James Cole
6896abdf8d
Merge branch 'main' into develop
2026-07-30 05:08:47 +02:00
James Cole
3b62edeea6
Set timezone to Europe/Amsterdam in release workflow
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-07-30 05:02:40 +02:00
James Cole
180ea4d7fc
Merge branch 'main' into develop
2026-07-16 06:55:33 +02:00
James Cole
cdf1721e1d
Change workflow a little.
2026-07-16 06:55:26 +02:00
kobihikri
b098918f20
ci: pin github-action-get-latest-release to a full commit SHA
...
issues-reply-old-versions.yml passes GITHUB_TOKEN (issues:write, pull-requests:
write) to pozetroninc/github-action-get-latest-release via the mutable @master
branch of a third-party personal repo, in two steps. Pin to the commit @master
resolves to so the code that runs with the token is fixed. Behaviour unchanged.
2026-07-14 15:05:08 +03:00
James Cole
a0d70228bc
Fix quick build.
2026-07-11 15:52:15 +02:00
James Cole
8bc736fa01
Fix more steps.
2026-07-11 15:28:27 +02:00
James Cole
f44bf65faf
Fix var
2026-07-11 15:25:22 +02:00
James Cole
89e961319d
Another attempt.
2026-07-11 15:23:28 +02:00
James Cole
c32ebb1691
Fix workflow job.
2026-07-11 15:20:58 +02:00
James Cole
ec003f4398
Better step skip
2026-07-11 15:16:03 +02:00
James Cole
bd5a8f3745
Use "if"-statement to skip step.
2026-07-11 15:14:05 +02:00
James Cole
37552dbdba
Workflow edits.
2026-07-10 22:41:15 +02:00
James Cole
e84bff6c51
Try to speed up some steps.
2026-07-10 22:34:20 +02:00
James Cole
d8f95e2e37
Also build v1
2026-07-09 20:04:33 +02:00
James Cole
6ab228bd0e
Still need to build v1.
2026-07-09 20:03:19 +02:00
James Cole
def641ad36
Committed to the wrong branch, damn.
2026-07-09 19:51:52 +02:00
James Cole
81ab6a576c
Add step
2026-07-09 19:34:54 +02:00
James Cole
0211347d9a
Clean up for v3.
2026-07-09 19:30:50 +02:00
James Cole
b4dcbc2d94
Expand security policy
2026-07-04 06:29:10 +02:00
James Cole
b48a40f1e2
Update pr-reply-no-disclosure.yml
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-07-03 05:51:49 +02:00
James Cole
1b8bb452c3
Enhance PR reply workflow to include github-actions check
...
Added check for 'github-actions' author to prevent processing.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-07-03 05:48:05 +02:00
James Cole
8f71ff061d
Fix workflow.
2026-06-30 19:20:24 +02:00
James Cole
1136eb8542
Update security.md to specify SSRF and DNS issues
...
Clarified security advisory guidelines regarding SSRF and DNS/hostname issues.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-06-30 18:42:08 +02:00
dependabot[bot]
999e52c857
Bump actions/checkout from 6 to 7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 03:52:53 +00:00
James Cole
ea51e47a66
Update release.yml
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-06-19 05:44:41 +02:00
James Cole
d2d94bdc38
Add JSON generation step for v3 in release workflow
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-06-19 05:17:08 +02:00
James Cole
91ab6ec55b
Fix branch checkout logic in release workflow
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-06-19 05:01:21 +02:00
James Cole
4229196713
Fix branch checkout logic in release workflow
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-06-19 04:56:37 +02:00
James Cole
515522cbb1
Update release.yml
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-06-19 04:53:23 +02:00
James Cole
66af080b09
Update lock-threads action to use dessant version
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-28 05:10:49 +02:00
James Cole
2c14a605e4
Remove AI assistance disclosure comments
...
Removed AI assistance disclosure comments from the workflow.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-21 12:32:32 +02:00
James Cole
f00852aa6a
Merge branch 'main' into develop
2026-05-21 06:22:28 +02:00
James Cole
195fb6cdb7
Update pr-reply-no-disclosure.yml
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-21 06:07:37 +02:00
James Cole
8b0f790a56
Merge branch 'main' into develop
2026-05-20 20:18:10 +02:00
James Cole
b70ed32952
Merge pull request #12271 from alanturing881/fix/stored-xss-ale-piggy-name
...
Fix stored XSS in audit log view via piggy bank name (ale.twig)
2026-05-20 20:16:16 +02:00
James Cole
9e511c822e
Update pr-reply-no-disclosure.yml
...
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-20 20:12:40 +02:00
James Cole
ec1dfca2b5
Enhance PR workflow to check for author
...
Added logic to check for the author of the pull request.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-19 08:15:40 +02:00
James Cole
fe0e8796ca
Merge branch 'main' into develop
2026-05-17 04:50:57 +02:00
James Cole
e83c5b9f86
New workflow.
2026-05-17 04:50:34 +02:00
James Cole
9558f05947
Merge branch 'main' into develop
2026-05-17 04:29:39 +02:00
James Cole
9436eeacaf
Update warning about AI-generated security advisories
...
Clarified consequences of reporting AI-generated security advisories.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-17 03:44:01 +02:00
James Cole
e059753c43
Merge branch 'main' into develop
2026-05-16 20:39:12 +02:00
James Cole
2a68c48e2a
Update security reporting guidelines in security.md
...
Clarified instructions for reporting false security issues.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-16 20:05:44 +02:00
James Cole
c394034876
Clarify AI hallucinations in security reporting
...
Reworded the third point to clarify AI hallucinations in security issues.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-16 20:05:20 +02:00
James Cole
7bd91048ea
Update security.md with reporting guidelines
...
Clarified reporting guidelines for security issues to prevent false reports.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-16 20:03:49 +02:00
James Cole
d64bca7700
Merge branch 'main' into develop
2026-05-16 19:54:22 +02:00
James Cole
7d768cfa23
Add AI-generated security advisories section
...
Added a section regarding AI-generated security advisories to clarify reporting policies and potential consequences.
Signed-off-by: James Cole <james@firefly-iii.org >
2026-05-16 19:52:56 +02:00
James Cole
fd50fbf193
Merge branch 'main' into develop
2026-05-12 18:48:04 +02:00
dependabot[bot]
8cf8e91448
Bump actions/dependency-review-action from 4 to 5
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-11 03:56:03 +00:00