adam/forgejo
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/forgejo.git synced 2026-10-07 16:28:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

base: adam:a8a8eac7c27b0559d43f109534abe7927705df4a
Branches Tags
adam:main
adam:chore/enqueue-as-seahaven-bot
...
compare: adam:277205a268f2a06ecc11fbf24594b0b597c75238
Branches Tags
adam:main
adam:chore/enqueue-as-seahaven-bot

7 commits
a8a8eac7c2 ... 277205a268

Author SHA1 Message Date
dependabot[bot]
277205a268
chore(deps): bump constructs from 10.8.0 to 10.8.1 
Bumps [constructs](https://github.com/aws/constructs) from 10.8.0 to 10.8.1.
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](https://github.com/aws/constructs/compare/v10.8.0...v10.8.1)

---
updated-dependencies:
- dependency-name: constructs
  dependency-version: 10.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-07 11:51:16 -04:00
dependabot[bot]
ab03da6d9f
chore(deps): bump aws-cdk from 2.1134.0 to 2.1135.0 (#78) 
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) from 2.1134.0 to 2.1135.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1135.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk
  dependency-version: 2.1135.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-07 15:49:44 +00:00
dependabot[bot]
bb6902ef8e
chore(deps): bump callable-dependency-review.yaml (#73)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github) from 1.0.4 to 1.0.6.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](81cf168170...7ac3528750)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-07 11:44:09 -04:00
dependabot[bot]
00be78169a
chore(deps): bump callable-labeler.yaml (#75) 
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github) from 1.0.4 to 1.0.6.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](81cf168170...7ac3528750)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-07 15:21:45 +00:00
dependabot[bot]
23233d40c2
chore(deps): bump cd-cdk.yaml (#76) 
Bumps [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github) from 1.0.4 to 1.0.6.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](81cf168170...7ac3528750)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-07 15:11:40 +00:00
dependabot[bot]
7cc5283d02
chore(deps): bump ci-typescript-cdk.yaml (#74) 
Bumps [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github) from 1.0.4 to 1.0.6.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](81cf168170...7ac3528750)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-07 15:04:38 +00:00
Adam Moussa
32786de262
fix(scripts): ensure temp GCP SA key cleanup via EXIT trap (SEC-28) (#70) 
* chore(deps): bump aws-cdk-lib from 2.262.2 to 2.263.0

Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) from 2.262.2 to 2.263.0.
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.263.0/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.263.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps-dev): bump tsx from 4.23.1 to 4.23.5

Bumps [tsx](https://github.com/privatenumber/tsx) from 4.23.1 to 4.23.5.
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.5)

---
updated-dependencies:
- dependency-name: tsx
  dependency-version: 4.23.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: add trap to ensure temp key file removal after GCP SA key creation

* fix(scripts): delete temp GCP key before success message

* chore(deps): drop cdk-lib and tsx bumps from this PR

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-07 10:58:30 -04:00
7 changed files with 15 additions and 14 deletions
Show stats Expand all files Collapse all files

2
.github/workflows/ci.yaml vendored
View file

@ -8,7 +8,7 @@ permissions:
jobs:
ci:
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6
with:
node-version: "24"
enable-qemu: true

2
.github/workflows/dependency-review.yml vendored
View file

@ -7,4 +7,4 @@ permissions:
jobs:
review:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6

2
.github/workflows/deploy.yaml vendored
View file

@ -13,7 +13,7 @@ concurrency:
jobs:
deploy:
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6
with:
node-version: "24"
enable-qemu: true

2
.github/workflows/labeler.yml vendored
View file

@ -10,4 +10,4 @@ permissions:
jobs:
label:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6

16
package-lock.json generated
View file

@ -10,14 +10,14 @@
"dependencies": {
"@aws-cdk/aws-lambda-python-alpha": "2.257.0-alpha.0",
"aws-cdk-lib": "2.262.2",
"constructs": "^10.8.0"
"constructs": "^10.8.1"
},
"bin": {
"app": "bin/app.js"
},
"devDependencies": {
"@types/node": "^24",
"aws-cdk": "^2.1134.0",
"aws-cdk": "^2.1135.0",
"source-map-support": "^0.5.21",
"tsx": "~4.23.1",
"typescript": "~7.0.2"
@ -877,9 +877,9 @@
}
},
"node_modules/aws-cdk": {
"version": "2.1134.0",
"resolved": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.1134.0.tgz",
"integrity": "sha512-Fy/g+gdpMpkhAAoCNlZtX0s4mD7q58bHlDV6QfbnTeifmQ5cEge26c5rB+U4qKB/bDudxNuJjQk/mSSk0ysnug==",
"version": "2.1135.0",
"resolved": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.1135.0.tgz",
"integrity": "sha512-Vfz2kllheB+8y9audOtcw0qo0v6EnjxfO2pK7x6eSulHmD0GaAvkqrg6MF+20wxE2KTyuY1UDBzICO+nHUaFtA==",
"dev": true,
"license": "Apache-2.0",
"bin": {
@ -1108,9 +1108,9 @@
"license": "MIT"
},
"node_modules/constructs": {
"version": "10.8.0",
"resolved": "https://registry.npmjs.org/constructs/-/constructs-10.8.0.tgz",
"integrity": "sha512-pJHp2CxvTG0ttp52rZvQfkbspPLZzttWPooIRLBwlZK8rV7ZhkjIkyZWJhIfBDC4YdcwIDmXyUFr1ieJaqjBbg==",
"version": "10.8.1",
"resolved": "https://registry.npmjs.org/constructs/-/constructs-10.8.1.tgz",
"integrity": "sha512-98yGXYyhePqPYh3cYu8nzBERmAhC0DONe3UD03okK0nehZ7hYP4wgZuf02a04+uOWxnTJ5Rpp5m0GRNpwyLGGA==",
"license": "Apache-2.0"
},
"node_modules/esbuild": {

4
package.json
View file

@ -13,7 +13,7 @@
},
"devDependencies": {
"@types/node": "^24",
"aws-cdk": "^2.1134.0",
"aws-cdk": "^2.1135.0",
"source-map-support": "^0.5.21",
"tsx": "~4.23.1",
"typescript": "~7.0.2"
@ -21,6 +21,6 @@
"dependencies": {
"@aws-cdk/aws-lambda-python-alpha": "2.257.0-alpha.0",
"aws-cdk-lib": "2.262.2",
"constructs": "^10.8.0"
"constructs": "^10.8.1"
}
}

1
scripts/gcp-setup.sh
View file

@ -102,6 +102,7 @@ echo "Granted objectViewer to $SA_EMAIL."
echo ""
echo "--- Step 9: Create and store service account key ---"
KEY_FILE=$(mktemp)
trap 'rm -f "$KEY_FILE"' EXIT
$GCLOUD iam service-accounts keys create "$KEY_FILE" --iam-account="$SA_EMAIL"
echo "Service account key created."