Commit graph

71 commits

Author SHA1 Message Date
naveen a4ac0438a2 chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-07-03 00:31:05 +00:00
Eric Huss 65cc01075e Clear disk space on CI. 2022-06-02 17:55:45 -07:00
David Tolnay 30b26f2f7e
Update GitHub Actions actions/checkout@v2 to v3
The v2 implementation uses Node 12, which is end-of-life on April 30, 2022.
See https://nodejs.org/en/about/releases/. Update to v3, which is based on
Node 16 whose support lasts until April 30, 2024.
2022-04-30 13:46:35 -07:00
Weihang Lo 275b0c68d4
CI: force using argfile to test againg cargo fix 2022-04-10 22:40:26 +08:00
Eliaz Bobadilla 095f403f3e tools: update checkout action on CI
https://github.com/actions/checkout\#whats-new
2022-03-30 12:11:50 -05:00
Eric Huss 20017a249c Add a notice about review capacity. 2022-03-24 14:18:42 -07:00
Alex Crichton 959fcbc188 Disable dependabot
I don't think this has ever actually sent a meaningful version bump PR
we weren't already aware of, so unless someone else wants to be in
charge of these I'm going to go ahead and disable dependabot.
2022-03-01 09:53:20 -08:00
Caleb Cartwright 98edf2854b
ci: use new cargo fmt option 2022-01-13 17:57:25 -06:00
Josh Triplett c1a5a4c6b2 Make bors ignore the PR template so it doesn't end up in merge messages 2022-01-06 12:24:12 -08:00
Weihang Lo 3d9d52f358
Tweak wordings for PR template
Co-authored-by: Ruby Lazuli <general@patchmixolydic.com>
2022-01-01 15:30:41 +08:00
Weihang Lo e0d02755a3
Move section titles into comment 2021-12-22 01:45:57 +08:00
Weihang Lo 0926c3b9c4
The first version of pull request template
We're trying to extract information out off the head of contributors.
Hope this help the review process more friendly for everyone.
2021-12-19 17:44:36 +08:00
Weihang Lo 5e5b1312ae
Mention forum and zulip in feature-request issue template 2021-12-16 18:53:06 +08:00
Weihang Lo a2ae9915bc
Enhance issue template config 2021-12-16 14:47:33 +08:00
Alex Crichton cab1e3566b Fix CI testing 2021-10-22 13:30:46 -07:00
Alex Crichton ac69b05500 Update stable rust in the docs CI builder 2021-10-22 10:33:46 -07:00
bors c8b38af5d0 Auto merge of #9955 - ehuss:benchsuite, r=Eh2406
Add the start of a basic benchmarking suite.

This adds the start of a basic benchmarking suite for cargo.  This is fairly rough, but I figure it will change and evolve over time based on what we decide to add and how we use it.

There is some documentation in the `benches/README.md` file which gives an overview of what is here and how to use it.

