Commit Graph
695 Commits
Author SHA1 Message Date
Michal Kinas fe2b3d85dd [ACS-12108] Introduce signed commits into ADF workflows (#12040) 2026-07-09 15:05:58 +02:00
dependabot[bot] 9c56712328 build(deps): bump the github-actions group across 2 directories with 7 updates (#12037)
Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` |
| [Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml](https://github.com/alfresco/alfresco-build-tools) | `18.13.0` | `18.15.1` |
| [Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment](https://github.com/alfresco/alfresco-build-tools) | `18.13.0` | `18.15.1` |
| [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) | `0.81.6` | `0.82.2` |

Bumps the github-actions group with 1 update in the /.github/actions/setup directory: [Alfresco/alfresco-build-tools/.github/actions/git-latest-tag](https://github.com/alfresco/alfresco-build-tools).


Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

Updates `github/codeql-action/autobuild` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

Updates `Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml` from 18.13.0 to 18.15.1
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/10cea6c0b390c4f8af21d9dc1670d581bd10319f...499eb5d58f3f82a4efa4eaedab26dbecff18328c)

Updates `Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment` from 18.13.0 to 18.15.1
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/10cea6c0b390c4f8af21d9dc1670d581bd10319f...499eb5d58f3f82a4efa4eaedab26dbecff18328c)

Updates `github/gh-aw-actions/setup` from 0.81.6 to 0.82.2
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/gh-aw-actions/compare/ba6380cc6e5be5d21677bebe04d52fb48e3abec7...3fac1cfa7a5a375a6a5eb9839178f6dad7adb60a)

Updates `Alfresco/alfresco-build-tools/.github/actions/git-latest-tag` from 18.13.0 to 18.15.1
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/10cea6c0b390c4f8af21d9dc1670d581bd10319f...499eb5d58f3f82a4efa4eaedab26dbecff18328c)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml
  dependency-version: 18.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment
  dependency-version: 18.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.82.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools/.github/actions/git-latest-tag
  dependency-version: 18.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 15:34:53 +02:00
Michal Kinas 4cd8648a05 Adjust release triggers to use cache-writable token (#12030) 2026-07-03 07:56:50 +02:00
Michal Kinas 5a30baad99 Release cache read/write fix (#12029) 2026-07-02 18:30:38 +02:00
Domenico Sibilio af0d1e4ead AAE-47093 Update Supply Chain Review GH AW to latest (#12025)
[skip ci]
2026-07-02 11:59:47 +02:00
dependabot[bot] 699f45e486 build(deps): bump actions/github-script (#11956)
Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/60a0d83039c74a4aee543508d2ffcb1c3799cdea...3a2844b7e9c422d3c10d287c895573f7108da1b3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:28:56 +01:00
dependabot[bot] 5123e80bd9 build(deps): bump actions/cache/restore (#12014)
Bumps [actions/cache/restore](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

---
updated-dependencies:
- dependency-name: actions/cache/restore
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:27:41 +01:00
dependabot[bot] 283a0ab18a build(deps): bump actions/cache/restore in /.github/actions/setup (#12016)
Bumps [actions/cache/restore](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

---
updated-dependencies:
- dependency-name: actions/cache/restore
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:27:17 +01:00
dependabot[bot] bab668033e build(deps): bump actions/cache/save in /.github/actions/save-nx-cache (#12015)
Bumps [actions/cache/save](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

---
updated-dependencies:
- dependency-name: actions/cache/save
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:12:30 +01:00
dependabot[bot] 1a50dad132 build(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#12002)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:11:49 +01:00
dependabot[bot] d0f9c3d5a4 build(deps): bump the github-actions group across 2 directories with 4 updates (#12013)
Bumps the github-actions group with 3 updates in the / directory: [Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml](https://github.com/alfresco/alfresco-build-tools), [Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment](https://github.com/alfresco/alfresco-build-tools) and [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions).
Bumps the github-actions group with 1 update in the /.github/actions/setup directory: [Alfresco/alfresco-build-tools/.github/actions/git-latest-tag](https://github.com/alfresco/alfresco-build-tools).


