summaryrefslogtreecommitdiff
path: root/.github
AgeCommit message (Collapse)Author
2023-02-28Also ignore dismissed CodeQL alerts at tests and URI libraryHiroshi SHIBATA
2023-02-28Bump ruby/setup-ruby from 1.138.0 to 1.139.0dependabot[bot]
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.138.0 to 1.139.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Commits](https://github.com/ruby/setup-ruby/compare/d3c9825d67b0d8720afdfdde5af56c79fdb38d16...92aece5fc9c784ab66851c1e702b1bd5885a51f2) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7400
2023-02-28Ignore rb/overly-large-range on URIHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7399
2023-02-28Enable only master branch for CodeQL push triggerHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7399
2023-02-28Run CodeQL each PRs againHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7399
2023-02-28Do not upload sarif file as artifactHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7398
2023-02-28Do not OSS scorecards check each pushHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7398
2023-02-27[StepSecurity] ci: Harden GitHub ActionsStepSecurity Bot
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Notes: Merged: https://github.com/ruby/ruby/pull/7390
2023-02-27Ignore test case for Kernel and IO methodsHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7387
2023-02-27Rename job and workflow namesHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7388
2023-02-27Use matrix strategies each languageHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7388
2023-02-27Merge codeql-config into codeql-analysisHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7388
2023-02-27Bump github/codeql-action from 2.2.4 to 2.2.5dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.4 to 2.2.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/17573ee1cc1b9d061760f3a006fc4aac4f944fd5...32dc499307d133bb5085bae78498c0ac2cf762d5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7386
2023-02-22Bump actions/cache from 3.2.5 to 3.2.6dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.5 to 3.2.6. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/6998d139ddd3e68c71e9e398d8e40b71a2f39812...69d9d449aced6a2ede0bc19182fadc3a0a42d2b0) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7354
2023-02-17Bump lewagon/wait-on-check-action from 1.2.0 to 1.3.1dependabot[bot]
Bumps [lewagon/wait-on-check-action](https://github.com/lewagon/wait-on-check-action) from 1.2.0 to 1.3.1. - [Release notes](https://github.com/lewagon/wait-on-check-action/releases) - [Commits](https://github.com/lewagon/wait-on-check-action/compare/v1.2.0...v1.3.1) --- updated-dependencies: - dependency-name: lewagon/wait-on-check-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7333
2023-02-16Bump actions/cache from 3.2.4 to 3.2.5dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.4 to 3.2.5. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/627f0f41f6904a5b1efbaed9f96d9eb58e92e920...6998d139ddd3e68c71e9e398d8e40b71a2f39812) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7318
2023-02-16Bump github/codeql-action from 2.2.1 to 2.2.4dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.1 to 2.2.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3ebbd71c74ef574dbc558c82f70e52732c8b44fe...17573ee1cc1b9d061760f3a006fc4aac4f944fd5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7317
2023-02-16Bump ruby/setup-ruby from 1.134.0 to 1.138.0dependabot[bot]
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.134.0 to 1.138.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Commits](https://github.com/ruby/setup-ruby/compare/ee26e27437bde475b19a6bf8cb73c9fa658876a2...d3c9825d67b0d8720afdfdde5af56c79fdb38d16) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7319
2023-02-16check-regexp only works with job name, not workflow nameHiroshi SHIBATA
2023-02-16Auto-merge feature for dependabot PRs (#7300)Hiroshi SHIBATA
* Automerge for dependabot update * change update period with daily, we can merge it automatically when `make check` of Ubuntu was passed * Use rebase instead of merge commit * check all Ubuntu jobs Notes: Merged-By: hsbt <hsbt@ruby-lang.org>
2023-02-03CI: Pass -O2 for annocheckAlan Wu
Because `optflags` is pasted into the invocation line after `CC`, we were building with -O1 unintentionally. You can see this in the configuration summary: https://github.com/ruby/ruby/actions/runs/3933391169/jobs/6727044423#step:9:753 The check actually fails with -O2. To make it pass, upstream suggest that we use the annocheck GCC plugin. Since it requires building from source as the debian package for it isn't ready yet, punt on it for now and use `--skip-gaps`. Co-authored-by: Jun Aruga <jaruga@redhat.com> Notes: Merged: https://github.com/ruby/ruby/pull/7132
2023-02-01Bump ruby/setup-ruby from 1.133.0 to 1.134.0dependabot[bot]
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.133.0 to 1.134.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Commits](https://github.com/ruby/setup-ruby/compare/09c10210cc6e998d842ce8433cd9d245933cd797...ee26e27437bde475b19a6bf8cb73c9fa658876a2) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7219
2023-02-01Bump actions/cache from 3.2.2 to 3.2.4dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.2 to 3.2.4. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/4723a57e26efda3a62cbde1812113b730952852d...627f0f41f6904a5b1efbaed9f96d9eb58e92e920) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7218
2023-02-01Bump github/codeql-action from 2.1.37 to 2.2.1dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.37 to 2.2.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/959cbb7472c4d4ad70cdfe6f4976053fe48ab394...3ebbd71c74ef574dbc558c82f70e52732c8b44fe) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7217
