aboutsummaryrefslogtreecommitdiff
path: root/.github
AgeCommit message (Collapse)AuthorFilesLines
2025-04-20build(deps): bump astral-sh/setup-uv in the github-actions group (#312)dependabot[bot]1-1/+1
Bumps the github-actions group with 1 update: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `astral-sh/setup-uv` from 5.4.1 to 5.4.2 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/0c5e2b8115b80b4c7c5ddf6ffdd634974642d182...d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 5.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-20undo depot for now until I have the corp set upXe Iaso7-7/+7
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-17.github/funding: add GitHub sponsorsXe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-15build(deps): bump github/codeql-action in the github-actions group (#264)dependabot[bot]1-1/+1
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 3.28.13 to 3.28.15 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1b549b9259bda1cb5ddde3b41741a82a2d15a841...45775bd8235c68ba998cffa5171334d58593da47) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.28.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-15build(deps): bump the gomod group with 3 updates (#265)dependabot[bot]1-2/+2
* build(deps): bump the gomod group with 3 updates Bumps the gomod group with 3 updates: [github.com/playwright-community/playwright-go](https://github.com/playwright-community/playwright-go), [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) and [golang.org/x/net](https://github.com/golang/net). Updates `github.com/playwright-community/playwright-go` from 0.5001.0 to 0.5101.0 - [Release notes](https://github.com/playwright-community/playwright-go/releases) - [Commits](https://github.com/playwright-community/playwright-go/compare/v0.5001.0...v0.5101.0) Updates `github.com/prometheus/client_golang` from 1.21.1 to 1.22.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.21.1...v1.22.0) Updates `golang.org/x/net` from 0.38.0 to 0.39.0 - [Commits](https://github.com/golang/net/compare/v0.38.0...v0.39.0) --- updated-dependencies: - dependency-name: github.com/playwright-community/playwright-go dependency-version: 0.5101.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/prometheus/client_golang dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/net dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com> * internal/test: bump playwright version Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Xe Iaso <me@xeiaso.net>
2025-04-13use depot builders (#262)Xe Iaso7-7/+7
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-11workflows: hash pin more Actions (#241)Patrick Linnane2-9/+9
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-04-08workflows: hash pin Actions (#203)Patrick Linnane5-24/+24
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-04-07move pull request template to a hidden folderXe Iaso1-0/+11
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-06.github/workflows/package-builds-stable: allow write permissions to upload ↵Xe Iaso1-1/+1
binary packages Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-06make a half-baked tarball (#221)Xe Iaso2-2/+2
* make a half-baked tarball Closes #217 Signed-off-by: Xe Iaso <me@xeiaso.net> * make two tarballs: one with just the vendor, and one with vendor and npm Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-06package.json: fix build command (#230)Xe Iaso1-1/+1
Closes #225 Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-04implement packaging proof of concept with yeet (#194)Xe Iaso2-0/+157
* implement packaging proof of concept with yeet Signed-off-by: Xe Iaso <me@xeiaso.net> * docs/developer: add local dev docs for yeet Signed-off-by: Xe Iaso <me@xeiaso.net> * apply review feedback Signed-off-by: Xe Iaso <me@xeiaso.net> * build package artifacts in CI Signed-off-by: Xe Iaso <me@xeiaso.net> * tell CI to fetch all git metadata Signed-off-by: Xe Iaso <me@xeiaso.net> * rename package builds job Signed-off-by: Xe Iaso <me@xeiaso.net> * upload each package individually Signed-off-by: Xe Iaso <me@xeiaso.net> * split package build CI jobs Signed-off-by: Xe Iaso <me@xeiaso.net> * fix code injection? Signed-off-by: Xe Iaso <me@xeiaso.net> * fix ci? Signed-off-by: Xe Iaso <me@xeiaso.net> * fix security alert Signed-off-by: Xe Iaso <me@xeiaso.net> * docs/local-dev: point people to yeet v1.13.3 Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-04-02build(deps): bump actions/cache from 3 to 4 in the github-actions group (#198)dependabot[bot]1-1/+1
Bumps the github-actions group with 1 update: [actions/cache](https://github.com/actions/cache). Updates `actions/cache` from 3 to 4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02dependabot: enable (#189)Patrick Linnane1-0/+28
* dependabot: enable Signed-off-by: Patrick Linnane <patrick@linnane.io> * dependabot: group updates Signed-off-by: Patrick Linnane <patrick@linnane.io> --------- Signed-off-by: Patrick Linnane <patrick@linnane.io> Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: Xe Iaso <me@xeiaso.net>
2025-04-01workflows: fix zizmor findings (part 1) (#190)Patrick Linnane4-1/+9
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-04-01ci: add `zizmor` (#188)Patrick Linnane1-0/+35
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-03-29Add staticheck to CI (#152)Xe Iaso1-2/+6
* Add staticheck to CI Signed-off-by: Xe Iaso <me@xeiaso.net> * fix staticcheck warnings Signed-off-by: Xe Iaso <me@xeiaso.net> * oh, right, playwright is broken Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-28all: do not commit generated JS/CSS to source control (#148)Xe Iaso3-10/+57
Closes #125 Closes #40 Among other things, this moves all of the asset generation to run within the context of an npm script. Developer documentation stubs have been added so that people can get started more easily. The top-level Dockerfile (which is no longer used in production) has been removed as its presence has been causing confusion. This changeset will break it anyways. These changes will make for less "repo churn" as the static assets are built and rebuilt, at the cost of making the build step more complicated for downstream packagers. If this becomes a burden, we can explore making a "release tarball" that contains pre-massaged outputs.