Updates `Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml` from 18.12.0 to 18.13.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1...10cea6c0b390c4f8af21d9dc1670d581bd10319f)

Updates `Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment` from 18.12.0 to 18.13.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1...10cea6c0b390c4f8af21d9dc1670d581bd10319f)

Updates `github/gh-aw-actions/setup` from 0.77.5 to 0.81.4
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/gh-aw-actions/compare/3ea13c02d765410340d533515cb31a7eef2baaf0...9fba95c4e1e3ce39704ccd39b440f6935715bc09)

Updates `Alfresco/alfresco-build-tools/.github/actions/git-latest-tag` from 18.12.0 to 18.13.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1...10cea6c0b390c4f8af21d9dc1670d581bd10319f)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml
  dependency-version: 18.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment
  dependency-version: 18.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.81.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools/.github/actions/git-latest-tag
  dependency-version: 18.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:11:17 +01:00
dependabot[bot] 2808988171 build(deps): bump actions/cache/save (#12017)
Bumps [actions/cache/save](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

---
updated-dependencies:
- dependency-name: actions/cache/save
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 11:10:47 +01:00
dependabot[bot] 2c3020c7fc build(deps): bump the github-actions group across 2 directories with 6 updates (#12001)
Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.36.0` | `4.36.2` |
| [crowdin/github-action](https://github.com/crowdin/github-action) | `2.16.2` | `2.16.3` |
| [hyland/github-actions-ensure-sha-pinned-actions](https://github.com/hyland/github-actions-ensure-sha-pinned-actions) | `2.0.0` | `2.0.1` |
| [Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml](https://github.com/alfresco/alfresco-build-tools) | `18.9.0` | `18.12.0` |
| [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) | `18.7.0` | `18.12.0` |

Bumps the github-actions group with 2 updates in the /.github/actions/setup directory: [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) and [pnpm/action-setup](https://github.com/pnpm/action-setup).


Updates `github/codeql-action` from 4.36.0 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

Updates `crowdin/github-action` from 2.16.2 to 2.16.3
- [Release notes](https://github.com/crowdin/github-action/releases)
- [Commits](https://github.com/crowdin/github-action/compare/8868a33591d21088edfc398968173a3b98d51706...52aa776766211d83d975df51f3b9c53c2f8ba35f)

Updates `hyland/github-actions-ensure-sha-pinned-actions` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/hyland/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](https://github.com/hyland/github-actions-ensure-sha-pinned-actions/compare/7d494b6b53e71f75194d74b4dd890a2266d060b5...7957efb76aba0eec7580a9c0392d3e5bec381359)

Updates `Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml` from 18.9.0 to 18.12.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/4e61fa01622e3f3a1898eb059d9a3af208897515...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1)

Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1)

Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1)

Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1)

Updates `pnpm/action-setup` from 6.0.8 to 6.0.9
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/0e279bb959325dab635dd2c09392533439d90093...0ebf47130e4866e96fce0953f49152a61190b271)

Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: crowdin/github-action
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: hyland/github-actions-ensure-sha-pinned-actions
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 14:35:07 +02:00
Domenico Sibilio bf5b3af285 AAE-47094 Add Stale PR Cleanup workflow (#11983)
[skip ci]
2026-06-12 11:13:03 +02:00
MichaelaandCursor ec04358796 AAE-46943 Rename git signing secret/vars to HXPS_GIT_* (#11978)
Align the Crowdin commit-signing secret and git identity variables with
the renamed org-level names (HXPS_GIT_COMMIT_SIGNING_PRIVATE_KEY,
HXPS_GIT_USERNAME, HXPS_GIT_EMAIL).

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-11 12:49:04 +00:00
Michaela 49a28b357c AAE-46943 Sign Crowdin translation PR commits with GPG (#11974)
* AAE-46943 Sign Crowdin translation PR commits with GPG

Add GPG signing and the service-account commit identity to the Crowdin
pull workflow so automated-translations-update commits satisfy the
"Require signed commits" branch protection rule.

