Ross Goldberg
3ac67a66b5
Select Xcode 16.2 in GitHub workflows.
...
Improve GitHub workflow step names.
Partial #713
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2025-01-15 15:07:23 -05:00
Ross Goldberg
75251ea2e2
Prepend branch name in version name in certain conditions.
...
Resolve #705
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2025-01-05 08:34:31 -05:00
Ross Goldberg
37a3c2992d
Only run codeql.yml
for the main
branch.
...
Resolve #701
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2025-01-03 21:24:31 -05:00
Ross Goldberg
893edacb1e
Improve 01-bug-report.yml
.
...
Partial #701
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2025-01-03 21:24:31 -05:00
Ross Goldberg
dc7d2a1d38
Improve Bug Report form.
...
Resolve #699
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2025-01-03 10:50:14 -05:00
Ross Goldberg
cfe7ced259
Add config
command.
...
Resolve #666
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2025-01-03 09:54:45 -05:00
Ross Goldberg
1f7e391316
Improve .github/workflows/codeql.yml
.
...
Allow manual runs.
Run on all pushes & pull requests.
Use `runs-on: macos-15`.
Analyze GitHub workflows.
Don't analyze `ruby` or `c-cpp`.
Perform `security-and-quality` queries.
Remove parentheses from job name.
Remove unnecessary settings.
Remove unnecessary comments.
Remove unnecessary quotes.
Fix lint spacing violations.
Use double quotes instead of single quotes.
Partial #645
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 10:52:14 -05:00
Ross Goldberg
ccdadbca8d
Scan for security vulnerabilities with GitHub CodeQL
...
Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.
Partial #645
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 10:37:33 -05:00
Ross Goldberg
d33b996c9b
Add Swift to dependabot.yml
.
...
Partial #590
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 09:02:39 -05:00
Ross Goldberg
ff82e2c0e5
Standardize release.yml
formatting.
...
Partial #590
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 09:01:50 -05:00
Ross Goldberg
3829a0baf3
Minimize permissions granted to github.token
.
...
Partial #590
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 09:01:50 -05:00
Ross Goldberg
44191ccb8e
Use correct label in dependabot.yml
.
...
Standardize `dependabot.yml` format.
Partial #590
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 09:01:45 -05:00
Ross Goldberg
8eb8f33d6d
Cleanup build-test.yml
Checkout step logs.
...
Partial #590
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 05:28:27 -05:00
Ross Goldberg
9db50fd688
No longer use Danger because our implementation was broken & it didn't do anything useful.
...
Partial #590
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-31 05:27:21 -05:00
Ross Goldberg
f777088ba4
Use Xcode 16.2 to build.
...
Partial #682
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-27 00:36:03 -05:00
Ross Goldberg
d6345fb6be
Use GitHub app installation access token instead of a personal access token.
...
Partial #682
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-27 00:36:02 -05:00
Ross Goldberg
080f7944c2
Fix prerelease argument for gh release create
in tag-pushed.yml
.
...
Partial #682
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-27 00:36:02 -05:00
Ross Goldberg
6010ea8f5d
Remove permissions
from tag-pushed.yml
.
...
Partial #682
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-27 00:36:01 -05:00
Ross Goldberg
dc72de494f
Improve bump.url
handling in release-published.yml
.
...
Partial #682
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-27 00:36:00 -05:00
Ross Goldberg
fbbd8bcdb4
Run danger.yml
on ubuntu-24.04.
...
Partial #682
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-27 00:35:59 -05:00
Ross Goldberg
82e28104c6
Removed unnecessary quoting.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-22 16:49:06 -05:00
Ross Goldberg
a3a00fc9be
Fix workflows.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-22 16:12:06 -05:00
Ross Goldberg
2b92c5db3d
Improve git fetching in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-21 12:16:55 -05:00
Ross Goldberg
fa018e7b3d
Include zsh options in GitHub workflows.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-21 11:35:42 -05:00
Ross Goldberg
b069658bc3
Cleanup actions/checkout@v4
step in danger.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-21 11:03:11 -05:00
Ross Goldberg
ac5856e7d5
Spacing in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 15:48:09 -05:00
Ross Goldberg
bbdf8f17dc
Use tag name & tag message in release title.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 15:48:05 -05:00
Ross Goldberg
567a330735
Fix tag verification steps in tag-pushed.yml
.
