Commit graph

28 commits

Author SHA1 Message Date
dependabot[bot]
d5d27c829c
Bump actions/setup-python from 6 to 7
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-23 01:13:22 +00:00
Arpit Jain
5fa112687b
ci: declare workflow-level contents: read on 3 workflows (#3558)
Pins the default GITHUB_TOKEN to contents: read on the workflows in
.github/workflows/ that don't call a GitHub API beyond the initial
checkout. The other workflows in this directory are left implicit
because they need write scopes that a maintainer is better placed
to declare.

Motivation: CVE-2025-30066 (March 2025 tj-actions/changed-files
compromise) exfiltrated GITHUB_TOKEN from workflow logs. Per-workflow
caps bound runtime authority irrespective of repo or org default,
give drift protection if the default ever widens, and are credited
per-file by the OpenSSF Scorecard Token-Permissions check.

YAML validated locally with yaml.safe_load.

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
2026-06-30 16:47:20 -07:00
dependabot[bot]
5f54b5be28
Bump actions/checkout from 6 to 7 (#3609)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 22:26:08 +00:00
Esun Kim
257ca0f8d0
Removed //pythons from windows/bazel (#3476) 2026-02-12 13:36:39 -08:00
Esun Kim
5b1f1007d0
Simplfied (#3475) 2026-02-12 13:25:47 -08:00
Esun Kim
13cabf14a0
One more fix for Windows Bazel (#3474) 2026-02-12 13:06:24 -08:00
Esun Kim
49126dfa28
Another windows fix (#3473) 2026-02-12 11:36:06 -08:00
Esun Kim
0349d05e45
Hmm (#3472) 2026-02-12 11:19:58 -08:00
Esun Kim
626c337c8e
Fixed again (#3471) 2026-02-12 11:04:57 -08:00
Esun Kim
9759b03620
Fix the test (#3469) 2026-02-12 10:56:21 -08:00
Esun Kim
3c27730240
Ignore non-zero exit code for bazel query in windows tests (#3468) 2026-02-12 10:39:34 -08:00
Esun Kim
088df4ca7f
Let's be picky on Windows Bazel (#3465) 2026-02-12 10:20:47 -08:00
Esun Kim
e16b58697d
More windows (#3459) 2026-02-12 08:44:10 -08:00
Esun Kim
df1992c680
Windows tmp (#3457) 2026-02-11 21:41:11 -08:00
Esun Kim
ca24d40fc7
[CI] Windows .bazelrc (#3456)
* bazelrc startup

* Windows Bazel
2026-02-11 20:52:38 -08:00
Esun Kim
3210fee460
symlinks (#3454) 2026-02-11 20:06:01 -08:00
Esun Kim
8ae46c56fb
[CI] Windows CI (#3453)
* Test bazel cache with hosted

* Windows...
2026-02-11 18:01:27 -08:00
Esun Kim
eb51847198
Test bazel cache with hosted (#3452) 2026-02-11 16:26:11 -08:00
Esun Kim
aa40ee75fb
CI has 1 hour timeout (#3451) 2026-02-11 16:07:28 -08:00
Esun Kim
0e6f7b32a0
More (#3445) 2026-02-10 15:19:03 -08:00
Esun Kim
9bf8b1885b
[CI] Docker 0.6.7 (#3441)
* git config --system --add safe.directory

* 0.6.7
2026-02-10 13:22:40 -08:00
Esun Kim
a45021ad30
[CI] Docker 66 (#3437)
* Docker 0.6.6.

* Updated docker images to 0.6.6
2026-02-10 10:50:54 -08:00
Esun Kim
6ce10eed9a
Windows... (#3411) 2026-02-06 09:54:42 -08:00
Esun Kim
4c4b83b454
SImplified (#3410) 2026-02-06 09:49:08 -08:00
Esun Kim
0d2a6041df
Real work (#3409) 2026-02-06 09:28:54 -08:00
Esun Kim
b17b400ee3
Fix (#3408) 2026-02-06 08:04:42 -08:00
Esun Kim
56e3983f3e
Oops (#3407) 2026-02-06 08:01:17 -08:00
Esun Kim
88c6d93720
Added test job (#3406) 2026-02-06 07:57:13 -08:00