2023-02-01Bump actions/upload-artifact from 3.1.1 to 3.1.2dependabot[bot]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.1 to 3.1.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/83fd05a356d7e2593de66fc9913b3002723633cb...0b7f8abb1508181956e8e162db84b466c27e18ce) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7216
2023-02-01Bump actions/checkout from 3.2.0 to 3.3.0dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/755da8c3cf115ac066823e79a1e1788f8940201b...ac593985615ec2ede58e132d2e21d2b1cbd6127c) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7215
2023-01-31Disable broken last_files_match_only for nowTakashi Kokubun
2023-01-31Test VM_CHECK_MODE on GitHub Actions (#7204)Takashi Kokubun
It's disabled in compilers.yml, but it's nice to test CHECK_CANAY on GitHub Actions as well. Notes: Merged-By: k0kubun <takashikkbn@gmail.com>
2023-01-30Fix a broken matrix (#7207)Takashi Kokubun
$arch and $configure seem to be just ignored in #7205. Notes: Merged-By: k0kubun <takashikkbn@gmail.com>
2023-01-30Use matrix.entry for the Ubuntu workflow (#7205)Takashi Kokubun
This seems easier to understand. Co-authored-by: Nobuyoshi Nakada <nobu@ruby-lang.org> Notes: Merged-By: k0kubun <takashikkbn@gmail.com>
2023-01-18YJIT: Set RUST_BACKTRACE=1 on YJIT GitHub Actions (#7152)Takashi Kokubun
Notes: Merged-By: k0kubun <takashikkbn@gmail.com>
2023-01-13[DOC] Extract tool/update-NEWS-gemlist.rbNobuyoshi Nakada
Notes: Merged: https://github.com/ruby/ruby/pull/7104
2023-01-12Enable `clippy` checks for yjit in CI (#7093)Ian Ker-Seymer
* Add job to check clippy lints in CI * Address all remaining clippy lints * Check lints on arm64 as well * Apply latest clippy lints * Do not exit 0 on clippy warnings Notes: Merged-By: maximecb <maximecb@ruby-lang.org>
2023-01-12enhance build matrix卜部昌平
Notes: Merged: https://github.com/ruby/ruby/pull/7101
2023-01-12Strip trailing spaces [ci skip]Nobuyoshi Nakada
2023-01-09Remove no longer used environment variable [ci skip]Nobuyoshi Nakada
2023-01-06Pass options for extensions via `CONFIGURE_ARGS`Nobuyoshi Nakada
Notes: Merged: https://github.com/ruby/ruby/pull/7076
2023-01-05Skip reviews for cruby_bindings-only PRs [ci skip] (#7004)Takashi Kokubun
Notes: Merged-By: maximecb <maximecb@ruby-lang.org>
2023-01-04Pin octokit/request-action@v2.1.7Hiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/7060
2023-01-04Bump ruby/setup-ruby from 1.128.0 to 1.133.0dependabot[bot]
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.128.0 to 1.133.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Commits](https://github.com/ruby/setup-ruby/compare/4b2d1d631efa087f8896c15a0c6023dc2f483198...09c10210cc6e998d842ce8433cd9d245933cd797) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7047
2023-01-03Bump actions/cache from 3.2.0 to 3.2.2dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.0 to 3.2.2. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/c17f4bf4666a8001b1a45c09eb7a485c41aa64c3...4723a57e26efda3a62cbde1812113b730952852d) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7049
2022-12-24MJIT: Cancel all on disastrous situations (#7019)Takashi Kokubun
I noticed this while running test_yjit with --mjit-call-threshold=1, which redefines `Integer#<`. When Ruby is monkey-patched, MJIT itself could be broken. Similarly, Ruby scripts could break MJIT in many different ways. I prepared the same set of hooks as YJIT so that we could possibly override it and disable it on those moments. Every constant under RubyVM::MJIT is private and thus it's an unsupported behavior though. Notes: Merged-By: k0kubun <takashikkbn@gmail.com>
2022-12-23test-syntax-suggest is run by check nowNobuyoshi Nakada
Notes: Merged: https://github.com/ruby/ruby/pull/7010
2022-12-23Bump actions/checkout from 3.1.0 to 3.2.0dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8...755da8c3cf115ac066823e79a1e1788f8940201b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7003
2022-12-23Bump actions/cache from 3.0.11 to 3.2.0dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.11 to 3.2.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7...c17f4bf4666a8001b1a45c09eb7a485c41aa64c3) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7000
2022-12-23Bump octokit/request-actiondependabot[bot]
Bumps [octokit/request-action](https://github.com/octokit/request-action) from 52ce92ce3185e00e2425f043c3e9509121929aea to 8cd8f5d6738d122de9213dc5cf87e116c40f5fae. - [Release notes](https://github.com/octokit/request-action/releases) - [Commits](https://github.com/octokit/request-action/compare/52ce92ce3185e00e2425f043c3e9509121929aea...8cd8f5d6738d122de9213dc5cf87e116c40f5fae) --- updated-dependencies: - dependency-name: octokit/request-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/6997
2022-12-23Bump github/codeql-action from 2.1.35 to 2.1.37dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.35 to 2.1.37. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b2a92eb56d8cb930006a1c6ed86b0782dd8a4297...959cbb7472c4d4ad70cdfe6f4976053fe48ab394) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7001
2022-12-23Bump ruby/setup-ruby from 1.126.0 to 1.128.0dependabot[bot]
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.126.0 to 1.128.0. - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Commits](https://github.com/ruby/setup-ruby/compare/c7079efafd956afb5d823e8999c2506e1053aefa...4b2d1d631efa087f8896c15a0c6023dc2f483198) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/6999
2022-12-22Check `added` for the second sub! properlyTakashi Kokubun
Even if the first sub! modifies `news`, when `added` is empty, it always ended up skipping `File.write("NEWS.md", news)` because of the `next`. This commit fixes the problem.
2022-12-23Bump ossf/scorecard-action from 2.0.6 to 2.1.2dependabot[bot]
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.6 to 2.1.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/99c53751e09b9529366343771cc321ec74e9bd3d...e38b1902ae4f44df626f11ba0734b14fb91f8f86) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/6998