Closes #9935
2021-10-12 21:59:48 +00:00
Eric Huss e4da5b2e3c Add the start of a basic benchmarking suite. 2021-10-12 13:23:56 -07:00
Eric Huss 0008f68f4f Use forms for issue templates. 2021-10-11 13:56:18 -07:00
Eric Huss 9f5da7c01b Add --verbose to bug report template. 2021-10-11 11:58:27 -07:00
Eric Huss 90b2ef02d1 Add fetch smoke test. 2021-09-18 18:10:16 -07:00
Eric Huss ad328f44c6 Bump mdbook version for contrib guide. 2021-06-02 15:41:47 -07:00
Eric Huss 65ca4e0d1e Add temporary fix for rustup on windows in CI. 2021-05-18 13:33:35 -07:00
dependabot-preview[bot] 55f7d93e88
Upgrade to GitHub-native Dependabot 2021-04-28 21:38:01 +00:00
Eric Huss 888100352a Move ProcessBuilder to cargo-util. 2021-03-20 15:19:03 -07:00
Eric Huss 78839fab47 Minor update to tracking issue template. 2021-01-23 07:44:46 -08:00
Eric Huss 352f828903 Update mdbook 2021-01-04 07:28:26 -08:00
Eric Huss cc6df1d7a5 Implement credential-process. 2020-12-02 19:09:54 -08:00
Eric Huss d1e44819a5 Update deprecated GitHub add-path in workflows. 2020-10-08 09:17:12 -07:00
Eric Huss 4d40ef4ef4 Add contributor guide. 2020-09-18 14:01:51 -07:00
Eric Huss 1ee38a326e Try to fix CI for semver-check. 2020-08-10 11:33:42 -07:00
Eric Huss fd6a84aa83 Add chapters on dependency resolution and SemVer compatibility. 2020-08-10 11:00:58 -07:00
Eric Huss 3134eef059 Docs, CI, and tools for building man pages. 2020-08-01 11:14:00 -07:00
Eric Huss 7b241eaa9b Update features set in CI. 2020-07-22 20:55:47 -07:00
Alex Crichton 1ceefa5c47 Switch to github actions 2020-07-15 07:44:50 -07:00
bors 0d1f1bbeab Auto merge of #6463 - dwijnand:rip-stale-bot, r=alexcrichton
Remove Stale bot's configuration

We couldn't get stale bot to operate as we'd like (poke up N
older-then-X-period tickets a day) and therefore we're tearing it down.

We've chosen to keep the "stale" label, so tickets closed by the bot
may be found with that label.

Closes #6035
2018-12-19 14:45:14 +00:00
Dale Wijnand d52b3f8faf
Add labels to issue templates
Make use of https://blog.github.com/changelog/2018-12-05-issue-template-automation-improvements/
2018-12-19 12:03:32 +00:00
Dale Wijnand 047f8ab3a2
Remove Stale bot's configuration
We couldn't get stale bot to operate as we'd like (poke up N
older-then-X-period tickets a day) and therefore we're tearing it down.

We've chosen to keep the "stale" label, so tickets closed by the bot
may be found with that label.
2018-12-19 11:48:33 +00:00
Dale Wijnand f53b2f50ce
More consistency in comment format 2018-10-17 21:38:26 +01:00
Dale Wijnand ed8ffcba8f
Trim back to just cargo version 2018-10-11 08:50:34 +01:00
Dale Wijnand 8d2fee9fec
Steer the feature request author to describe the underlying problem first 2018-10-11 08:16:27 +01:00
Dale Wijnand 6bbdeb4ad9
Problem before Steps 2018-10-11 08:14:39 +01:00
Dale Wijnand 90160977b6
Don't explain issue titles to people 2018-10-11 08:14:19 +01:00
Dale Wijnand 77c43f2186
Trim back the issue templates. 2018-10-10 22:07:05 +01:00
Dale Wijnand 29eb2e8eb6
Just drop the part about duplicate issues
GitHub does a prompt thing on the right based on issue description, so
perhaps that's good enough.  This way we avoid sounding too aggressive.
2018-10-10 21:56:16 +01:00
Dale Wijnand e14517d562
Adapt the issue templates
Adapt to feedback comments, and steal (heavily) from the templates in rust-clique/human-panic.
2018-10-10 09:26:31 +01:00
Dale Wijnand 62c7a87118
Make issue templates work for Cargo 2018-10-06 17:55:03 +01:00
Dale Wijnand 5a51d3c1be Introduce issue templates
These are GitHub's default "Bug report" and "Feature request" template.  We can modify them as we deem appropriate.
2018-10-06 17:44:48 +01:00
Dale Wijnand 49e9e4ab01
Tweak stale bot's wording to emphasis summary giving over closing 2018-09-20 10:03:19 +01:00
Dale Wijnand 657d5e54dc
Bump stale bot daysUntilStale to 3 yrs 2 months
Currently that translates to ~2015-07-20, of which there are 11 issues:

https://github.com/rust-lang/cargo/issues?q=is%3Aopen+sort%3Aupdated-asc+updated%3A%3C2015-07-20
2018-09-20 09:48:29 +01:00