* AAE-46943 Pass signing key secret through reusable Crowdin workflow

Declare SERVICE_ACCOUNT_SIGNING_KEY in workflow_call.secrets and pass it
from release.yml so commit signing also works when pull-from-crowdin is
invoked as a reusable workflow.
2026-06-11 11:55:13 +00:00
Domenico Sibilio c723e19b6d AAE-46971 Update Supply Chain Review GH AW to latest (#11972)
[skip ci]
2026-06-11 12:26:12 +02:00
dependabot[bot] a445569139 build(deps): bump pnpm/action-setup in /.github/actions/setup (#11965)
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4.3.0 to 6.0.8.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/b906affcce14559ad1aafd4ab0e942779e9f58b1...0e279bb959325dab635dd2c09392533439d90093)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 08:16:29 +01:00
Vito Albano 5ad3dca38d AAE-46684 fix release workflow eslint publish fix provenance (#11963)
* [AAE-46514] - Fix release workflow

* [AAE-46514] - Fix release workflow - devDependencies

* [AAE-46514] - Disabling provenance for Github packages as this is already given from the repo
2026-06-05 00:03:13 +01:00
Vito Albano a8eee9fe3a Improvements/aae 46684 fix release workflow fixed command (#11961)
* [AAE-46514] - Fix release workflow

* [AAE-46514] - Fix release workflow - devDependencies

* [AAE-46514] - Command parameters are wrong when setting now the options

* [AAE-46514] - It should call the script not the standard command
2026-06-04 21:16:11 +01:00
Vito Albano 0a7fa14d0f Improvements/aae 46684 fix release workflow ignore (#11960)
* [AAE-46514] - Fix release workflow

* [AAE-46514] - Fix release workflow - devDependencies

* [AAE-46514] - Ignore git checks on publish
2026-06-04 20:07:09 +01:00
Vito Albano 78661f11c5 [AAE-46514] - Migration to PNPM (#11926)
* [AAE-46514] - using by default ignore-scripts and have a trusted list for those who are trusted

* [AAE-46514] - Improved the checks to cover more cases

* [AAE-46514] - Fixed copilot comments

* [AAE-46514] - OTher fixes

* [AAE-46514] - Fixing other improvements and comments

* [AAE-46514] - npmrc should be versioned to enforce the audit

* [AAE-46514] - Improved code

* [AAE-46514] - Removed the check on CI as we have other tools

* [AAE-46514] - Improved check, updated descriptions, skip check on CI as there is already Sonar

* [AAE-46514] - Reduced functions in smaller pieces

* [AAE-46514] - Migrating to Pnpm to increase safety

* [ci:force] - Checking

* [ci:force] - Fixed complexity of the scripts

* [ci:force] - Fixed complexity of the scripts

* [ci:force] - Fixed wrong typing on yml

* [ci:force] - Fixed sonar comments and added correct version to sha pinned action

* [ci:force] - Fixed cache hit for npmn

* [ci:force] - Improved eslint plugin so it can be built with standard action

* [ci:force] - Improved eslint plugin so it can be built with standard action

* [ci:force] - Added minimatch

* [ci:force] - Fixing issues

* [ci:force] - Removed 'run' as it is not needed

* [ci:force] - Using audit in place of custom scripts

* [ci:force] - Fixed vulnerabilities and removed custom scripts in favor of audit --critical

