Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

bump used actions versions #192

Merged
merged 7 commits into from
Mar 31, 2024
Merged

bump used actions versions #192

merged 7 commits into from
Mar 31, 2024

Conversation

UpcraftLP
Copy link
Contributor

@UpcraftLP UpcraftLP commented Mar 31, 2024 •
edited
Loading

  • bump used actions versions
  • harden security by pinning third-party actions to specific commits to prevent supply chain attacks
  • add explicit setup-node step before building to enable caching and specify the nodeJS version
  • replace pnpm with npm
  • run npm ci instead of npm install to make builds more reproducible
  • add upload-artifact steps to publish workflows to be able to see exactly which files got uploaded to cloudflare

See preview on Cloudflare Pages: https://preview-192.quiltmc-org.pages.dev

@ix0rai ix0rai added the enhancement New feature or request label Mar 31, 2024
@ix0rai ix0rai merged commit d600633 into QuiltMC:main Mar 31, 2024
1 check passed
@UpcraftLP UpcraftLP deleted the update-actions branch March 31, 2024 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@UpcraftLP @ix0rai