2025-03-27Apply bits of the cookie settings PR one by one (#140)Xe Iaso1-1/+6
Enables uses to change the cookie domain and partitioned flags. Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-22Refactor and split out things into cmd and lib (#77)Yulian Kuncheff1-0/+8
* Refactor anubis to split business logic into a lib, and cmd to just be direct usage. * Post-rebase fixes. * Update changelog, remove unnecessary one. * lib: refactor this This is mostly based on my personal preferences for how Go code should be laid out. I'm not sold on the package name "lib" (I'd call it anubis but that would stutter), but people are probably gonna import it as libanubis so it's likely fine. Packages have been "flattened" to centralize implementation with area of concern. This goes against the Java-esque style that many people like, but I think this helps make things simple. Most notably: the dnsbl client (which is a hack) is an internal package until it's made more generic. Then it can be made external. I also fixed the logic such that `go generate` works and rebased on main. * internal/test: run tests iff npx exists and DONT_USE_NETWORK is not set Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: install deps Signed-off-by: Xe Iaso <me@xeiaso.net> * .github/workflows: verbose go tests? Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: sleep 2 Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: nix this test so CI works Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: warmup per browser? Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: disable for now :( Signed-off-by: Xe Iaso <me@xeiaso.net> * lib/anubis: do not apply bot rules if address check fails Closes #83 --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: Xe Iaso <me@xeiaso.net>
2025-03-22Fix docker image CI for pull requests (#84)Xe Iaso2-22/+44
Closes #65 Pull request images will now be `ttl.sh/techaro/pr-{number}/anubis:24h`.
2025-03-21.github/workflows: don't publish provenance data for PRsXe Iaso1-0/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-21comment out the comment PR experiment for now, ugh, I hate GitHub ACLsXe Iaso1-10/+10
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-21off by oneXe Iaso1-0/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-21.github/workflows/docker: only do comments if we're in a PRXe Iaso1-0/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-21cmd/containerbuild: default to ttl.sh for third party contributions (#51)Xe Iaso1-0/+12
* cmd/containerbuild: default to ttl.sh for third party contributions Closes #48 Signed-off-by: Xe Iaso <me@xeiaso.net> * track comment tags Signed-off-by: Xe Iaso <me@xeiaso.net> * empty commit to make sure double-commenting doesn't work Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-20add docs site based on docusarus (#35)Xe Iaso1-0/+61
* add docs site based on docusarus Closes #2 Signed-off-by: Xe Iaso <me@xeiaso.net> * docs: deploy to aeacus Signed-off-by: Xe Iaso <me@xeiaso.net> * ready for merge Signed-off-by: Xe Iaso <me@xeiaso.net> * docs: fix anubis port Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-19Try using ko to build imagesXe Iaso1-10/+14
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-19add FUNDING fileXe Iaso1-0/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-18make docker image for AnubisXe Iaso1-0/+61
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-17.github/workflows/go: make this slower for nowXe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-17initial import from /x/ monorepoXe Iaso1-0/+62
Signed-off-by: Xe Iaso <me@xeiaso.net>
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-01 11:36:04 +0000