* [ci:force] - Added minimum time for publishing to install

* [ci:force] - Address issue with too new packages

* [ci:force] - Address issue with too new packages
2026-06-04 18:38:22 +01:00
Domenico Sibilio faf9d3faac AAE-46388 Update Supply Chain Review GH AW to latest (#11957)
[skip ci]
2026-06-04 10:25:49 +02:00
Domenico Sibilio 5c8eb21ab3 AAE-46387 Standardize DependaBot config schedule/grouping (#11953)
[skip ci]
2026-06-03 15:58:53 +02:00
dependabot[bot] 5a20501577 build(deps): bump Alfresco/alfresco-build-tools (#11934)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 18.4.0 to 18.7.0.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/ed7779a4bda83d699c1acaf72922ef21636a3dc2...a6a8be7429080c132815d0482a55ae4fd28f15ba)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 08:39:49 +01:00
Domenico Sibilio 274ddb3098 AAE-46386 Set DependaBot cooldown for all ecosystems as 3d (#11947)
[skip ci]
2026-06-01 14:54:56 +02:00
Domenico Sibilio f602070f1e AAE-46388 Fix DependaBot config to ignore gh-aw-actions (#11946)
[skip ci]
2026-06-01 12:31:02 +02:00
Vito Albano d206d28f1c [AAE-32905] Fix commit messages commands aren't working (#11922)
* [ci:force] - Checking

* [AAE-32905] - Re enabled ci commands on commit messages

* [ci:force] - Checking
2026-06-01 09:47:45 +01:00
Domenico Sibilio e40fd2250e AAE-46388 Add Supply Chain Review agentic workflow (#11927)
[skip ci]
2026-05-29 15:55:51 +02:00
dependabot[bot] b69776012f build(deps): bump Alfresco/alfresco-build-tools (#11914)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 18.0.1 to 18.4.0.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/162d01f0dd3d9ead7526be3b046743fae5afb2cd...ed7779a4bda83d699c1acaf72922ef21636a3dc2)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 09:47:02 +01:00
dependabot[bot] b8fa940dc9 build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#11915)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 09:45:48 +01:00
dependabot[bot] 16202197f7 build(deps): bump Alfresco/alfresco-build-tools (#11889)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 17.7.0 to 18.0.1.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/9f51752cb7845dce8e8b13b866c127681f418bb3...162d01f0dd3d9ead7526be3b046743fae5afb2cd)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 11:38:37 +01:00
dependabot[bot] dbdcc3175b build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (#11890)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.35.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 11:38:14 +01:00
MichaelaandCursor e3430ae36e AAE-45695 Group @typescript-eslint/* packages in dependabot (#11880)
* [AAE-45695] Group @typescript-eslint/* packages in dependabot

@typescript-eslint/parser and @typescript-eslint/eslint-plugin must be
bumped together (matching versions) due to a peer-dependency between
them. Grouping all @typescript-eslint/* packages ensures Dependabot
updates them in lock-step instead of opening separate PRs that fail
npm ci with a peer-dep conflict.

Co-authored-by: Cursor <cursoragent@cursor.com>

* [ci:force] AAE-45695 Bump @typescript-eslint/parser and eslint-plugin to 8.59.3

Bump both packages together (peer-dep requires matching versions) to
unblock the Dependabot bump that was previously failing.

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-12 09:43:21 +00:00
dependabot[bot] 57ec1ab835 build(deps): bump Alfresco/alfresco-build-tools from 17.6.0 to 17.7.0 in /.github/actions/setup (#11876)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 17.6.0 to 17.7.0.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/8d76614b374e521d792b4a1c9827409960b66bae...9f51752cb7845dce8e8b13b866c127681f418bb3)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 17.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-12 07:54:41 +00:00
dependabot[bot] 53abaaf246 build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 (#11877)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.35.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...68bde559dea0fdcac2102bfdf6230c5f70eb485e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 14:23:28 +00:00
Denys Vuika 62fb51e910 Update CODEOWNERS 2026-05-07 15:30:50 +01:00
Ehsan Rezaei 9cdacf3ebf AAE-45312 Removing propagate job from release workflow (#11864)
* AAE-45312 Removing propagate job from release workflow

* AAE-45312 Removing from doc
2026-05-06 10:30:15 +00:00
Vito Albano 3a543d8a0a AAE-32905 Rework pr pipeline (#11853)
* [AAE-32905] - Improve ADF workflow

* [ci:force]

