oh-my-zsh

Author	SHA1	Message	Date
dependabot[bot]	c53cfb2de4	chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#13689 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	1708d84b70	chore(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 (#13687 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	beab0c0b3c	chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 (#13667 ) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.16.0 to 2.16.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](`fa2e9d605c...fe10465874`) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.16.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	cfad9e07f6	chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 (#13641 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	b42f22643a	chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 (#13636 ) Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.1 to 3.0.0. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](`29824e69f5...f8d387b68d`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 months ago
dependabot[bot]	2bc4538c36	chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 (#13620 ) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.15.0 to 2.15.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](`a90bcbc653...58077d3c7e`) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 months ago
dependabot[bot]	3fd2331ae8	chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0 (#13601 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 months ago
dependabot[bot]	116be8badd	chore(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2 (#13557 ) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.1 to 2.14.2. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](`e3f713f2d8...5ef0c079ce`) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 months ago
dependabot[bot]	9df4ea095f	chore(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 (#13547 ) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.14.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](`20cf305ff2...e3f713f2d8`) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.14.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 months ago
dependabot[bot]	1fee750c3b	chore(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 (#13483 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	6 months ago
dependabot[bot]	0ebeae78d0	chore(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#13470 ) Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.0 to 2.2.1. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](`7e473efe3c...29824e69f5`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	6 months ago
dependabot[bot]	3b66f643e4	chore(deps): bump step-security/harden-runner from 2.13.2 to 2.13.3 (#13471 ) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.2 to 2.13.3. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](`95d9a5deda...df199fb7be`) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	6 months ago
dependabot[bot]	beadd56dd7	chore(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 (#13440 ) Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.1.4 to 2.2.0. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](`6701853927...7e473efe3c`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	6 months ago
dependabot[bot]	18d0a63df8	chore(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 (#13414 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	7 months ago
Marc Cornellà	242e2faa51	ci: improve security in project.yml workflow (#13329 ) There is no inherent security vulnerability in the workflow, but there were certain practices that increased latent risk. In this commit, we: - Explicitly bind app token for each step that needs it, instead of setting it for all steps after "Store app token" - Refactor "classify" step, to not rely on files passed around, and instead uses only awk script. - Remove all instances of template injection within `run` scripts. There was nothing dangerous, but the practice is unsafe. - Sanitize all unwanted characters from PR plugin and theme names. References: W2M1-06 W2M1-07	8 months ago
StepSecurity Bot	7f3d8a34e2	ci: Harden GitHub Actions [StepSecurity] (#13318 )	9 months ago
Carlo Sala	5c804257ce	ci: use `actions/create-github-app-token` (#13233 )	10 months ago
Carlo Sala	544eb17e33	ci(project): use ohmyzsh's bot credentials	2 years ago
Marc Cornellà	1342459b15	ci: fix update of plugin or theme fields See [1] for the reference of value field (ProjectV2FieldValue type), and [2] for sample application code. [1] https://docs.github.com/en/graphql/reference/input-objects#projectv2fieldvalue [2] https://docs.github.com/en/enterprise-cloud@latest/issues/planning-and-tracking-with-projects/automating-your-project/automating-projects-using-actions#example-workflow-authenticating-with-a-github-app	4 years ago
Lennart Ochel	239e2f9fcd	ci: migrate to ProjectV2 GraphQL API (#11311 )	4 years ago
Alex	065f5ffc5a	ci: harden permissions for GitHub Workflows (#11174 ) * build: harden main.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden project.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * Update project.yml The permissions are not necessary, because a separate token is used `GITHUB_TOKEN: ${{ secrets.PROJECT_TOKEN }}`	4 years ago
Marc Cornellà	4d9e5ce9a7	ci(project): sort issues and PRs when reopened	4 years ago
Marc Cornellà	ebfd7cb219	ci: cancel current runs on new trigger	4 years ago
Marc Cornellà	b481955761	ci(project): fix .list files not found error	4 years ago
Marc Cornellà	0ca2e48ee8	ci(project): fix `gh pr view` call to use ohmyzsh repository	4 years ago
Marc Cornellà	63345c4e5d	ci: disable GitHub Actions on forks	4 years ago
Marc Cornellà	512839ef78	chore: simplify project GitHub Action	4 years ago
Marc Cornellà	9dd1dc49d9	chore: simplify `GITHUB_TOKEN` env in project GitHub Action	4 years ago
Marc Cornellà	121ee818a5	chore: I'm dumb af	4 years ago
Marc Cornellà	dd7f0f2211	chore: let's try again	4 years ago
Marc Cornellà	17c52ccfc9	chore: look ma no auth!	4 years ago
Marc Cornellà	861e7e24a3	chore: please work	4 years ago
Marc Cornellà	1d35b30461	chore: fix auth in Project tracking Action	4 years ago
Marc Cornellà	95a66532d1	chore: use GITHUB_TOKEN auth for Project Beta GitHub Action	4 years ago
Marc Cornellà	d1c07f9569	chore: add Projects Beta GitHub Action	4 years ago

35 Commits (c53cfb2de4be426d9d0c593d45754cdcc3eb50b0)