...
Avoid warning from checkout step.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:21 -05:00
Ross Goldberg
61e473e93c
Add HOMEBREW_GITHUB_API_TOKEN
environment variable to
🚰 Bump mas-cli/tap/mas formula
step in tag-pushed
job in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:21 -05:00
Ross Goldberg
f9ec6bb84f
Add GH_TOKEN
environment variable to tag-pushed
job in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:21 -05:00
Ross Goldberg
96243f29f8
Replace $(git rev-parse "${GITHUB_REF_NAME}")
with ${GITHUB_SHA}
in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:21 -05:00
Ross Goldberg
4f96d96d2d
Move DEFAULT_BRANCH_NAME
environment variable from top level to
🚰 Bump mas-cli/tap/mas formula
step.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:21 -05:00
Ross Goldberg
42ab8a579e
Inline single PRERELEASE
use in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:21 -05:00
Ross Goldberg
4fb49d92ed
Replace TAG_NAME
with GITHUB_REF_NAME
in tag-pushed.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:20 -05:00
Ross Goldberg
c43b1ba313
Don't call script/bootstrap
from tag-pushed.yml
as it isn't necessary for building.
...
Improve `script/bootstrap` documentation.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:20 -05:00
Ross Goldberg
0095832667
Rename release
workflow as pushed-tag
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:20 -05:00
Ross Goldberg
8994505fec
Improve script/package
:
...
Rename `mas.pkg` as `mas-${version}.pkg`.
Use `/usr/local/bin` for `--install-location` instead of having executable stored in `.pkg` under `mas_components.pkg/Payload/usr/local/bin`.
Do not output SHA-256 of `.pkg`.
Move `script/build …` earlier.
Rename variables & temporary folders to follow Apple's terminology.
Update comments.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:20 -05:00
Ross Goldberg
00a7c0270c
release.yml
: run iff a tag is pushed to the mas-cli/mas
repo.
...
Delete any tags that lack a valid signature.
Delete any version tags that are not on the main branch.
Create a draft GitHub Release iff the package installer builds properly.
Do not bump the `homebrew-core` `mas` formula.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:19 -05:00
Ross Goldberg
aa150fbd30
release.yml
: run job iff repo is mas-cli/mas
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:19 -05:00
Ross Goldberg
15053e6d2b
release.yml
: add & use PRERELEASE
workflow-level env var.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:19 -05:00
Ross Goldberg
7751dda90e
release.yml
: remove *_TOKEN
env vars to check if they're necessary.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:19 -05:00
Ross Goldberg
66826868ce
release.yml
: rename RELEASE_TAG
as TAG_NAME
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:19 -05:00
Ross Goldberg
a37847866c
Remove debug output & associated env vars from .github/workflows/release.yml
.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:19 -05:00
Ross Goldberg
c950af31de
GitHub Workflows: reorder workflow parts, improve step emojis, update comments & improve spacing.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:18 -05:00
Ross Goldberg
f4f5f18ec7
Add & use script/_setup_script
to configure all zsh scripts.
...
Update shebangs.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:18 -05:00
Ross Goldberg
5a29bb7b31
Switch scripts from bash to zsh.
...
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:17 -05:00
Ben Chatelain
b4452adcc0
🔥 Remove DRY_RUN var
2024-12-20 13:27:16 -05:00
Ross Goldberg
2f6873be6f
brew bundle no longer generates Brewfile.lock.json
.
...
Allow `script/bootstrap` to accept any arguments for `brew bundle install`.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:16 -05:00
Ross Goldberg
58fd1e1905
Improve script modularity:
...
`script/package` calls
`script/build --universal` instead of requiring the latter to be called before the former.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:14 -05:00
Ross Goldberg
b6613bb1ba
Update actions/checkout@v4
settings:
...
Should only release revisions that have version tags on them, so should only need a single commit.
`ref:` should default to the reference for the event, which should be `github.event.release.tag_name`, so shouldn't need to explicitly set it.
If any of these changes cause problems, will back them out.
Partial #638
Signed-off-by: Ross Goldberg <484615+rgoldberg@users.noreply.github.com>
2024-12-20 13:27:14 -05:00