Commit Graph
530 Commits
Author SHA1 Message Date
James Cole 6896abdf8d Merge branch 'main' into develop 2026-07-30 05:08:47 +02:00
James Cole 3b62edeea6 Set timezone to Europe/Amsterdam in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-07-30 05:02:40 +02:00
James Cole 180ea4d7fc Merge branch 'main' into develop 2026-07-16 06:55:33 +02:00
James Cole cdf1721e1d Change workflow a little. 2026-07-16 06:55:26 +02:00
kobihikri b098918f20 ci: pin github-action-get-latest-release to a full commit SHA
issues-reply-old-versions.yml passes GITHUB_TOKEN (issues:write, pull-requests:
write) to pozetroninc/github-action-get-latest-release via the mutable @master
branch of a third-party personal repo, in two steps. Pin to the commit @master
resolves to so the code that runs with the token is fixed. Behaviour unchanged.
2026-07-14 15:05:08 +03:00
James Cole a0d70228bc Fix quick build. 2026-07-11 15:52:15 +02:00
James Cole 8bc736fa01 Fix more steps. 2026-07-11 15:28:27 +02:00
James Cole f44bf65faf Fix var 2026-07-11 15:25:22 +02:00
James Cole 89e961319d Another attempt. 2026-07-11 15:23:28 +02:00
James Cole c32ebb1691 Fix workflow job. 2026-07-11 15:20:58 +02:00
James Cole ec003f4398 Better step skip 2026-07-11 15:16:03 +02:00
James Cole bd5a8f3745 Use "if"-statement to skip step. 2026-07-11 15:14:05 +02:00
James Cole 37552dbdba Workflow edits. 2026-07-10 22:41:15 +02:00
James Cole e84bff6c51 Try to speed up some steps. 2026-07-10 22:34:20 +02:00
James Cole d8f95e2e37 Also build v1 2026-07-09 20:04:33 +02:00
James Cole 6ab228bd0e Still need to build v1. 2026-07-09 20:03:19 +02:00
James Cole def641ad36 Committed to the wrong branch, damn. 2026-07-09 19:51:52 +02:00
James Cole 81ab6a576c Add step 2026-07-09 19:34:54 +02:00
James Cole 0211347d9a Clean up for v3. 2026-07-09 19:30:50 +02:00
James Cole b4dcbc2d94 Expand security policy 2026-07-04 06:29:10 +02:00
James Cole b48a40f1e2 Update pr-reply-no-disclosure.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-07-03 05:51:49 +02:00
James Cole 1b8bb452c3 Enhance PR reply workflow to include github-actions check
Added check for 'github-actions' author to prevent processing.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-07-03 05:48:05 +02:00
James Cole 8f71ff061d Fix workflow. 2026-06-30 19:20:24 +02:00
James Cole 1136eb8542 Update security.md to specify SSRF and DNS issues
Clarified security advisory guidelines regarding SSRF and DNS/hostname issues.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-30 18:42:08 +02:00
dependabot[bot] 999e52c857 Bump actions/checkout from 6 to 7
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 03:52:53 +00:00
James Cole ea51e47a66 Update release.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 05:44:41 +02:00
James Cole d2d94bdc38 Add JSON generation step for v3 in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 05:17:08 +02:00
James Cole 91ab6ec55b Fix branch checkout logic in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 05:01:21 +02:00
James Cole 4229196713 Fix branch checkout logic in release workflow
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 04:56:37 +02:00
James Cole 515522cbb1 Update release.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-06-19 04:53:23 +02:00
James Cole 66af080b09 Update lock-threads action to use dessant version
Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-28 05:10:49 +02:00
James Cole 2c14a605e4 Remove AI assistance disclosure comments
Removed AI assistance disclosure comments from the workflow.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-21 12:32:32 +02:00
James Cole f00852aa6a Merge branch 'main' into develop 2026-05-21 06:22:28 +02:00
James Cole 195fb6cdb7 Update pr-reply-no-disclosure.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-21 06:07:37 +02:00
James Cole 8b0f790a56 Merge branch 'main' into develop 2026-05-20 20:18:10 +02:00
James Cole b70ed32952 Merge pull request #12271 from alanturing881/fix/stored-xss-ale-piggy-name
Fix stored XSS in audit log view via piggy bank name (ale.twig)
2026-05-20 20:16:16 +02:00
James Cole 9e511c822e Update pr-reply-no-disclosure.yml
Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-20 20:12:40 +02:00
James Cole ec1dfca2b5 Enhance PR workflow to check for author
Added logic to check for the author of the pull request.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-19 08:15:40 +02:00
James Cole fe0e8796ca Merge branch 'main' into develop 2026-05-17 04:50:57 +02:00
James Cole e83c5b9f86 New workflow. 2026-05-17 04:50:34 +02:00
James Cole 9558f05947 Merge branch 'main' into develop 2026-05-17 04:29:39 +02:00
James Cole 9436eeacaf Update warning about AI-generated security advisories
Clarified consequences of reporting AI-generated security advisories.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-17 03:44:01 +02:00
James Cole e059753c43 Merge branch 'main' into develop 2026-05-16 20:39:12 +02:00
James Cole 2a68c48e2a Update security reporting guidelines in security.md
Clarified instructions for reporting false security issues.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 20:05:44 +02:00
James Cole c394034876 Clarify AI hallucinations in security reporting
Reworded the third point to clarify AI hallucinations in security issues.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 20:05:20 +02:00
James Cole 7bd91048ea Update security.md with reporting guidelines
Clarified reporting guidelines for security issues to prevent false reports.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 20:03:49 +02:00
James Cole d64bca7700 Merge branch 'main' into develop 2026-05-16 19:54:22 +02:00
James Cole 7d768cfa23 Add AI-generated security advisories section
Added a section regarding AI-generated security advisories to clarify reporting policies and potential consequences.

Signed-off-by: James Cole <james@firefly-iii.org>
2026-05-16 19:52:56 +02:00
James Cole fd50fbf193 Merge branch 'main' into develop 2026-05-12 18:48:04 +02:00
dependabot[bot] 8cf8e91448 Bump actions/dependency-review-action from 4 to 5
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-11 03:56:03 +00:00