 dependabot[bot]
|
96306ef273
|
chore(deps): bump the actions group with 2 updates
Bumps the actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.37.9 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-10-01 21:21:50 +00:00 |
|
|
Evan
|
0025e79b45
|
chore(ci): run CodeQL only on nightly schedule
Run CodeQL daily at 00:00 Asia/Tokyo and remove all other workflow triggers.
|
2026-09-07 17:55:09 +09:00 |
|
|
Evan Hu
|
5b50503252
|
fix(ci): avoid duplicate CodeQL scans on pushes
|
2026-09-07 00:59:42 +09:00 |
|
|
Evan Hu
|
8fa00f5576
|
chore(ci): 把工作流同步到 main
release.yml 是从 main 运行的，branch-guard 也按 PR 的 base 分支加载工作流定义。两者只合进 develop 时都不生效：main 上的 release-please 仍会把版本 PR 开到默认分支 develop，而提到 main 的 PR 根本不会触发拦截。
|
2026-09-06 22:51:28 +09:00 |
|
|
Evan
|
9b55abdc89
|
ci: 补齐仓库验证与自动安全维护 (#166)
* ci(automation): 补齐持续集成与开源安全检查
* ci(automation): 将发布 PR 的质量门禁纳入手动 CI
|
2026-09-06 10:22:41 +09:00 |
|