* [AAE-32905] - Improve cache use

* [AAE-32905] - Improve cache use

* [AAE-32905] - Improved workflows

* [AAE-32905] - Checking cache

* [AAE-32905] - Checking cache

* [AAE-32905] - Fix cli

* [AAE-32905] - Fix cache

* [AAE-32905] - Fix cache

* [AAE-32905] - Fix cache

* [AAE-32905] - improving workflow and adding some storybook tests

* [AAE-32905] - improving workflow and adding some storybook tests

* [AAE-32905] - Added more improvements

* [AAE-32905] - Added more improvements

* [AAE-32905] - bugfix

* [AAE-32905] - Added missing part to the cache

* [AAE-32905] - bugfix

* [AAE-32905] - fixed cache poisoning

* [AAE-32905] - timing jobs

* [AAE-32905] - chosen to build all together as it's more efficient

* [AAE-32905] - Fixed script injection issue
2026-05-05 13:16:36 +01:00
dependabot[bot] d7487e30bd build(deps): bump Alfresco/alfresco-build-tools (#11857)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 17.6.0 to 17.6.1.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/8d76614b374e521d792b4a1c9827409960b66bae...f95467b62527ce087c9a1b7e55c467061cf827a0)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 17.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 08:15:52 +01:00
dependabot[bot] b6d292df2b build(deps): bump Alfresco/alfresco-build-tools from 17.6.0 to 17.6.1 (#11858)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 17.6.0 to 17.6.1.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/8d76614b374e521d792b4a1c9827409960b66bae...f95467b62527ce087c9a1b7e55c467061cf827a0)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 17.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 08:15:31 +01:00
dependabot[bot] 992f4779fc build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 (#11859)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 08:14:08 +01:00
dependabot[bot] 67b4486b44 build(deps): bump Alfresco/alfresco-build-tools from 17.2.0 to 17.6.0 in /.github/actions/setup (#11840)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 17.2.0 to 17.6.0.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/c00625b5f30db226fb0634299effc4cd15fdd7bb...8d76614b374e521d792b4a1c9827409960b66bae)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 17.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 11:09:20 +02:00
dependabot[bot] a4f4f5eb47 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in /.github/actions/setup (#11841)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 11:09:00 +02:00
dependabot[bot] 02009108e9 build(deps): bump crowdin/github-action from 2.16.0 to 2.16.2 (#11842)
Bumps [crowdin/github-action](https://github.com/crowdin/github-action) from 2.16.0 to 2.16.2.
- [Release notes](https://github.com/crowdin/github-action/releases)
- [Commits](https://github.com/crowdin/github-action/compare/7ca9c452bfe9197d3bb7fa83a4d7e2b0c9ae835d...8868a33591d21088edfc398968173a3b98d51706)

---
updated-dependencies:
- dependency-name: crowdin/github-action
  dependency-version: 2.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 11:08:43 +02:00
dependabot[bot] e7c5e5371b build(deps): bump Alfresco/alfresco-build-tools from 17.2.0 to 17.6.0 (#11843)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 17.2.0 to 17.6.0.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/c00625b5f30db226fb0634299effc4cd15fdd7bb...8d76614b374e521d792b4a1c9827409960b66bae)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-version: 17.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 11:08:13 +02:00
dependabot[bot] 5a032945bc build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#11844)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 11:05:37 +02:00
dependabot[bot] 0dd3e454f5 build(deps): bump actions/cache from 5.0.4 to 5.0.5 in /.github/actions/download-node-modules-and-artifacts (#11820)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-20 14:32:15 +02:00
dependabot[bot] 025e3cf636 build(deps): bump Alfresco/alfresco-build-tools from 17.1.0 to 17.2.0 in /.github/actions/setup (#11821)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-20 14:32:01 +02:00
dependabot[bot] 07455c4217 build(deps): bump actions/cache from 5.0.4 to 5.0.5 in /.github/actions/upload-node-modules-and-artifacts (#11822)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-20 14:31:47 +02:00