-
uses: actions/upload-artifact@v7
55+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
5656
with:
5757
name: build
5858
path: build/
@@ -84,9 +84,9 @@ jobs:
8484
fat: true
8585

8686
steps:
87-
- uses: actions/checkout@v6
87+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
8888

89-
- uses: actions/setup-node@v6
89+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
9090
with:
9191
node-version-file: '.nvmrc'
9292
cache: 'npm'
@@ -95,7 +95,7 @@ jobs:
9595
run: npm ci --legacy-peer-deps
9696

9797
- name: Download build artifacts
98-
uses: actions/download-artifact@v8
98+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
9999
with:
100100
name: build
101101
path: build/
@@ -109,9 +109,9 @@ jobs:
109109
needs: test
110110

111111
steps:
112-
- uses: actions/checkout@v6
112+
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
113113

114-
- uses: actions/setup-node@v6
114+
- uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
115115
with:
116116
node-version-file: '.nvmrc'
117117
cache: 'npm'
@@ -124,7 +124,7 @@ jobs:
124124
run: npm install -g npm@11.6.4
125125

126126
- name: Download build artifacts
127-
uses: actions/download-artifact@v8
127+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
128128
with:
129129
name: build
130130
path: build/
@@ -142,7 +142,7 @@ jobs:
142142
echo "EOF" >> $GITHUB_OUTPUT
143143
144144
- name: Release
145-
uses: softprops/action-gh-release@v2
145+
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
146146
if: startsWith(github.ref, 'refs/tags/')
147147
with:
148148
body: ${{ steps.changelog.outputs.NOTES }}

0 commit comments

Comments
 (0)